1 to 25 of 38 ISO/IEC 27001 Jobs in the City of London

network security, logging, monitoring and data protection. Leading and supporting threat modelling, attack surface analysis and risk assessments, including TARA to ISO / SAE 21434 , from item definition through to attack feasibility rating and risk treatment. Defining and embedding security requirements across the secure development lifecycle, covering … firmware, embedded systems, cloud services, APIs, CI / CD and software supply-chain security. Improving vulnerability intake, triage, remediation and reporting, plus SBOM / dependency visibility and product security incident readiness. Communicating complex risks to technical and non-technical stakeholders and producing assurance-grade documentation. What we need ...

Senior Information Security Analyst - Audit & Compliance ISO27001, SOC2, PCI-DSS, NIST, GDPR London (Barbican). Hybrid. 2 days a week onsite. Up to £100k plus 8% bonus, pension, private medical etc We're working with a global technology partner to find a certified Information Security Analyst. This is a fantastic … SOC2, PCI DSS, Cyber Essentials) Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal / external audits and compliance assessments. Relevant security / audit certifications (CISA, CISM, CISSP, ISO 27001 Lead Auditor, Cyber Essentials Assessor ...

Support Assistant / AV Specialist / Unified Communications Analyst A fantastic opportunity has arisen for a AV Support Assistant / AV Specialist / Unified Communications Analyst to join our London based global law firm on permanent basis. AV Support Assistant / AV Specialist / … PowerPoint, and Excel - Knowledge of Remote Access systems and focusing on supporting remotely - Understanding of ITIL (v2 or v3), understanding of ISMS / ISO27001 would be desirable. AV Support Assistant / AV Specialist / Unified Communications Analyst In accordance with the Employment Agencies and Employment Businesses Regulations ...

advanced threat detection programmes Own the vulnerability management programme Implement enterprise frameworks including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI / ML for predictive security, and set the technology vision Lead the Security Incident Response Programme Governance, risk, and compliance (GRC) Define … programme, including the ISMS, policy framework, risk registers, and audit readiness Implement and maintain compliance with ISO 27001, SOC 1, SOC 2, NIST CSF, GDPR, and relevant financial services regulations Understand the GRC landscape, implement appropriate controls, and adapt as the threat and regulatory environment shifts ...

will maintain and administer key security platforms, support client-facing security assurance activities, and help strengthen the company's security posture ahead of ISO 27001 certification. Responsibilities: * Implement, manage and actively monitor security controls across email, web, endpoint and cloud environments. * Monitor and respond to security … governance, DLP and compliance tooling are essential for success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and / or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would ...

security assurance while taking ownership of key security initiatives. You'll play a central role in maintaining Cyber Essentials Plus certification, supporting ISO 27001, improving security processes, and helping embed a strong security culture across the business. What you'll be doing … management and maintenance of Cyber Essentials Plus certification. Support ISO 27001 implementation, audits and continual improvement activities. Coordinate security evidence, documentation and compliance activities. Maintain security policies, standards and procedures. Manage security questionnaires, supplier due diligence and audit requests. Track security risks, remediation actions and compliance ...

risk assessments, and advisory outputs. - Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials. Required Skills: - Experience within cyber security consulting, security auditing, or risk advisory roles. - Experience … delivering client-facing cyber risk advisory services. - Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR. - Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. - Experience ...

with HR, IT, and engineering systems to ensure policy-driven access throughout the user lifecycle. Oversee Conditional Access deployment, risk-based authentication, and device / state signals. Guide the operation and hardening of multi-site Active Directory domains / forests and cloud identity components (Entra / Azure … contract of employment. Qualifications Bachelor’s degree in Computer Science, Information Technology, or related field; equivalent experience considered. Approx. 7–10 years in IAM / identity engineering / architecture within large or enterprise environments; 3+ years leading complex IAM design initiatives. Prior global / large-scale enterprise ...

Security Advisory & Client Solutions Associate Manager / Manager (Microsoft Security) The Security Advisory & Client Solutions Manager is a senior, client-facing cyber security professional responsible for leading security advisory engagements, shaping strategic security opportunities, and driving growth across Microsoft-first clients. The role combines deep security consulting experience with … delivery teams to convert opportunities into successful security engagements. The role requires a strong understanding of Microsoft's security ecosystem, including Microsoft 365 E3 / E5 / E7, Entra ID, Defender, Sentinel, Purview, Copilot and emerging technologies such as Agent 365. While primarily advisory and client-focused ...

engagements, mentor talented consultants, and play a key role in shaping the growth of an ambitious Cyber Security practice. Role Overview Location: Central London / Hybrid (2 days per week on site) Package: £75,000- £95,000pa & benefits Industry: Cyber Security / Consultancy What You'll Be Doing … working within regulated industries would be highly beneficial. Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer / Auditor are advantageous. Previous experience within a Big Four consultancy would be highly desirable. What's in It for You Competitive salary with performance ...

focus on building high-impact detection capabilities , shaping how security protects sensitive genomic and AI-driven data at scale. This role offers hybrid / remote working options, a salary range of £60,000 - £80,000 and benefits. Why This Role is Exciting High autonomy : Lead projects from idea … O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable / Nice-to-Have: Experience with Python , Terraform , or CI / CD pipelines Familiarity with Microsoft Purview, Entra ID, DLP, or Insider Risk tools ...

team of security engineers (currently 3) Act as the senior escalation point for security incidents and decision‐making Work across a modern Microsoft / Azure environment, driving improvements in M365 security and identity Influence how security is delivered across our sites, combining internal and client‐facing services … impact. What You’ll Be Doing Security Leadership & Programme Ownership Define and execute the enterprise‐wide security strategy Own capabilities across PAM, SIEM, EDR / XDR, DLP, vulnerability management, identity governance Translate regulatory obligations ( FCA , PRA , ISO 27001 , Lloyd’s ) into practical, measurable controls Hands ...

surfaces, especially for AI-powered features. Own SAST, SCA, DAST, container, and IaC scanning pipelines, using Snyk as the primary platform. Integrate with CI / CD, manage policies, and focus on developer experience and false-positive reduction. Triage and manage vulnerabilities end-to-end: classification, SLAs, fix validation … zero-trust-aligned designs. Guide secure API and microservice patterns, including input validation, rate limiting, secure session handling, and token-based security (OAuth 2.0 / OIDC). Review designs for cloud-native services and edge components, ensuring sensible security trade-offs aligned to product goals. Advise on the security ...

Microsoft security tools (Sentinel, Defender, Entra) Familiarity with frameworks such as ISO 27001, NIST, Cyber Essentials Experience assessing third-party / vendor risk Excellent stakeholder management and communication skills Ability to translate security requirements into practical business outcomes What You'll Be Doing … primary contact for the outsourced SOC and coordinate security alerts, incidents, and remediation. Support governance, risk, and compliance activities, including ISO 27001, Cyber Essentials Plus, NIST, and CIS. Develop and maintain security policies, risk assessments, and compliance documentation. Lead third-party risk management, including vendor assessments ...

model, while providing hands-on technical leadership to engineering teams. Key Responsibilities Own the end to end architecture of the SailPoint platform (IdentityIQ and / or Identity Security Cloud / IdentityNow) across the enterprise Define technical designs, integration patterns and architectural standards for identity governance Lead the design … identity lifecycle processes, including joiner / mover / leaver automation, provisioning and deprovisioning Architect connector integrations with enterprise applications, directories (AD, LDAP, Entra ID), HR systems (Workday, SAP SuccessFactors) and cloud platforms Design role models, RBAC frameworks, access request workflows and certification campaigns Define Segregation of Duties ...

vulnerabilities and recommending mitigations. Supporting security assurance and governance activities throughout the project lifecycle. Advising clients on security frameworks and regulatory standards including ISO 27001, NIST and GDPR. Producing security documentation, architecture artefacts and risk assessments. Working closely with architects, engineers, delivery teams and senior stakeholders. … following: Cyber Security Consulting or Security Architecture. Security risk management and security assurance. Secure architecture and solution design. Identity & Access Management (IAM / IDAM). Single Sign-On (SSO). Privileged Access Management (PAM). Network Security. Cloud Security. Encryption technologies. Threat modelling. Security frameworks such as ISO ...

good practice. Key Responsibilities Compliance and Risk Management: Support compliance with applicable regulatory, IT, cyber and control frameworks, which may include DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials. Support the evaluation and management of IT, cyber, compliance and security risks across systems, processes … Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent experience. Relevant certifications such as CRISC, CISA, CISM, ISO 27001 or CISSP, or a willingness to undertake similar, are desirable. Minimum of 5 years’ experience in IT governance, risk management, cyber ...

with the future state cloud-first strategy and architecture. Define and document cloud service security baselines that align with modern security frameworks (CIS, CSA, ISO27001, etc.). Define and document repeatable cloud service patterns. Drive adoption and migration from traditional technology platforms to public cloud services. Recommend tools and methodologies … Proven experience working in DevOps teams within a mission‐critical environment. Working experience in Agile methodologies and have actively managed scrums. Experience with CI / CD, Infrastructure-as-Code management and governance. Passionate about innovation and leading technological change. Passionate in creating a collaborative, caring and safe environment ...

Purpose Build, implement, and maintain the technical security controls that protect infrastructure, applications, and data. Key Responsibilities Implement and maintain security tooling (firewalls, EDR / XDR, SIEM, IAM / PAM platforms, DLP) Configure and harden cloud environments (AWS / Azure) in line with security baselines Support vulnerability … SOAR) in partnership with the SOC Support incident response - containment, investigation, and remediation of confirmed threats Automate security processes via scripting (Python, PowerShell, Terraform / IaC) Work with architects to implement designed controls (Zero Trust, network segmentation, encryption) Support audit and compliance evidence-gathering (ISO 27001 ...

ensure rapid detection, escalation, and resolution of security alerts and major incidents. Manage, operate, and tune key security platforms, including SIEM, EDR / XDR, Network Anomaly Detection (NAD), and cloud security technologies. Oversee vulnerability management and coordinate remediation efforts across global systems. Design and operate SOAR workflows to automate … Access, and the Microsoft Defender Suite (Endpoint, Identity, Server, Cloud), alongside Azure Security Centre. Proven experience managing major incidents and collaborating with third-party / outsourced SOC providers. Demonstrated experience designing and operating SOAR workflows. Hands-on knowledge of Network Anomaly Detection (NAD), firewalls, LAN / WAN security ...

reports, and automated policy workflows Manage project timelines, deliverables, and escalations with minimal oversight Regulatory & Compliance Map client data flows to GDPR, DPDP, CCPA / CPRA, HIPAA, and ISO 27001 obligations Support RoPA, DPIA, and PIA documentation for client compliance programs Advise on data retention … deletion, and breach notification protocols TECHNICAL SKILLS BigID Platform Data discovery & scanning (structured, unstructured, cloud) Classification policies, labeling, and tagging DSR / DSAR automation workflows Risk & privacy modules — correlation, remediation BigID Open SDK, APIs, and custom app development Data & Cloud SQL / NoSQL databases — Snowflake Cloud platforms ...

risks. What You’ll Bring Prior and proven experience gained as a Security Architect or in a technical cyber role working across public sector / government agencies . Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls … / NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS / Azure Architect, CISSP, CISM (or working towards CIISEC / UK Cyber Security Council registration). Soft Skills: Strong analytical thinking, communication, teamwork, and adaptability. What ...

Cyber Technical Delivery Manager Location: London (Hybrid – 4 Days per Week Onsite) Contract Length: 12 Months Engagement: Inside IR35 Industry: Investment Banking / Financial Services Start Date: ASAP Overview We are supporting a leading investment banking client in London who is seeking an experienced Cyber Technical Delivery Manager … 27001 CIS Controls Cyber Essentials Regulatory requirements within Financial Services Technical Knowledge Good understanding of: Microsoft Azure AWS Active Directory / Entra ID Security Monitoring Platforms Identity Management Solutions Network and Infrastructure Security Ability to engage effectively with technical architects, engineers, and security specialists. Delivery Management Proven ...

operational procedures. Monitor and improve key SOC performance metrics including MTTD, MTTR and SLA performance. Ensure effective use and optimisation of SIEM, EDR / XDR and SOAR technologies. Coordinate major cyber incidents and lead post-incident reviews. Work closely with threat intelligence, infrastructure, cloud and security engineering teams … technical cyber security teams. Strong understanding of incident response, threat detection and security operations. Hands-on knowledge of enterprise security technologies including SIEM, EDR / XDR and SOAR platforms. Experience with Microsoft Sentinel, Microsoft Defender XDR, Splunk or similar enterprise security tooling. Strong understanding of security frameworks including ISO ...

senior level within complex organisations. Key Skills & Experience Proven experience developing and delivering cyber security strategies Strong understanding of security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls ...