and audit concepts accurately Deep, demonstrable understanding and practical knowledge of ISO 27001 (InformationSecurityManagement Systems). Must be able to explain the ISMS structure, risk assessment process, and Annex A controls accurately Strong familiarity and understanding of ISO 42001 (Artificial Intelligence Management Systems) and its core principles/ More ❯
Environmental ManagementSystem with guidance for use", OHSAS 18001:2017 Occupational Health and Safety Management Systems and ISO/IEC 27001:2013 InformationSecurityManagementSystem, Policies, Plans, Procedures and Processes, and statutory requirements as they affect the Joint Venture 's operations and ensure that the requirements, as applicable within More ❯
Carlisle, England, United Kingdom Hybrid / WFH Options
DesScanlanITRecruitment
ongoing program of security assurance covering all aspects of ISO27001 and the controls set out in the Business. Support the management of the InformationSecurityManagementSystem on behalf of the Business and ensure compliance with its components. Assist in updating assurance owned documentation and proactively managing the assurance audit More ❯
Southampton, Hampshire, United Kingdom Hybrid / WFH Options
Kingfisher plc
with stakeholder and business requirements whilst supporting the Group CISO being responsible for cyber and informationsecurity risk. Implement and lead the Group's ISMS ensuring the Group remains in compliance with security standards and regulatory requirements, maintaining certification where relevant. Partner with Group Audit and Risk teams to ensure More ❯
Southampton, Hampshire, United Kingdom Hybrid / WFH Options
ENGINEERINGUK
with stakeholder and business requirements whilst supporting the Group CISO being responsible for cyber and informationsecurity risk. Implement and lead the Group's ISMS ensuring the Group remains in compliance with security standards and regulatory requirements, maintaining certification where relevant. Partner with Group Audit and Risk teams to ensure More ❯
the Framework used by thousands of organisations, including developing a relationship between the controls framework and contemporary contextual cybersecurity risks. Developing and operating our ISMS, and all that this entails: You will also be responsible for maintaining our ISO 27001 and Cyber Essentials certifications-and other security-related compliance accreditations More ❯
team in developing and implementing group-wide cybersecurity strategies. Proactive monitoring: Continuously monitor the technology estate to ensure compliance and maintain a strong security posture. ISMSmanagement: Coordinate the improvement and maintenance of the InformationSecurityManagementSystem (ISMS) in line with ISO 27001 and Cyber Essentials. Experience Required: Information … SecurityManagement: Extensive experience in implementing and maintaining ISMS and achieving ISO 27001 certification. Proven track record managing security accreditations (Cyber Essentials, Cyber Essentials Plus). Strong expertise in informationsecurity risk management, data protection, and compliance frameworks (GDPR). Technical Expertise: Solid understanding of IT architecture, organisational governance, and More ❯
Environmental ManagementSystem with guidance for use", OHSAS 18001:2017 Occupational Health and Safety Management Systems and ISO/IEC 27001:2013 InformationSecurityManagementSystem, Policies, Plans, Procedures and Processes, and statutory requirements as they affect the Joint Venture 's operations and ensure that the requirements, as applicable within More ❯
Bristol, Gloucestershire, United Kingdom Hybrid / WFH Options
AtkinsRéalis
can bring? Essential: Experience of delivering technical Cyber Security consultancy in multi-disciplined environments. Experience of Information Assurance, and developing InformationSecurityManagement Systems (ISMS), including risk assessments/management and the deployment of appropriate controls. An excellent communicator, verbal (active listener) and written (able to write concisely). Ability More ❯
bristol, south west england, united kingdom Hybrid / WFH Options
AtkinsRéalis
can bring: Essential- Experience of delivering technical Cyber Security consultancy in multi-disciplined environments. Experience of Information Assurance, and developing InformationSecurityManagement Systems (ISMS), including risk assessments/management and the deployment of appropriate controls. An excellent communicator, verbal (active listener) and written (able to write concisely). Ability More ❯
to operate safely and securely. Support vulnerability management activities such as vulnerability assessments and security control assessments. Support the maintenance of the programme InformationSecurityManagementSystem (ISO27001). Support the InformationSecurity Manager to deliver InformationSecurity best practices across the programme. Create and maintain high quality security documentation More ❯
to operate safely and securely. Support vulnerability management activities such as vulnerability assessments and security control assessments. Support the maintenance of the programme InformationSecurityManagementSystem (ISO27001). Support the InformationSecurity Manager to deliver InformationSecurity best practices across the programme. Create and maintain high quality security documentation More ❯
Corsham, Wiltshire, United Kingdom Hybrid / WFH Options
Babcock Mission Critical Services España SA
to operate safely and securely. Support vulnerability management activities such as vulnerability assessments and security control assessments. Support the maintenance of the programme InformationSecurityManagementSystem (ISO27001). Support the InformationSecurity Manager to deliver InformationSecurity best practices across the programme. Create and maintain high quality security documentation More ❯
lead HowNow's informationsecurity function, working cross-functionally to align with business needs. Maintain and evolve our ISO 27001 certification and manage the ISMS lifecycle. Governance, Risk & Compliance: Perform regular risk assessments, manage remediation plans, and conduct internal audits. Ensure compliance with data protection laws (e.g., GDPR) and customer More ❯
Guildford, Surrey, United Kingdom Hybrid / WFH Options
Sycurio
the informationsecurity strategy to relevant parties and providing assurance of policies, procedures, and systems. Develop, maintain, and expand the informationsecuritymanagementsystem ('ISMS') to optimise compliance for ISO27001, PCI-DSS, and SOC2. Identify gaps in the informationsecurity capability, both technical and operational, and propose remediation and mitigation More ❯
the following InformationSecurity certifications required: CISSP, CISM or ISO 27001 Lead Implementer. One of the following Audit certifications required: CISA, GSNA, CIA, IRCA ISMS Auditor or higher, or ISO 27001 Lead Auditor. Bachelor's degree (four-year college or university) or equivalent combination of education and work experience. Strong More ❯
bristol, south west england, united kingdom Hybrid / WFH Options
AtkinsRéalis
can bring: Essential- Experience of delivering technical Cyber Security consultancy in multi-disciplined environments. Experience of Information Assurance, and developing InformationSecurityManagement Systems (ISMS), including risk assessments/management and the deployment of appropriate controls. An excellent communicator, verbal (active listener) and written (able to write concisely). Ability More ❯
North Lanarkshire, Scotland, United Kingdom Hybrid / WFH Options
Net Talent
Responsibilities We are seeking an experienced InformationSecurity Analyst to safeguard client’s digital assets and ensure alignment with their InformationSecurityManagementSystem (ISMS). You’ll lead the design, implementation, and monitoring of security controls, supporting the group of companies in compliance with global frameworks. You’ll manage … experience with ISO 27001, NIST CSF/SP 800-53, GDPR compliance, and risk management Strong technical expertise in implementing security controls aligned with ISMS Ability to create clear, audience-tailored documentation and reports Effective problem-solving and the ability to translate security needs into business actions Strong collaboration and More ❯
Location: London (Hybrid - 2 Days Onsite a Week) Start: ASAP Responsibilities: Security Leadership: Own and lead info security, align with business. ISO 27001 & ISMS: Maintain/evolve certification and ISMS. Risk & Compliance: Risk assessments, remediation, audits, GDPR compliance. Policies & Training: Create/manage policies, deliver security training. Security Operations: Implement More ❯
london, south east england, united kingdom Hybrid / WFH Options
Premier Group
Location: London (Hybrid - 2 Days Onsite a Week) Start: ASAP Responsibilities: Security Leadership: Own and lead info security, align with business. ISO 27001 & ISMS: Maintain/evolve certification and ISMS. Risk & Compliance: Risk assessments, remediation, audits, GDPR compliance. Policies & Training: Create/manage policies, deliver security training. Security Operations: Implement More ❯
internal teams to embed a culture of compliance and readiness. Support the development, implementation, and continuous improvement of the ISO/IEC 27001-aligned ISMS Required Skills & Experience Demonstrable experience leading or supporting a successful SOC 2 and ISO 27001 implementations. Solid understanding of the AICPA Trust Services Criteria and More ❯
The opportunity We're looking for an InformationSecurity Manager to take ownership of Attest's security posture as we scale. Our consumer research platform helps brands make better decisions,keeping our data, people, and customers secure is critical to More ❯
and 3rd Line IT support experience. The role involves day-to-day tasks associated with planning, implementing, and maintaining an InformationSecurityManagementSystem (ISMS), including managing cybersecurity risks, implementing network security measures, and ensuring compliance with industry standards. The InformationSecurity Manager will also provide IT support to the … infrastructure support where you are able to advise and direct the technical team. Qualifications Experience in InformationSecurityManagement and creating and implementing an ISMS Experience in Cybersecurity and Network Security Expertise in Informationsecurity best practices and standards Excellent problem-solving skills and attention to detail Strong communication and More ❯
Experience of gaining and maintaining accreditation for secure/sensitive systems. Experience in producing security documentation sets (such as SyOPS, RMADs, SecurityManagement Plan, ISMS and DART submissions). Bonus If You Have: ITIL including Service Management Roles & Processes. Knowledge of Air Traffic Management or other safety related systems. Demonstrable More ❯
Farnborough, Hampshire, United Kingdom Hybrid / WFH Options
Leidos
Experience of gaining and maintaining accreditation for secure/sensitive systems. Experience in producing security documentation sets (such as SyOPS, RMADs, SecurityManagement Plan, ISMS and DART submissions). Bonus If You Have: ITIL including Service Management Roles & Processes. Knowledge of Air Traffic Management or other safety related systems. Demonstrable More ❯