Term Contract Salary: Negotiable Hybrid - Hertfordshire As an InformationSecurity Compliance Analyst, you will support the development and maintenance of the EMEA wide informationsecuritymanagementsystem in accordance with Global EIT strategy, EMEA business requirements and relevant informationsecurity legislation, including NIS 2, AI Act and GDPR. You will More ❯
Term Contract Salary: Negotiable Hybrid - Hertfordshire As an InformationSecurity Compliance Analyst, you will support the development and maintenance of the EMEA wide informationsecuritymanagementsystem in accordance with Global EIT strategy, EMEA business requirements and relevant informationsecurity legislation, including NIS 2, AI Act and GDPR. You will More ❯
to design, implement, and enforce security policies . Key Responsibilities: Ensure compliance with GDPR, Cyber Essentials Plus, PCI-DSS, and other applicable standards. Align ISMS activities with ISO 27001 framework. Develop and implement security policies, controls, and procedures. Conduct security risk assessments & compliance audits. Manage incident response & data breach reporting More ❯
and mitigating risks, enforcing appropriate security controls, and ensuring alignment with established security frameworks and industry regulations. Key Responsibilities: Develop, manage, and continuously improve ISMS documentation, ensuring alignment with governance frameworks and ISO27001:2022 standards. Respond to security-related inquiries, prepare management reports, and oversee third-party security due diligence More ❯
and mitigating risks, enforcing appropriate security controls, and ensuring alignment with established security frameworks and industry regulations. Key Responsibilities: Develop, manage, and continuously improve ISMS documentation, ensuring alignment with governance frameworks and ISO27001:2022 standards. Respond to security-related inquiries, prepare management reports, and oversee third-party security due diligence More ❯
desirable. Candidate Characteristics: Exceptional communication and interpersonal skills. Analytical mindset with the ability to identify, assess, and mitigate risks. Good project management skills with ISMS and control implementation experience. Knowledge of GRC software tools and technology. Attention to detail and commitment to high-quality deliverables that meet business and compliance More ❯
and audit concepts accurately Deep, demonstrable understanding and practical knowledge of ISO 27001 (InformationSecurityManagement Systems). Must be able to explain the ISMS structure, risk assessment process, and Annex A controls accurately Strong familiarity and understanding of ISO 42001 (Artificial Intelligence Management Systems) and its core principles/ More ❯
those of our clients are being proactively evidenced and managed. Manage, maintain, and continually improve LRQA's ISMS. Identifying areas for improvement within the ISMS and take ownership of developing and executing plans for their resolution. Lead and manage all certification activities related to ISO 27001:2022. Ensure that any More ❯
Environmental ManagementSystem with guidance for use", OHSAS 18001:2017 Occupational Health and Safety Management Systems and ISO/IEC 27001:2013 InformationSecurityManagementSystem, Policies, Plans, Procedures and Processes, and statutory requirements as they affect the Joint Venture 's operations and ensure that the requirements, as applicable within More ❯
Assessments, Design reviews, and Upgrades. This role requires a deep understanding of GRC cybersecurity, with secondary skills in a domain area of cyber securityISMS, whilst working with cross-functional teams to enhance the security posture of clients' Cyber Security strategy at both operational and tactical levels, as well as More ❯
to internal and external stakeholders, ensuring transparency and accountability. Collaborate with cross-functional security teams to maintain and communicate our InformationSecurityManagementSystem (ISMS). Maintain clear and accurate GRC documentation. Drive continuous improvement in our GRC processes, ensuring they meet regulatory expectations. Provide strategic insights to senior leadership More ❯
against policies and procedures to ensure compliance against ISO 27001, ISO 9001, Cyber Essentials+, and GDPR Manage and continuously improve of the firms InformationSecurityManagementSystem Oversee the informationsecurity training and awareness program Lead on internal and external audits and track audit findings through to mitigation Identify and More ❯
Southampton, Hampshire, United Kingdom Hybrid / WFH Options
Kingfisher plc
with stakeholder and business requirements whilst supporting the Group CISO being responsible for cyber and informationsecurity risk. Implement and lead the Group's ISMS ensuring the Group remains in compliance with security standards and regulatory requirements, maintaining certification where relevant. Partner with Group Audit and Risk teams to ensure More ❯
Southampton, Hampshire, United Kingdom Hybrid / WFH Options
ENGINEERINGUK
with stakeholder and business requirements whilst supporting the Group CISO being responsible for cyber and informationsecurity risk. Implement and lead the Group's ISMS ensuring the Group remains in compliance with security standards and regulatory requirements, maintaining certification where relevant. Partner with Group Audit and Risk teams to ensure More ❯
all stakeholders and customers. Responsibility for infrastructure development and continuous improvement including updating policies, procedures, controls and guidelines for Information Security. Maintaining the InformationSecurityManagementSystem, including supporting internal & external audits for ISO 27001 and Cyber Essentials Plus. Proactively identifying IT needs, proposing solutions and acting on them. Identifying More ❯
its global footprint and develops sensitive technology solutions. Key Responsibilities Security Strategy & Governance Lead the continued development of Prevail's InformationSecurityManagementSystem (ISMS) in alignment with ISO 27001, driving forward maturity and integration with wider business goals. Serve as the lead advisor on informationsecurity, ensuring risk-based … Support leadership in meeting regulatory, contractual, and reputational requirements in relation to information security. Qualifications Demonstrable experience leading or managing an ISO 27001-aligned ISMS, with a track record of successful implementation or certification. Strong understanding of informationsecurity risk management, governance, and technical controls. Knowledge of UK data protection More ❯
Due to expansion and increased strategic focus, they are looking for an experienced InformationSecurity Manager to take ownership of their ISO 27001-aligned ISMS, build out governance frameworks and lead security strategy across a global footprint. The role is based out of their Victoria office in London, with an More ❯
Due to expansion and increased strategic focus, they are looking for an experienced InformationSecurity Manager to take ownership of their ISO 27001-aligned ISMS, build out governance frameworks and lead security strategy across a global footprint. The role is based out of their Victoria office in London, with an More ❯
the Framework used by thousands of organisations, including developing a relationship between the controls framework and contemporary contextual cybersecurity risks. Developing and operating our ISMS, and all that this entails: You will also be responsible for maintaining our ISO 27001 and Cyber Essentials certifications-and other security-related compliance accreditations More ❯
team in developing and implementing group-wide cybersecurity strategies. Proactive monitoring: Continuously monitor the technology estate to ensure compliance and maintain a strong security posture. ISMSmanagement: Coordinate the improvement and maintenance of the InformationSecurityManagementSystem (ISMS) in line with ISO 27001 and Cyber Essentials. Experience Required: Information … SecurityManagement: Extensive experience in implementing and maintaining ISMS and achieving ISO 27001 certification. Proven track record managing security accreditations (Cyber Essentials, Cyber Essentials Plus). Strong expertise in informationsecurity risk management, data protection, and compliance frameworks (GDPR). Technical Expertise: Solid understanding of IT architecture, organisational governance, and More ❯
in a related field (e.g., Computer Science, Computer Security) Knowledge of ISO/IEC 27000 InformationSecurity standards and experience working with a compliant ISMS Experience in IT problem management and root cause analysis At Trayport, we encourage applications from all backgrounds and walks of life, and we are committed More ❯
in a related field (e.g., Computer Science, Computer Security) Knowledge of ISO/IEC 27000 InformationSecurity standards and experience working with a compliant ISMS Experience in IT problem management and root cause analysis At Trayport, we encourage applications from all backgrounds and walks of life, and we are committed More ❯
Environmental ManagementSystem with guidance for use", OHSAS 18001:2017 Occupational Health and Safety Management Systems and ISO/IEC 27001:2013 InformationSecurityManagementSystem, Policies, Plans, Procedures and Processes, and statutory requirements as they affect the Joint Venture 's operations and ensure that the requirements, as applicable within More ❯
design, implementation, testing and support. Experience of threat modelling and how it can be applied effectively to designs. Good working knowledge of an InformationSecurityManagementSystem and the ISO2700x/Cyber Essentials series of standards. Ideally certified to CISSP, CISM, CISA, CRISC, CCISO or equivalent professional certification. Relevant architectural More ❯
Bristol, Gloucestershire, United Kingdom Hybrid / WFH Options
AtkinsRéalis
can bring? Essential: Experience of delivering technical Cyber Security consultancy in multi-disciplined environments. Experience of Information Assurance, and developing InformationSecurityManagement Systems (ISMS), including risk assessments/management and the deployment of appropriate controls. An excellent communicator, verbal (active listener) and written (able to write concisely). Ability More ❯