1 to 25 of 27 Remote/Hybrid ISO/IEC 27001 Jobs in Bristol

Analyst will help strengthen the organisations overall security posture and support a culture of continuous improvement. The role is expected to start in mid / late October 2026. DUTIES Your duties as the Cyber Security Analyst include: Support Security Compliance: Assist with maintaining compliance with applicable security standards … frameworks, including ISO / IEC 27001, ISO / IEC 27017, ISO / IEC 27018 and Cyber Essentials Plus Assist with Audit Readiness: Support the preparation, coordination and collation of evidence for internal ...

Title: Product Security Engineer Information AssuranceLocation: Ashton Vale, Bristol + Hybrid Working ArrangementsCompensation: Competitive Salary + BenefitsRole Type: Full time / PermanentRole ID: SF75386Shape the future of secure engineering and protect what matters most.At Babcock, we’re working to create a safe and secure world, together. If you join … similarly regulated sectors (desirable).Qualifications for the Product Security Engineer - Information AssuranceRelevant higher education qualification or industry certification such as CISSP, CISM, or ISO27001 Lead Implementer / Auditor.Security ClearanceThe successful candidate must be able to achieve and maintain Security Check (SC) security clearance for this role. Must be Sole ...

Title: Product Security Engineer Information Assurance Location: Ashton Vale, Bristol + Hybrid Working Arrangements Compensation: Competitive Salary + Benefits Role Type: Full time / Permanent Role ID: SF75386 Shape the future of secure engineering and protect what matters most. At Babcock, we’re working to create a safe … regulated sectors (desirable). Qualifications for the Product Security Engineer - Information Assurance Relevant higher education qualification or industry certification such as CISSP, CISM, or ISO27001 Lead Implementer / Auditor. Security Clearance The successful candidate must be able to achieve and maintain Security Check (SC) security clearance for this role. ...

need as an Operational Technology (OT) Cyber Security Consultant 25 years' experience within Operational Technology or Industrial Cyber Security. Experience with OT / ICS environments including SCADA, DCS, PLCs or RTUs . Understanding of Industrial IoT (IIoT) and industrial communications. Knowledge of OT cyber risk, security architecture and monitoring. … Experience within energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum ...

need as an Operational Technology (OT) Cyber Security Consultant 610 years' experience within Operational Technology or Industrial Cyber Security. Strong experience securing OT / ICS environments including SCADA, DCS, PLCs, RTUs and industrial communications . Expertise across Industrial IoT (IIoT), OT cyber risk, security architecture and security monitoring . … projects across energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within ...

operational reality supports the security claims we make to customers, partners and auditors. Lead our assurance and certification activity, including Cyber Essentials Plus, ISO 27001 and other relevant standards. Bring together the security expertise that already exists across the business into one coherent, prioritised programme … similar role, ideally where systems are delivered into and operated within customer environments. A track record of achieving and maintaining certifications such as ISO 27001 and Cyber Essentials Plus, including managing audits. Practical understanding of securing deployed infrastructure, including firewalls, patching, secure configuration and equipment lifecycle ...

business intelligence and decision-making.Digital Systems & CDE ManagementLead the configuration, administration, and optimisation of digital platforms including:Common Data Environments (CDEs)Microsoft 365 / SharePoint OnlineAutodesk and related BIM platformsGovern access controls, workflows, metadata schemas, and automation.Ensure systems support ISO 19650 workflows and digital delivery requirements.Team Leadership … Information Management, Data Science, or a related discipline.Experience aligned to senior-level frameworks (e.g., GKIM Level 6 or equivalent).Professional certifications desirable:Microsoft 365 / AzureISO 19650 PractitionerInformation Governance or Records Management certificationsSecurity RequirementsMust have or be able obtain SC Security Clearance.Additional InformationAt AECOM, we are committed to maintaining ...

levels and support sensible prioritisation of remediation alongside feature delivery and other technical work. Help improve secure software development and delivery practices, including CI / CD and related controls. Support vulnerability remediation, including root cause analysis and long-term fixes. Contribute to security standards, metrics and ways of working … ensure engineering reality supports the security claims we make to customers, partners and auditors. Contribute to wider assurance and certification activity, including ISO 27001 or other relevant standards. Requirements - Product Security Architect - not exhaustive: Strong experience in product security, application security, secure software engineering, security architecture ...

compliance. SFIA Level 5 capability or equivalent experience. Experience within telecommunications, mobile network operators, critical national infrastructure or emergency services. Knowledge of 4G / 5G Core Networks, Radio Access Networks (RAN), IMS, OSS / BSS platforms and network virtualisation (NFV / SDN). Understanding of Zero Trust … more about this Security Assurance Lead opportunity, hit apply or get in touch with Sophie Higginson at Anson McCade for a confidential discussion. AMC / SHI / ...

segregation of duties are consistently embedded by design. Own privileged access strategy and outcomes, including vaulting, session isolation, credential rotation and Just-in-Time / Just-Enough-Access controls - with day-to-day PAM operation delegated to specialist team leads. Own the access governance strategy - including recertification cadence, role … Access Management and Identity Governance & Administration, gained in a complex, regulated environment (financial services strongly preferred). Demonstrable experience leading a multi-year IAM / PAM / IGA transformation programme end-to-end, including target operating model design, tooling modernisation and measurable maturity uplift. Deep working knowledge ...

stewardship . Experience developing governance policies, standards and operating models. Practical experience with AI governance, AI assurance or responsible AI . Understanding of AI / model testing, evaluation and risk assessment. Strong consulting, stakeholder management and communication skills. Desirable: UK Central Government, Defence or regulated-sector experience. Defence, maritime … DMBOK, NIST AI RMF, ISO 23894, ISO 27001 or UK GDPR . MLOps, model monitoring or AI risk / control experience. Benefits: Salary up to £80,000 25 days holiday + bank holidays Private Medical Insurance Hybrid working with 2 days per week ...

location hosting environments supporting business-critical financial systems.Provide oversight of virtualisation platforms (VMware vSphere, NSX), physical compute, and enterprise storage (NetApp SAN / NAS / HCI) through effective team leadership and vendor management.Hosting and Network ManagerDefine and assure backup, disaster recovery, and operational resilience strategies aligned to business … / RTO and regulatory expectations.Establish and enforce infrastructure security baselines and configuration standards aligned with ISO 27001, PCI-DSS, and internal risk frameworks.Drive service improvement through standardisation, automation, and Infrastructure-as-Code initiatives, improving stability, control, and operational efficiency.Manage third-party suppliers and strategic partners ...

location hosting environments supporting business-critical financial systems. Provide oversight of virtualisation platforms (VMware vSphere, NSX), physical compute, and enterprise storage (NetApp SAN / NAS / HCI) through effective team leadership and vendor management . Hosting and Network Manager Define and assure backup, disaster recovery, and operational resilience … strategies aligned to business RPO / RTO and regulatory expectations. Establish and enforce infrastructure security baselines and configuration standards aligned with ISO 27001, PCI-DSS, and internal risk frameworks. Drive service improvement through standardisation, automation, and Infrastructure-as-Code initiatives, improving stability, control, and operational ...

WORKING Location: Manchester; Bristol; Leeds; Glasgow; Birmingham; , Central London, Greater London - United Kingdom Type: Permanent Security Consultant United Kingdom Up to £85,000 S / C Clearable Ready to protect the systems that underpin the UK's most critical public services? We're hiring a Security Consultant to work … annum • Extensive benefits package • Continuous training provided for career progression To hear more about the Security Consultant role contact Daire McIlhatton at Reference: AMC / DMI / SC #damc ...

Description Cyber Security GRC Consultant (DV Cleared) Location: Hybrid / South West Region Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within … culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD / Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce ...

Jersey, Leeds, Liverpool, London, Manchester, Milton Keynes, Newcastle, Nottingham, Port Talbot, Reading, Southampton, St Albans Business Line Technology & Transformation Job Type Permanent / FTC Date published 13-Aug-2026 Req # 24465 Job description Connect to your IndustryDo you want to be at the heart of some … NIST, CIS).Experience as a Security Architect or in a similar role, with a strong track record of designing and implementing security controls and / or solutions and leading technical teams.Experience with architecture methodology such as TOGAF or SABSAExperience of threat and risk modellingStrong understanding of network security, encryption ...

area, gained through education, professional work, or equivalent experience. (5+ years exp)Substantial experience in Cyber Security, including practical experience securing AI systems and / or public cloud applications. (5+ years exp)Solid understanding of cyber security principles and controls, including identity & access management (IAM), encryption, network security … secure application design.Hands-on experience in public cloud security engineering and / or in the configuration / operation of security tooling, such as Web Application Firewalls (WAFs). (2+ years exp)Solid knowledge of AI technologies including machine learning concepts, common model architectures, and emerging generative AI capabilities.Experience ...

between technical findings and the risk decisions that senior leaders need to make. You'll bring the judgement to know when a full ISO 27001 governance programme is appropriate and when a lighter-weight approach serves the engagement better. At Lead level, your impact extends beyond … attack trees - and experience embedding these into agile delivery ceremonies Experience integrating SAST, SCA, dependency scanning, and container security tooling into CI / CD pipelines as part of a shift-left security approach Made Tech sponsors attainment of recognised cyber certifications for staff in scope. ...

Location: Bristol / Hybrid (2-3 days on-site) Security Clearance: Must have active SC clearance (DV Preferred) The Role We are looking on behalf of our client, a leading defence consultancy, for an AI & Data Governance Lead to establish and oversee robust framework models for AI deployments across … leaders. Requirements Proven background in data governance, risk management, or AI ethics within defence, aerospace, or government sectors. Strong working knowledge of ISO 27001 (Information Security Management) and ISO 42001 (Artificial Intelligence Management System). Hands-on understanding of data management principles, MLOps lifecycles ...

solutions, vulnerability scanners and hardening baselines. Managing firewalls, VPNs, secure remote access and segmentation controls. Improving detection and response by working closely with SIEM / SOC teams. Ensuring critical logging, monitoring and compliance standards are always met. Automating deployments and controls using PowerShell, Python, Terraform or similar tools. Supporting … with: Strong hands-on experience with network infrastructure and security, segmentation, firewalls, endpoint security, XDR and access control . Experience securing Cloud ( Azure and / or AWS) and on-premise environments. A security-first mindset and confidence working with both technical and non-technical stakeholders. Knowledge of frameworks such ...

solutions are built and operated in line with security standards. The role aligns to three key areas: supporting safe adoption, understanding attacker use / exploitation of AI, and applying AI to enhance security capability.Why Join us? If you think all banks are the same, you’re wrong. … interest in and understanding of AI technologies, including machine learning concepts and generative AI use cases.Familiarity with security frameworks and regulations such as ISO 27001, NIST, or UK GDPR, and how these apply to AI systems.Experience supporting technical implementation, validation, and testing of security controls within ...

Drive secure architecture at scale Define and assure enterprise, solution, and system-level security architectures Apply and tailor security frameworks such as NIST, ISO 27001, SABSA and Zero Trust principles Ensure systems are secure by design, proportionate, and aligned to mission objectives Own risk and assurance ...

position is 90% information security and 10% network engineering, and offers hybrid working with three days onsite in Bristol. A strong background in ISO27001, NIST and SOC coordination is essential. #J-18808-Ljbffr ...

design from concept to operation with hybrid working between onsite Ashton Vale and home offices. You will implement IA strategies, lead risk management per ISO27001 / NIST, create security documentation, and liaise with stakeholders to assure robust protection across projects. #J-18808-Ljbffr ...

Basic information Location Bristol, London Business Line Technology & Transformation Job Type Permanent / FTC Date published 03-Aug-2026 Req # 24165 Job description Connect to your IndustryCyber security is critical to every organisation. We are shaping strategies and transforming the management of cyber risk, and we need … maturity, security architecture, cyber transformation and regulatory compliance for cyber.Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2.Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk.Desire to work with ...