1 to 25 of 47 Permanent SOC 2 Jobs in the UK excluding London

rigorous security standards expected by our enterprise clients. Responsibilities Own the ISMS: Lead the maintenance of our ISO 27001 certification and spearhead the upcoming SOC 2 Type 2 audit processes. Endpoint & IT Security: Manage our fleet security via MDM (e.g. JumpCloud), ensuring robust encryption, patching, and access … both compliance and technical security engineering. Solid understanding of networking, encryption, and security fundamentals. Proven track record of managing ISO 27001 and successfully delivering SOC 2 audits (ideally in a startup environment). Ability to thrive in a fast-paced startup where you need to be self-directed ...

security roadmap, partnering with engineering to keep infrastructure secure by design and meet enterprise standards. You will own ISMS, manage ISO 27001 certification, SOC 2 Type 2 audits, and oversee cloud security for AWS and Kubernetes. The role requires 4+ years in information security and a strong ...

Risk, Compliance & Documentation Build the Framework: Establish the security governance framework from the ground up policies, standards, procedures and controls aligned to ISO 27001, SOC 2, Cyber Essentials and GDPR. Audit & Compliance: Maintain continuous audit readiness. Own evidence collection, control testing, gap analysis and remediation tracking. … detection engineering, security operations and compliance automation. Direct experience building security governance — writing policies, implementing controls, preparing for and leading audit engagements (ISO 27001, SOC 2, Cyber Essentials, GDPR). Fluent in security frameworks and threat methodologies (MITRE ATT&CK, NIST CSF, CIS Controls, OWASP) with practical application ...

emerging areas such as AI governance and sustainability. Key Responsibilities Governance, Assurance & Compliance Own major certification and assurance programmes including ISO 27001, ISO 9001, SOC 2 and other recognised frameworks. Lead audit planning and execution across multiple standards. Manage cyber insurance, regulatory compliance and third-party assurance activities. … including: Security Strong understanding of cloud and SaaS security models. Experience managing security incidents and post-incident governance. Practical implementation of ISO 27001 and SOC 2 within engineering environments. Deep understanding of UK GDPR, EU GDPR and wider privacy regulations. Knowledge of AI governance, ethics and regulatory considerations. ...

Information Security & Compliance Lead (GRC) Job Title: Information Security & Compliance Lead Location: Oxfordshire - Hybrid 2 days per week on site Industry: Enterprise SaaS/Technology Solutions About the Role We are partnering with a fast-growing, globally active software and data solutions enterprise looking to appoint an experienced Lead … . In this position, you will drive the operational security initiatives necessary to achieve and maintain formal security frameworks and attestation standards (including SOC 2 Type I/II lifecycles). You will translate complex trust criteria into practical, sustainable controls, bridge operational gaps, coordinate external audits, and ...

compliance initiatives across cloud-based and regulated environments Driving audit readiness, compliance programs and evidence-based assurance across frameworks such as ISO 27001, GDPR, SOC 2 and GxP Providing leadership on risk management, governance and security strategy Partnering with customers, auditors and key stakeholders on security reviews, assurance … with experience in several of the following areas: Security leadership, governance, risk and compliance (GRC) Cloud security architecture and security strategy ISO 27001, GDPR, SOC 2, GxP, 21 CFR Part 11 or similar regulated frameworks Audit leadership, customer assurance and certification programs Healthcare technology, pharmaceutical, biotechnology or regulated ...

Compliance Officer (ISO 27001, SOC2, GDPR) Fully Remote (Visit to the Milton Keynes Office once a month) £45,000 - £50,000 + Bonus & Benefits Are you a hands-on compliance professional who thrives on variety and ownership? Do you have experience delivering ISO, SOC & GDPR audit & compliance projects? Join … and governance is critical. You'll manage and maintain ISO 27001, ISO 9001 and ISO 22301 certifications, lead GDPR and data protection compliance, oversee SOC 2 - Type II controls, coordinate business continuity and disaster recovery activities, and support customer audits and due diligence requests. You'll also play ...

exercises. Operate and tune security monitoring and detection tooling (EDR, DLP, SIEM, or similar) to catch and respond to threats quickly. Compliance & Certification Own SOC 2 Type II and ISO 27001/27017/27018 end‐to‐end, from policy design through to audit evidence and the audits … e.g. Okta) and cloud infrastructure security (e.g. AWS). Experience leading security incident response, from investigation through to post‐incident review. Working knowledge of SOC 2 and the ISO 27000 series. Comfortable evaluating and operating security tooling such as EDR, DLP, or SIEM platforms. A strong cross‐functional ...

and Operations on incident governance, escalation, and post-incident remediation tracking. Controls, Certifications & Audit Oversee GRC readiness for external assurance frameworks and certifications, including SOC 2, ISO 27001, and related control programmes. Coordinate internal and external audits and ensure effective follow-through on findings and corrective actions. Maintain … with banking, financial-services, or insurance-sector customers. Familiarity with DORA, EBA outsourcing expectations, or equivalent financial-sector third-party governance requirements. Experience with SOC 2, ISO 27001, and related assurance frameworks. Experience across both Europe and the US. Relevant certifications such as CIPP/E, CRISC, CRCM ...

tenancy and partitioning models that guarantee strict IP isolation for enterprise clients, secure sharing patterns for research partners, and the architectural groundwork for SOC 2 and ISO 27001 readiness. We'll agree concrete deliverables and milestones with you up front, so success is clearly defined on both sides. … Familiarity with modern data stacks: lakehouses, streaming, batch and real-time pipelines High-throughput telemetry, loT, or industrial time-series systems Prior involvement in SOC 2 or ISO 27001 programmes Exposure to scientific, chemical, or manufacturing data Chemistry or AI drug-discovery knowledge Why Join Chemify? Impact ...

and hybrid cloud architectures Proven experience with cloud migration strategies and execution at scale Knowledge of industry standard security frameworks and compliance requirements (e.g., SOC 2, ISO 27001, NIST, HIPAA, PCI-DSS) Expert problem-solving, troubleshooting, and analytical skills Demonstrated leadership abilities including mentoring junior team members Advanced ...

Framework Design Threat Intelligence & Incident Response Advisory Cloud Security (AWS, Azure, GCP) OT/ICS/SCADA Cybersecurity Regulatory Frameworks: NIST CSF, ISO 27001, SOC 2, SAMA, NCA, DPDP, PCI‐DSS Required Skills & Experience Develop and advise on enterprise cybersecurity strategy aligned to business objectives and regulatory mandates. ...

and drive remediation with resource owners. Identify threats through vulnerability assessments, penetration testing support, and log analysis; ensure security controls meet compliance requirements including SOC 2 and ISO 27001. Automate cloud security controls, data collection, and workflows using Python, Bash, cloud APIs, and infrastructure as code to improve ...

Cloud and Zero Trust principles. Own compliance across multiple jurisdictions, including data residency and sovereignty, mapping controls to relevant frameworks (e.g. ISO 27001, SOC 2, GDPR, regional equivalents) and evidencing them for audit. Govern at scale with Azure Policy, authoring definitions and initiatives, applying them across scopes, and … days holiday plus all UK bank holidays 4x life assurance Enhanced family‐friendly leave – 5 months' full pay for maternity or adoption, plus 2 weeks' fully paid paternity/adoption leave and an extra 2 weeks to use as paid annual leave within 24 months of birth ...

and information risks, and achieve or maintain compliance with recognised standards and frameworks including ISO/IEC 27001, Cyber Assessment Framework (CAF), Cyber Essentials, SOC-2, PCI, DSS, GDPR, and other relevant regulatory or contractual requirements. This is a customer-facing consultancy role, requiring confident engagement with senior stakeholders … GDPR and relevant information security standards or best practice frameworks Knowledge of additional frameworks such as CAF, NIS-2, NIST Cybersecurity Framework, CIS Controls, SOC 2, ISO 22301, ISO 27701 or PCI DSS. ExperienceusingGRC,auditmanagement,riskregisterorreporting tools. HoldSC/DVclearanceorwillingnesstoundertakesecurity vetting. MemberofCiSPoranotherrelevantprofessional community. Willingnesstostudyforandattainfurtherrelated qualifications. Experienceofimplementingandmanaging ISO 9001. ...

Network Security Engineer Job Title: IT Security Engineer Location: Oxfordshire - Hybrid (2 days per week on-site) Industry: Enterprise SaaS/Technology Solutions About the Role We are partnering with a rapidly scaling, globally active software and data platform enterprise looking to appoint a dedicated IT Security Engineer … . Framework Knowledge: Solid comprehension of ISO 27001 principles, threat modelling frameworks, vulnerability scanning, risk treatment life-cycles, and secondary compliance standards (e.g., SOC 2 or PCI DSS). Qualifications: Relevant technical diploma or equivalent practical background, reinforced by desirable professional credentials (such as CISSP, CEH, CCNA Security ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

and cloud security (AWS), and you know when to defer Direct experience owning GRC: policies, control frameworks, risk registers, and leading audits (ISO 27001, SOC 2, Cyber Essentials or equivalent) Led security incident response at company level: you’ve owned real incidents, not just contributed to them Managed ...

business before. Bonus points if you've helped shape DevOps roadmaps, mentored others, or worked with cost optimisation, security, or compliance frameworks (ISO, SOC2, etc.). This is more than just another DevOps role - it's a chance to join a company at the perfect stage: profitable, scaling, tech ...

outcomes. Engage with clients to understand their threat landscape and business context, conducting risk and compliance assessments against recognised frameworks (e.g. ISO 27001, NIST, SOC 2). Design, review and advise on the implementation and adoption of information security policies, standards, procedures and frameworks. Lead cyber and third ...

outcomes. Engage with clients to understand their threat landscape and business context, conducting risk and compliance assessments against recognised frameworks (e.g. ISO 27001, NIST, SOC 2). Design, review and advise on the implementation and adoption of information security policies, standards, procedures and frameworks. Lead cyber and third ...

and guardrails Evidence of prior coaching, mentoring, and team leadership Competence in implementing security standards aligned to frameworks such as ISO27001, NIST, CIS or SOC2 Good understanding of policy-as-code and infrastructure-as-code practices Proficiency in operating within regulated or enterprise-scale environments We’re proud ...

business requirements Support the review and refinement of the Services Catalogue, framework and processes for the Security Management functions What youll need More than 2 years of professional experience in an Information Security/Cyber Security function in an international environment and in cooperation with executives. Completed university degree … Technical Skills Expertise across cybersecurity CISM and CRISC certified. Cybersecurity frameworks including NIST CSF, NIST 800-53 and CE+. Information security standards including GDPR, SOC 2 and ISO27K. ...

engineers on the work where threat models matter. You raise the bar through the tooling and patterns you ship, not through review gates. Compliance (SOC 2 today, more as we scale) falls out as evidence of real security work, not as a separate workstream. What we're looking … What you won't find here A GRC role with an engineering title. A queue of CVE tickets to triage. A SOC analyst rota. A compliance‐automation role rebadged as security engineering. This role exists to defend our product against real adversaries, not to manage a control library. ...

eager to learn Desirable experience: Experience in data protection, with a good understanding of relevant data protection legislation (e.g., UK GDPR). ISO 27001, SOC 2, NIST CSF, CAF, HIPAA, DSPT Gap analysis, auditing, or penetration testing Process and procedure development Software or AI development/testing Client ...