101 to 125 of 429 ISO/IEC 27001 Jobs in England

Track expenses and ensure financial efficiency. Provide regular financial updates to clients and internal stakeholders. Quality, Safety & Compliance Ensure all work aligns with ISO 9001, ISO 45001, ISO 14001, and ISO 27001 standards. Promote safe working practices for yourself ...

Interim, 6 months+, Telecoms Security Act Compliance, TSA, CAF / CAS(T) / ISO . Risk Management, Regulator, OFCOM Your new company A well-known telecoms provider offers a long-term assignment to a TSA Regulatory compliance specialist or high level ISO-standards expert … open to considering candidates who tick all the boxes in terms of working with regulatory measures and regulators AND have extensive experience with CAF / CAS(T) ISO standards (27001 and 22301 and 33000) and have experience interpreting complex regulatory matters. Experience within the telecommunications ...

through the assessment, design or implementation of effective and secure architectural patterns that align with industry standards (e.g. CIS L1 / 2, NIST, ISO27001, COBIT, etc.). Generative AI – Enabling the secure design and adoption of Gen AI for business, IT and / or security functions in alignment … teams, OT Security, Security Architecture, Security Op Model Transformation projects and Cybersecurity Assessments. Familiarity with core Cybersecurity frameworks and industry frameworks (e.g., NIST CSF, ISO27001, CIS Critical Controls), regulations (e.g., NIS2) and financial regulations (e.g., DORA, FCA, Bank of England, etc.). Have an understanding of the future ...

threats and gaurd rails as well as the use of AI to improve security posture. Support audits, certifications, and assurance activities (e.g. ISO 27001, Cyber Essentials Plus) About You You’ll be a confident, hands-on security leader who is comfortable operating at both strategic … supplier risk Strong stakeholder management skills, with the ability to influence at senior level ISO 27001 certification experience and / or Cyber Essentials Plus Broad security background rather than a narrow technical specialism Experience in professional services environments advantageous Artificial Intelligence in Security ...

remediation. Implement and maintain AWS security controls aligned to ISO 27001, NIST and cloud security best practices. Proficiency in building / configuring SOAR platforms such as Shuffler and Tracecat. Develop security automation tooling, scripts, and infrastructure as code processes to streamline security operations. Take ownership … stages of your career with us to look something like this: Within 1 month: Familiarity with Company Policies and Security Infrastructure Familiarity with AWS / Azure Security Best Practices and the business Setup Integration into DevOps Workflow for UK Within 3 months: Familiarity with Company Policies and Security Infrastructure ...

strategy, policies, and best practices Oversee day-to-day security operations (SIEM, EDR, incident response, vulnerability management) Ensure compliance with frameworks such as ISO … 27001, NIST, CIS Controls and GDPR Manage risk assessments, remediation planning, and continuous improvement initiatives Secure cloud and hybrid environments ( Azure / AWS ) Act as the escalation point for complex security incidents and threats Collaborate with engineering and infrastructure teams to embed Secure by Design principles Manage ...

future of secure, ethical, and compliant AI adoption across critical environments. What you’ll do This is a senior, strategic consulting role — driving AI / ML security architecture, influencing C-suite direction, and ensuring security-by-design across complex AI systems and data pipelines. You’ll define and deliver … 115K), you’ll need strong consulting experience and commercial awareness alongside deep technical expertise. Key areas of focus Define and implement enterprise-level AI / ML security strategies, policies, and architectures. Lead on AI risk assessment, threat modelling, and mitigation planning. Ensure compliance with GDPR ...

manage multiple priorities effectively. Desirable Experience within banking, financial services, or another regulated environment. Familiarity with industry standards and frameworks such as ISO 27001, NIST, COBIT, or CIS Controls. Exposure to vulnerability management, penetration testing, incident management, or third-party risk assessments. Relevant security certifications such … Security+, ISO 27001, CISM, CRISC, CISSP, or equivalent. Personal Attributes Proactive and eager to learn. Strong attention to detail and a methodical approach to problem-solving. Able to work independently while collaborating effectively with wider teams. Comfortable operating within a regulated and governance-driven environment. Flexible ...

protection and information security risks Review requests against defined policies and controls, escalating where appropriate in line with internal governance processes Support third-party / supplier risk assessments, including reviewing security and data protection documentation and tracking follow-up actions Support periodic reviews of high-risk and business-critical … risk, compliance, or GRC roles within a SaaS or technology environment Understanding of GDPR and handling of personal data (especially sensitive or child / student data) Experience performing risk assessments using structured frameworks and defined processes Ability to interpret policies and apply them to operational and real-world scenarios ...

doing In this role, you will: Lead escalations and resolve complex technical issues across the IT estate Administer and support Microsoft 365, Azure AD / Entra ID, Intune and core business systems Maintain and improve ISO 27001-aligned processes, including access control, incident, asset … support teams Develop documentation, improve processes and ensure SLA compliance What we're looking for Essential: Strong Microsoft 365 administration and Azure AD / Entra ID identity management experience Experience managing Intune policies, device configurations and endpoint compliance Broad understanding of Microsoft infrastructure, including endpoints, operating systems, application deployment ...

highly technical role focused on incident response, SIEM optimisation, vulnerability management, and security engineering, helping drive a Zero Trust journey and supporting ISO 27001 & CIS controls. What you'll be doing Lead and support incident response, threat monitoring and root-cause analysis Tune and optimise SIEM … security tooling Knowledge of security frameworks such as ISO 27001, NIST, CIS or PCI-DSS Hybrid working: 3 days onsite / 2 days remote If you're looking to make a real impact in a collaborative, international environment - we'd love to hear from you. ...

They are looking to hire two individuals for these openings, so please free to share this with your network! Role Overview: Location: Central London / Hybrid (2 days per week on site) Package: £40,000- £50,000pa & Benefits Industry: Cyber Security Consulting What You’ll Be Doing: Lead … Project Management with a background delivering on Cyber Security projects to external clients. Strong understanding of cyber security frameworks and standards such as ISO 27001, NIST, CIS Controls, and Cyber Essentials. Experience delivering consultancy engagements directly to clients. Knowledge of risk assessment methodologies and security maturity ...

Collaborate with clients, delivery teams, and senior stakeholders to embed security into solution design Standards & Compliance - Ensure adherence to industry standards such as ISO 27001, NIST, and government security policies Skills and Experience: Experience working as a Security Architect or in a senior security role within … 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure / NCSC CAF, HMG Security Policy Framework. Knowledge of cloud security principles across platforms such as AWS, Azure, or GCP Experience with identity and access management ...

Policy & Governance Lead / GRC Analyst Active SC Clearanc e – required to work on‐site with Edgewing and support sensitive MOD / aerospace programmes Aerospace and Defence Experience – demonstrable background delivering architecture within MOD, Defence Digital, or UK aerospace environments .This role will be based in Readin … with hybrid / custom working options where appropriate Policy & Governance, GRC / Assurance Purpose of the Role Define, maintain, govern, and assure compliance with the organisation’s ISMS policy framework, standards, and procedures, while supporting audit readiness and control assurance Key Responsibilities Own and maintain al l policies ...

DevOps (or similar tools) to deploy Infrastructure As Code into Azure – experience with ARM or Bicep templates and YAML pipelines. Experience of cloud native / serverless components hosted in Microsoft Azure including containerisation and App Service Plans Strong system monitoring tooling experience to identify and troubleshoot problems with performance … ONDmarc Experience working in a regulated industry, e.g. telecoms, financial services, utilities. Experience of Jira & Confluence for work management & documentation Networking experience – LAN / WAN / SDWAN / Azure networking such as routing, firewalls, network peering etc. Microsoft certifications relating to Infrastructure within Azure. Experience of configuration ...

response, cyber investigations, and escalation procedures. Oversee annual penetration testing programmes and security audits. Support compliance initiatives including Cyber Essentials, Cyber Essentials Plus, ISO 27001, and similar frameworks. Produce security reporting for IT leadership and senior business stakeholders. Conduct security due diligence for acquisitions and support … Strong understanding of cyber security governance, risk management, and compliance. Experience implementing and supporting security frameworks such as Cyber Essentials, Cyber Essentials Plus, ISO 27001, or similar. Strong knowledge of Microsoft Azure security and cloud governance. Experience working with modern identity, endpoint protection, email security ...

patterns, standards, and technical decision records. Lead solution design across Entra ID modernisation, PAM (JIT, PIM, role modelling, access packages), IGA, and identity resilience / recovery models. Provide architectural guidance across complex, multi-tenant and cross-environment identity challenges. Embed governance and compliance aligned to NIST, ISO … Microsoft Entra ID, Azure, hybrid identity, authentication, authorisation, and federation models. Strong background in Privileged Access Management (PAM), Identity Governance (IGA), and identity resilience / recovery architecture. Proven experience designing and implementing Zero Trust identity models. Strong understanding of security controls, audit processes, risk management, and compliance frameworks (NIST ...

CISO to deliver the Target operating Model and Cyber Security StrategyGovernance, Regulatory & Compliance* Oversee cyber security policies, standards, and control frameworks aligned with ISO 27001, SOC, DORA, NIST, and other related standard and frameworks and financial services best practices* Ensure compliance with global regulatory requirements (e.g. … regulated financial institutions* Proven experience leading cyber advisory, risk, and service delivery functions* Managing a P\L and building a cyber security business practice / service* Deep understanding of financial services regulations, operational resilience, and client assurance* Experience operating in global, multi-entity, and acquisition-driven environments* Strong executive ...

structures Take ownership of enterprise risk management, threat identification, and mitigation planning Ensure regulatory compliance, audit readiness, and adherence to recognised standards (e.g. ISO 27001, NIST) Lead business continuity … disaster recovery planning, including testing and crisis response Provide executive-level reporting on risk, performance, and compliance Manage third-party suppliers and security / facilities service providers Act as a senior leader during incidents, crises, and major disruption events Drive integration across cyber, physical, and operational resilience activities ...

internal stakeholders. Engage with third-party suppliers and partners to ensure security and compliance standards are maintained. Core Technologies & Frameworks Information Security Governance ISO 27001 NIST Framework Information Assurance Risk Management Data Protection & DPIAs Security Auditing Supplier Security Assessments Security Incident Management Compliance & Accreditation Requirements Experience … working within Information Security, Information Assurance, GRC or Cyber Security Governance roles. Strong knowledge of ISO 27001, NIST and information security best practices. Experience conducting security audits, compliance reviews and risk assessments. Good understanding of data protection legislation and information governance principles. Professional security qualification such ...

Technical Cyber Security Consultant - SC cleared Location: Remote / UK based (Quarterly - UK travel) Contract Type: Full-time, Permanent Salary: Competitive + Benefits About the Role The Cyber Security Consultant will support the organisation's digital security risk management capability through the identification, assessment, analysis, logging and ongoing monitoring … Contribute to the continuous improvement of assurance practices, maintaining awareness of emerging threats, vulnerabilities and industry best practice. Experience & Capabilities Proven experience in cyber / information security risk management and control assurance roles. Strong analytical skills with the ability to evaluate technical, procedural and design evidence. Excellent written ...

Contribute to the continuous improvement of assurance practices, maintaining awareness of emerging threats, vulnerabilities and industry best practice. Experience & Capabilities Proven experience in cyber / information security risk management and control assurance roles. Strong analytical skills with the ability to evaluate technical, procedural and design evidence. Excellent written … Working: Remote-first with travel as needed. Career Development: Continuous learning and professional growth. Benefits Package: Includes Private Health Care, Cash Back Plan, Buy / Sell Holiday Options, Life Assurance, and more. Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality ...

business. Investigate and respond to security incidents, working with internal teams and external security partners. Support compliance activities, audits and security certifications including ISO 27001 and Cyber Essentials Plus. Respond to client security enquiries and assist with supplier security assessments. Promote security awareness and best practice … possess a strong understanding of security principles, risk management and security frameworks. You will also demonstrate: Experience working with frameworks such as ISO 27001 and Cyber Essentials Plus. Knowledge of security incident management and threat mitigation. Strong communication and stakeholder management skills. A proactive approach ...

business impacts Producing high-quality reports and communicating findings to technical teams and senior stakeholders Applying recognised frameworks and best practice approaches, including ISO 27001, NIST and similar standards Researching security technologies and contributing to the development of innovative solutions Supporting business development activities … security assurance A strong understanding of cyber security principles, architectures and technical controls Practical experience applying risk management and assurance frameworks such as ISO 27001, NIST or similar Excellent written and verbal communication skills, with the ability to present security advice clearly to both technical ...

architecture, product and delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk … understanding of cloud security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear ...