101 to 125 of 840 ISO/IEC 27001 Jobs in England

ability to influence both technical and non-technical audiences. Professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer / Auditor or PCI DSS would be advantageous. Additional information We’re always looking to recognise and reward our employees for the work they do. … Company funded life assurance Diverse learning and development opportunities to support you to progress in your career Dedicated Employee Assistance Programme and a 24 / 7 remote GP service for you and your family Plus, so much more! We’re an equal opportunities employer and welcome applications from everyone. ...

Cyber Security Manager / InfoSec Manager Location Bedord / Hybrid 1-2 days a Week in the office Salary >£75k We're looking for an experienced Information Security Manager (Network / Infrastucture) with a strong technical background in network security, infrastructure security and cyber security. This role … governance, risk management and compliance activities. You'll play a key role in maintaining and improving the Information Security Management System (ISMS), supporting ISO 27001 certification, managing security audits, supplier assurance, security incidents and business continuity planning. You'll also work with technical teams to assess ...

best practices. Conduct security risk assessments, gap analyses and audits. Support clients in achieving and maintaining compliance with standards and regulations such as ISO 27001, NIST and GDPR . Develop and review security policies, procedures and documentation. Perform vulnerability assessments and coordinate remediation efforts. Deliver threat … consultancy or advisory environment. Desirable Qualifications & Experience Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer / Auditor . Experience in consultancy or client-facing roles. Exposure to penetration testing or security engineering. Knowledge of secure software development practices and DevSecOps . ...

from gap analysis through audit and maintenance; familiar with GDPR, PCI DSS, and the EU AI Act. Deep experience running Vanta (or Drata / Secureframe) as a continuous compliance backbone, not a point-in-time checklist. Technically hands-on: comfortable scripting against AWS APIs to automate evidence collection, with … translate fluently between compliance and technical teams. Ideal, but not required Experience with customer trust programs (Trust Center, FAQs, security whitepapers). DORA / EU AI Act / fintech regulatory exposure. Has shipped engineering-led automation (not just dashboards). Familiarity with NIST CSF, CIS Controls, or GDPR ...

accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.Work / Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which … find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Basic qualifications- Experience performing and / or participating in technical assessments in direct support of a major compliance effort (e.g. ISO 27001, ISO ...

work on own initiative. Project management skills. Must have at least two years in a managerial role in an IT department. Understanding of ISO 27001 compliance standard and DSPT implementation. Knowledge of the following key areas: GDPR & UK GDPR, Risk assessment processes, Incident management and creation … details Employer name Sherwood Forest Hospitals NHS Foundation Trust Address Ilkeston Community Hospital Heanor Road Ilkeston DE7 8LN United Kingdom Employer's website https: / / www.sfh-tr.nhs.uk / ...

Position Details Position: Cybersecurity Advisor Experience: 5 to 10+ Years Employment Mode: Retainer / Consultant / Contract-to-Hire Notice Period: Immediate – 45 Days Benefits: Visa, Accommodation, Per Diem, To & Fro Flight Tickets Role Overview The Cybersecurity Advisor must have a minimum of 5+ years of strategic … Following) Security Strategy, Governance, Risk & Compliance (GRC) Security Architecture & Zero Trust Framework Design Threat Intelligence & Incident Response Advisory Cloud Security (AWS, Azure, GCP) OT / ICS / SCADA Cybersecurity Regulatory Frameworks: NIST CSF, ISO 27001, SOC 2, SAMA, NCA, DPDP, PCI‐DSS Required Skills ...

with one or more GRC technology platforms (OneTrust, ServiceNow GRC, Archer, MetricStream, or similar). Familiarity with widely used GRC frameworks and standards (ISO 27001, ISO 27701, SOC 2, NIST CSF, COSO, or similar). Working knowledge of GDPR … Consulting experience, whether at a professional services firm, a Big Four, or a privacy or risk specialist firm. A recognised credential such as CIPP / E, CIPM, CRISC, CISA, ISO 27001 Lead Auditor or Implementer, or equivalent. A relevant degree in a field such ...

incident governance, escalation, and post-incident remediation tracking. Controls, Certifications & Audit Oversee GRC readiness for external assurance frameworks and certifications, including SOC 2, ISO 27001, and related control programmes. Coordinate internal and external audits and ensure effective follow-through on findings and corrective actions. Maintain evidence … ISO 27001, and related assurance frameworks. Experience across both Europe and the US. Relevant certifications such as CIPP / E, CRISC, CRCM, CISSP, or ISO 27001-related credentials. Why join us? Your career, your design. Unleash your ambition in our dynamic ...

teams in London, Singapore, and Australia Define the automation strategy and prioritise cross‐tower automation initiatives for maximum cost and quality impact Establish SLA / KPI frameworks, performance dashboards, and outcome‐based metrics for all towers Lead the offshore migration strategy: define which roles move offshore, governance model … Technical Skills & Expertise Broad and deep technical knowledge across infrastructure, cloud, networking, security, IAM, SRE, and data engineering Expert‐level understanding of IaC, CI / CD, DevSecOps, GitOps, and platform engineering principles Architecture frameworks: TOGAF, cloud‐native architecture patterns, microservices, event‐driven design Cloud platform expertise across AWS, Azure ...

M365 Security Consultant ( M365 security, Defender, Sentinel and Microsoft security stack.) As an M365 Consultant / Senior Consultant, you will help transform clients’ cybersecurity posture by designing and implementing advanced Microsoft Threat Protection technologies. You will work directly with clients in a consulting capacity, supporting medium to large enterprise … environments and contributing to robust Cyber Defence strategies across endpoints, identities, cloud, and collaboration platforms. Key Responsibilities Design and implement AV / EDR solutions (e.g., Microsoft Defender for Endpoint) to detect and respond to cyber threats across major operating systems. Protect email, messaging, and collaboration platforms from phishing, spear ...

Year (EMEA)One of the Best Workplaces for Women in the UK & Ireland (2023) With 3,700+ people and revenues exceeding 347m / 302m, Version 1 is a market leader in Oracle, Microsoft, and AWS consulting services – and one of the fastest-growing digital consultancies in Europe. Job DescriptionWe … build, testing, deployment and defect resolution activities. The role also includes exposure to Oracle Fusion extensions and workflow tooling. VBCS, Oracle Process Automation (OPA) / Process Cloud Service (PCS) experience is desirable at junior level. The successful candidate should be willing and able to learn these areas quickly ...

financial services regulation, including FCA expectations for systems and controls, operational resilience, outsourcing, third-party risk, incident reporting, UK GDPR and client asset / data protection considerations Technology & Cloud Security: Broad knowledge of Microsoft security platforms, Azure security, endpoint protection, network security, email security, secure configuration, logging, monitoring … Lead Auditor, or equivalent Experience working with external auditors, penetration testers, MSSPs, cyber insurers, regulators, clients or supplier assurance teams would be beneficial Skills / Other relevant information Practical cyber leader who can move between executive discussion, technical detail and operational delivery without losing the thread Clear communicator ...

with relevant legal and regulatory requirements relating to IT systems and data Lead, manage, and develop the IT team covering both support and network / infrastructure functions Set clear objectives, performance standards, and personal development plans for all team members Support the development of apprentices and longer-serving employees … service quality and value Oversee procurement of IT systems, hardware, software, and services Benefits 25 days holiday + Bank Holidays Life Insurance Enhanced Maternity / Paternity pay 5% Pension contributions Companywide performance based annual bonus scheme Please see linked below our Job Applicant Data Privacy Notice which sets ...

designed, operational and scalable, particularly for SOC 2 Type 2 and ISO 27001.Maintain a centralised, audit-ready evidence repository and coordinate internal / external audits, client reviews and due diligence.Oversee remediation plans and ensure continuous evidence collection.Develop consistent, lightweight playbooks for vendor intake, audit readiness and control … obligations.Manage and deliver risk and compliance training, including competency testing where appropriate.Support global data protection compliance (GDPR, CCPA and equivalents) as a data processor / service provider.Own vendor and third-party risk management, ensuring proportionate due diligence of suppliers, clients and acquisition targets.Reporting & Stakeholder LeadershipDeliver executive reporting on risk ...

advanced threat detection programmes.– Own the vulnerability management programme– Implement enterprise frameworks including IAM, SIEM, and data classification.– Anticipate emerging threats, leverage AI / ML for predictive security, and set the technology vision– Lead Security Incident Response ProgrammeGovernance, risk, and compliance (GRC)– Define and own the GRC programme, including … long-term security architecture aligned to business strategy andregulatory requirements; guides enterprise technology decisions includingcloud strategy and zero trust– Anticipates emerging threats, leverages AI / ML for predictive security, andsets the technology vision– Deep understanding of the GRC landscape; implements appropriate controlsand adapts as the environment shiftsEnd ...

aligned to business objectives. Core Responsibilities Support the development, implementation, and ongoing maintenance of the Information Security Management System (ISMS) aligned to ISO 27001Implement and enforce information security policies, standards, and procedures across the organisationConduct security risk assessments, ensuring risks are identified, assessed, and managed through appropriate controlsMaintain … risks and vulnerabilitiesLead the investigation and response to information security incidents, ensuring lessons learned and improvements are implementedSupport internal and external audits, including ISO 27001 certification and surveillance activitiesManage third-party and supplier security risk assessments and assurance processesWork with IT and project teams to ensure ...

advanced threat detection programmes Own the vulnerability management programme Implement enterprise frameworks including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI / ML for predictive security, and set the technology vision Lead the Security Incident Response Programme Governance, risk, and compliance (GRC) Define … programme, including the ISMS, policy framework, risk registers, and audit readiness Implement and maintain compliance with ISO 27001, SOC 1, SOC 2, NIST CSF, GDPR, and relevant financial services regulations Understand the GRC landscape, implement appropriate controls, and adapt as the threat and regulatory environment shifts ...

Network Security Engineer Job Title: IT Security Engineer Location: Oxfordshire - Hybrid (2 days per week on-site) Industry: Enterprise SaaS / Technology Solutions About the Role We are partnering with a rapidly scaling, globally active software and data platform enterprise looking to appoint a dedicated IT Security Engineer … years of dedicated professional experience within an IT or information security function. Technical Proficiency: Deep working knowledge of core network protocols (TCP / IP, DNS, routing, switching) and architecture design. Hands-on proficiency with network analysis utilities, packet sniffers, port scanners, and SIEM monitoring suites. Working familiarity with cryptographic ...

Reference: SBM / AR / 070319Job Type: PermanentSalary: 60,000 - 80,000Location: Westminster, Central LondonSector: ITPosted: 2026-05-08Join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare.We’re looking for a Threat Detection Engineer … focus on building high-impact detection capabilities, shaping how security protects sensitive genomic and AI-driven data at scale.This role offers hybrid / remote working options, a salary range of 60,000 - 80,000 and benefits.Why This Role is ExcitingHigh autonomy: Lead projects from idea to deploymentInnovation-driven: Develop ...

high-performing. In this senior role, you’ll lead DevOps, observability, and compliance. Tasks include architecting cloud infrastructure for growth, prepping for SOC 2 / ISO 27001 audits, and setting up CI / CD pipelines for all services. You’ll also manage logging, metrics … knowledge. Networking concepts (VPCs, DNS, load balancers, VPNs, firewalls). Database management (PostgreSQL, MySQL, NoSQL) and storage. Python or Bash skills. SOC 2, ISO 27001, or GDPR exposure. Report directly to the founders with a chance to shape their future. Got what it takes? Apply ...

lead on security compliance activities, coordinate responses to security incidents, deliver engaging awareness programmes and support alignment with recognised frameworks including ISO 27001 and the NIST Cybersecurity Framework . Key Responsibilities Lead IT security compliance activities, supporting alignment with ISO 27001 … external partners. Good Microsoft 365 and digital skills. Commitment to continuous professional development and creating an inclusive workplace. Desirable Relevant Cyber Security and / or Information Governance qualification. CompTIA Security+ certification. CISSP (Certified Information Systems Security Professional) certification. Experience using Microsoft 365 security and compliance tools, including Purview, Defender ...

optimized for both performance and cost. Key Responsibilities Architect, implement, and maintain cloud infrastructure to support rapid product growth. Prepare infrastructure for SOC 2 / ISO 27001 audits, aligning with customer expectations. Build and maintain CI / CD pipelines for backend, frontend, and data … Automation : Strong skills in Python or Bash for automation and tooling. Experience 4–7 years of relevant experience, ideally including startup or high‐growth / high‐load environments . Proven track record of owning infrastructure end‐to‐end — from architecture through production support. Experience implementing reliability, security, and compliance ...

will maintain and administer key security platforms, support client-facing security assurance activities, and help strengthen the company's security posture ahead of ISO 27001 certification. Responsibilities: * Implement, manage and actively monitor security controls across email, web, endpoint and cloud environments. * Monitor and respond to security … governance, DLP and compliance tooling are essential for success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and / or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would ...

advisory guidance on how Group standards interact with local legal and regulatory requirements. Knowledge & Skills Familiarity with the security technology estate – including Microsoft E5 / Defender suite, Zscaler, Qualys, Abnormal Security, Claroty, and Axonius – sufficient to provide informed advisory guidance on standards compliance and configuration questions without requiring specialist … platform engineering support for routine queries. Understanding of OT / ICS security considerations relevant to food and beverage manufacturing, distribution, and supply‐chain environments. Knowledge of firewall policy review tooling (e.g. Tufin, AlgoSec, FireMon) and structured approaches to rule base analysis and optimisation. Strong written communication skills; able ...