1 to 25 of 201 Remote/Hybrid ISO/IEC 27001 Jobs in England

based multi-site enterprise, is delivering a multi-year cybersecurity, controls and resilience programme aligned to NIST CSF v2.0 and ISO / IEC 27001:2022. They require an experienced, hands-on Infrastructure Engineer to design, implement and uplift infrastructure controls translating cyber security … environments. Remediate security findings arising from audits, risk assessments and maturity reviews. Engineer and embed technical controls supporting NIST CSF and ISO / IEC 27001 objectives. Support security tooling integration (SIEM log sources, EDR / XDR dependencies, vulnerability tooling). Enable ...

Salary: £50,000 - £65,000 depending on experience + benefits Location: Remote with occasional travel The Role We're seeking an experienced Information Security / Cyber Security Consultant to support client engagement, helping organisations understand risk, strengthen security controls, and demonstrate assurance against recognised standards and frameworks. … capability within a commercial environment. What You'll Do Contribute to security assessment and improvement programmes aligned to frameworks such as ISO / IEC 27001, NIST CSF, Cyber Essentials, CAF, CSA CCM and comparable standards Perform structured gap analyses that consider business risk ...

. Lead ISO 27001 and SOC 2 Type II audits, ensuring controls remain effective. Drive readiness for ISO / IEC 42001 AI certification Apply prior experience successfully obtaining ISO and SOC certifications Manage customer due diligence requests … from design to release. Perform threat modelling, define non-functional security requirements, and review designs for security impact. Guide security considerations in our AI / LLM-enabled products. Risk & Incident Management Own the company-wide incident response plan and lead tabletop exercises. Perform ongoing risk assessments, vendor security reviews ...

usable, while developing software layers for integration, aggregation and communication of the buildings systems including but not limited to: Amazon (AWS) IoT Core / Google (GCP) IoT Core Safety & Security – Intruder, Fire, Access Control, CCTV, Lifts Telecommunications & IT Systems – UC, In-Building Cellular Audio Visual Systems – Digital Signage, Wayfinding … working with a Master Systems Integrator or Controls Specialist an advantage Demonstrate an understanding and an ability to adopt the principles of: BrickSchema ( https: / / brickschema.org / ) Project Haystack ( https: / / project-haystack.org / ) Cloud Data Storage such as AWS, GCP & Azure ...

Southeastern, and TransPennine Express. Our consumer-facing brand, TicketyBoo, is a train ticket booking app available to passengers across Great Britain. We hold ISO 27001 accreditation and PCI DSS compliance, and operate in a regulated, high-availability environment where governance and security are central to everything … Familiarity with PCI DSS compliance requirements Experience supporting public sector or regulated procurement processes Knowledge of the UK rail industry or exposure to RDG / TOC commercial environments What We Offer A direct reporting line to the Managing Director and genuine influence over a business-critical programme The chance ...

across the organisation. Your role in our future: Assist with the administration and maintenance of Quadient’s ISO 27001:2022 / ISO 27701:2019 certified ISMS / PIMS Investigate and resolve security incidents Maintain risk registers and ensure risks are identified, recorded … level experience in IT or security Degree in Information Security, IT or related field (or equivalent experience) ISO 27001 Foundation / Lead Implementer / Lead Auditor ISO 27701 Foundation CompTIA Security+ Certified Information Security Manager (CISM) or similar Additional Information Rewards & Benefits ...

your scope. Compliance (30%) Own our data protection function day‐to‐day: UK GDPR, US state privacy law, and cross‐border transfer mechanisms (UK / EU / US / SG). Work closely with our vCISO to maintain ISO 27001 … just mark them up. Working knowledge of UK GDPR and practical experience managing compliance programmes or certification cycles (ISO 27001 / SOC 2 exposure strongly preferred). Genuine AI literacy – you use Claude or equivalent tools in your workflow; drafting without them would feel like ...

project environments, including client-facing consultancy or internal compliance initiatives. Strong understanding of NIST CSF, NIST SP 800-53, NCSC CAF, ISO / IEC 27001. Ability to interpret contractual language and translate it into actionable control requirements. Experience conducting risk assessments and articulating business … frameworks (e.g., ISO 22301, ISO 31000, ISO 28000, ITIL, PASTA, OWASP Top 10, PCI-DSS, GDPR, DEFCON 660 / 659 etc..). We are a Disability Confident Employer Capgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government ...

+ 20% Bonus Based in Milton Keynes (Hybrid / Remote considered) Permanent Compliance Manager About the Opportunity We are seeking an experienced Compliance Manager to join our People & Compliance team. Working within a leading international technology solutions provider, you will take ownership of the company's compliance, governance … writing, documentation and communication skills. Self-motivated, organised and able to work independently. Desirable Experience implementing and maintaining Cyber Security compliance. Business Continuity and / or Health & Safety qualifications. Knowledge of NIS2, DORA and wider European regulatory frameworks. What You'll Bring Strong stakeholder management and influencing skills. ...

Role: Cyber Security Consultant Location: Leeds or Manchester (Hybrid, 1 day on site / week) Salary: £60,000 Type: Permanent, Full-Time Summary: We are working with a UK cyber security consultancy to bring in Cyber Risk & Compliance Consultants into their advisory practice. The team supports a varied client … information security, compliance or audit. Working knowledge of ISO 27001, NIST, GDPR. Certifications: ISO 27001 LI / LA, CISA, CRISC, CISM, CISSP. Cloud security review experience (AWS, Azure, M365). Strong written and verbal communication across technical and executive audiences. Benefits ...

Experience managing security operations, incident response, threat management and vulnerability remediation activities. Strong knowledge of security technologies including SIEM, EDR, IAM, DLP, firewalls, IDS / IPS, and vulnerability management platforms. Experience working with third-party security monitoring and managed security service providers. Strong analytical and risk management capability with … working within fast-paced operational or critical infrastructure environments preferred. Relevant certifications such as CISSP, CISM, ISO 27001 Lead Implementer / Auditor, GIAC, or equivalent are desirable. Additional Key Skills Excellent written and verbal communication Effective time management and prioritisation Strong problem-solving skills Attention ...

comprehensive documentation (Manual, processes, procedures and controls) in accordance with contractual requirements, ISO 9001 and other applicable standards (ITIL, ISO / IEC 20000, ISO 27001, ISO 31000, etc). Develop and implement a Project Quality Plan … detail. Ability to work under pressure and manage competing priorities. Benefits: 25 days' holiday per annum + 8 days' bank holidays (options to buy / sell days) Pension - 4% employee and 4% employer Private medical insurance (including dental & optical) Life assurance Income protection Employee assistance programmes Flexible / ...

Cyber Security Implement Cyber Security policies under the SIRO. Lead ISO 27001 recertification, internal audits, and remediation. Work with infrastructure / product teams on data security and incident handling. Oversee playbooks and ensure measurable risk reduction. Digital Clinical Safety Collaborate with IT, Clinical, Legal … SIRO, and Caldicott Guardian. Maintain the Digital Clinical Safety Policy with CMO / CTO. Lead biennial reviews for DCB0129 / 0160 and MDD compliance. Oversee training compliance and safety case documentation. Quality Management Lead the ISO 9001aligned Quality Management System. Manage ISO 9001 audits ...

Information Security Specialist Permanent - Good salary + strong benefits Location: Hybrid - Bristol / Edinburgh - 2 / 3 days a week on site Your new company: A leading UK Law and Professional Services company is currently looking for an Information Security Specialist to come in and support the existing … Manager to improve and maintain their governance, risk and compliance (GRC) capability and help us continually improve our ISO 27001 / CE+ Information Security Management System (ISMS). The role is full-time, with a hybrid working pattern usually around 2 / 3 days ...

online tutorials to enhance and achieve your personal and professional goals. Healthcare cash plan. This will give you access to online GP appointments, 24 / 7 access to qualified counsellors and cash back against a range of general healthcare Casual dress policy Company Pension Scheme Company social events … days annual leave plus public / bank holidays Purchase of annual leave scheme Life at Littlefish: Our company values shape who we are as a business, what we stand for and how we work. Hiring people with our values at heart, is very important as we see Littlefish grow. ...

Purpose of Position As Information Security Risk Manager (f / m / d) you will own and drive Awin’s global Information Security Risk Management capability end-to-end, ensuring the business not only understands its risks but takes measurable action to reduce them. You will be accountable … implementing, or improving control frameworks Experience with GRC platforms (e.g. Hyperproof) Confident communicator (with very good English skills) - able to build relationships and challenge / influence senior stakeholders Our Offer Flexi-Week : We prioritise your mental health and wellbeing by offering you a four-day Flexi-Week (with ...

expert for security, working across infrastructure, operations, and leadership to embed best practice in a live 24 / 7 production environment. The Role You will take ownership of cyber security across the organisation, combining hands-on technical delivery with strategic oversight. Key Responsibilities Lead delivery of Cyber Essentials, CE+ … security lead without the luxury of a large team. Strong cyber security background across infrastructure and systems environments Experience delivering or supporting Cyber Essentials / ISO 27001 Knowledge of: Identity & access management (Entra ID, MFA, Conditional Access) Endpoint & network security (EDR / MDR, firewalls ...

across the organisation, support assurance activities, and enable NICE to operate securely while delivering nationally important health and care services. What you will do / bring to the roleo Support the development, maintenance, and continuous improvement of cyber security governance frameworks, policies, and standards. o Identify, assess, and manage … rewarding pension schemes in the UK Flexible working - Enjoy a healthy work-life balance with options like remote working, compressed hours and flexible start / finish times Exclusive discounts - Save on shopping, dining and more with a Blue Light CardTime to recharge - Start with 27 days' annual leave plus ...

work at least 3 days per week in the office You’ll get 25 days holiday a year and the option to buy / sell and carry over from the year before Our flexible benefits package includes private medical and dental insurance, a competitive pension scheme, cycle to work … career and guide you on your journey through BAE You’ll be part of our company bonus scheme You are welcome to join any / all of our Diversity and Support groups. These groups cover everything from gender diversity to mental health and wellbeing About our team Our people ...

role. Alongside leading GxP compliance and quality activities, you'll play a key role in maintaining and enhancing the company's integrated ISO 9001 and ISO 27001 Quality Management System, helping to ensure the organisation continues to meet the highest standards of quality, information … hands-on approach. Whilst strong GxP experience is essential, we are particularly interested in candidates who can demonstrate experience or exposure to: ISO 27001 and information security frameworks Cyber security governance and risk management Software Development Lifecycle (SDLC) within a regulated environment Compliance activities supporting technology ...

delivery of an engaging and relevant security awareness program. What you will be doing: The end-to-end design, implementation and maintenance of an ISO27001 aligned Information Security Management System. Ownership, delivery and maintenance of Cyber Essentials certification. The implementation of an effective Third-Party Risk Management strategy to mitigate … simulation Skills & Competencies Qualifications and Experience Proven experience in the hands-on delivery of GRC strategies in complex environments. Intrinsic knowledge of ISO 27001, CE & PCI Engagement with external auditors Certification is desirable: ISO 27001 Lead Auditor; ISO 27001 ...

primary responsibilities will be to: Support the development and continual improvement of Information Security policies, standards and procedures in line with ISO / IEC 27000, promoting a secure by design culture informed by business impact assessments, risk appetite and regulatory requirements. Serve as the Cyber … environments. Broad knowledge of cyber and information security, supported by relevant professional qualifications (e.g., CISSP, CISM, ISO 27001 Lead Implementer / Lead Auditor). Experience or strong awareness of enterprise cloud technologies, architectures and capabilities (e.g., Azure, AWS, GCP). Understanding of Operational Technology ...

security systems, solutions and services considerations and enable smooth handovers. Develop and maintain governance and compliance documentation, ensuring adherence to standards such as ISO 27001, NIST, GDPR, NIS2, and UK regulations. Act as a trusted advisor, sharing best practices and emerging technologies, and maintaining … everyone. Your skills and experience Strong knowledge of cyber security principles and compliance frameworks (ISO 27001, NIST, GDPR, NIS2, ISA / IEC 62443). Experience in solution design for complex IT / security projects, including bid management and cost modelling ...

sales engagements, including opportunity qualification, solution design, and client presentations. Develop and maintain governance and compliance documentation, ensuring adherence to standards such as ISO 27001, NIST, GDPR, NIS2, and UK regulations. Provide technical input for bids, including cost modelling, risk assessments, and solution architecture clarification through … everyone. Your skills and experience Strong knowledge of cyber security principles and compliance frameworks (ISO 27001, NIST, GDPR, NIS2, ISA / IEC 62443). Experience in solution design for complex IT / security projects within public sector, including bid management and cost ...

audits covering all aspects of the IT and IS departments' activities. Typically, this will involve working under the guidance of senior team members and / or audit leads. You will conduct audits of various risk and controls, prepare and review planning, identify key risks, execute fieldwork, document work completed … / banking applications. Cloud based SAS (both Public and Private implementation) solution exposure, including risk assessments. (AWS, MS Azure, GCP) ITIL / ISO27001 / SWIFT CSP certification experience Network Infrastructure review (Firewall reviews, Penetration testing review experience) Identity & Access Management. Voice & Telephony technology exposure and audit exposure ...