5 of 5 Permanent ISO 31000 Jobs in the UK excluding London

established risk process, relevant controls and support internal and external assessments* Support the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.* Provide subject matter expert input in maintenance of relevant process documentation as required in addition … process, ToRs, training, etc.**Skills and Experience*** Has experience in Risk Management role* Experience in monitoring compliance with security accreditations/standards such as ISO 31000, ISO 27005 and ISO 27001 (or similar security standards)* Good communication and engagement skills are vital for this role ...

principles. Experience in AI governance, AI assurance, model validation, data science, or AI engineering environments. Knowledge of AI regulations, standards, and frameworks, including ISO 42001, GDPR, the EU AI Act, NIST AI RMF, or similar. Experience conducting risk assessments, compliance reviews, and Data Protection Impact Assessments (DPIAs). Strong … machine learning deployments on major cloud platforms such as AWS, Azure, or Google Cloud. Knowledge of risk management and information security frameworks, including ISO 31000, ISO 27001, or related standards. Experience using governance, risk, and compliance platforms such as OneTrust, Vanta, or similar tools. Strong research ...

lifecycles (SDL) Good understanding of enterprise-scale security management process and infrastructure Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle) Experience of transactional revenue systems, embedded systems, smartcards … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth ...

contractual obligations and risk tolerances. Internal Audit Support the successful renewal and ongoing maintenance of Clyde & Co's Cyber Essentials, Cyber Essentials Plus, and ISO 27001 certifications by coordinating evidence collection, tracking remediation activities, engaging stakeholders and assisting with audit requirements. Reporting, Governance and Continual Improvement Facilitate/establish … essential. Operational knowledge of one or more international information security standards, risk management and control frameworks/practices e.g. ISF SOGP, ISO27001/2, ISO31000, IRAM2, NIST 800-53 or CSF and SOC2 reporting. Demonstrable experience of having worked with one or more of the following: - Third Party Risk Management ...

access reviews, segregation of duties, system changes, and other IT controls. Help develop and enhance processes, controls, and procedures that support both SOX and ISO 27001 compliance frameworks. Maintain accurate, audit-ready documentation, control evidence, and compliance records. Partner with the Governance, Risk & Compliance team to identify control gaps … within ERP environments, including user access management, segregation of duties, and change management controls. Familiarity with information security, governance, and risk frameworks such as ISO 27001 and ISO 31000. Experience supporting internal and external audits and working with auditors and regulatory bodies. Knowledge of control automation tools ...