26 to 50 of 1,078 ISO/IEC 27001 Jobs in England

Note : This role could be located anywhere between Bristol, London or Derby but 2 days / week in Derby are mandatory. Who we are: ALTEN is an engineering and technology consultancy services company. We are a leading Engineering and IT consultancy operating across 30 countries, making waves … implement corrective actions. Communication and Reporting Serve as the primary liaison for quality-related issues between clients and ALTEN teams. Participate in client / ALTEN meetings (PRM / CRM) and contribute with presentations. Organize quality reviews and provide performance reports as required. C. KPIs and Performance Quality Dashboards ...

including vulnerability management, identity and access management, cloud security, security operations and supplier assurance. Support Secure SDLC and broader security transformation initiatives. Provide vCISO / outsourced security management support where required. Design and facilitate client workshops, discovery sessions and stakeholder interviews. Translate technical security issues into clear business risks … consultancy experience. A good understanding of information security governance, risk and technical controls. Practical experience with ISO 27001 and / or other recognised security frameworks. Experience conducting security assessments, gap analyses or risk assessments. The ability to understand a client's business and provide pragmatic ...

management, including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and customer compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide senior oversight of third … party / vendor security risk and critical supplier assurance. Support security assurance for customer contracts and external stakeholder requirements. Develop security reporting, KPIs and dashboards for senior management. Work with security operations and engineering teams to identify vulnerabilities, manage remediation and improve security controls. Provide security input into Data ...

including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks … years' experience in an Information Security, GRC, compliance or security consultancy role. Practical experience implementing and managing ISO 27001 / ISMS rather than purely theoretical knowledge. Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO ...

accomplished audit professional who can take ownership of developing and delivering a risk-based, multi-year internal audit programme, aligned to ISO / IEC 27001:2022 and ISO 22301:2019. The Role You will be responsible for developing the audit strategy … annual ISMS & BCMS audit model, including methodology, templates, governance, findings tracking and knowledge transfer to support future audit cycles. Key Requirements ISO / IEC 27001:2022 Lead Auditor certification ISO 22301:2019 Lead Auditor certification Demonstrable experience conducting internal audits against ...

engagement with regulators and external stakeholders where required. Track regulatory findings, recommendations and actions through to closure. Assist with external certification activities, including ISO 27001 and Cyber Essentials Plus. Knowledge & Skills: Strong understanding of cyber security principles, governance frameworks and compliance management practices. Knowledge of compliance … stakeholder engagement and communication skills, with the ability to work effectively across technical and business functions. Familiarity with ISO 27001 / 27002, NIST Cyber Security Framework (CSF) 2.0 and the NCSC Cyber Assessment Framework (CAF). Understanding of the UK regulatory landscape for cyber security ...

robust cybersecurity policies, procedures and frameworks. Ensure compliance with relevant data protection laws, including UK GDPR, ISO standards, including ISO / IEC 27001, Cyber Essentials Plus and industry best practice. Lead incident response planning, security audits, risk assessments and remediation efforts. … experience leading digital transformation and systems integration projects. Excellent leadership, communication and stakeholder management skills. Professional certifications such as CISSP, CISM, ISO / IEC 27001 Lead Implementer or Auditor, or similar. Experience working in regulated, public sector or educational environments. Please note ...

Reporting to Chief Technology Officer Salary £50,000 per annum Location Hybrid – Head Office Altrincham / Remote Contract Permanent, Full-Time Kids Planet Day Nurseries is seeking an experienced Data Governance Lead to design, implement, and embed a robust data governance framework across the organisation. Reporting to the Chief … ability to manage multiple workstreams simultaneously. Desirable Professional qualifications in data protection or information governance (e.g. BCS Certificate in Data Protection, CIPM, ISEB / IAPP, GDPR Practitioner). Practical experience evaluating or operating DLP, data discovery, or data classification platforms. Familiarity with AI data governance considerations and acceptable ...

range of quality, environmental, information security, functional safety and health & safety standards, including: ISO 9001 IATF 16949 ISO 14001 TISAX / ISO 27001 ISO 26262 ISO 21434 ASPICE ISO 45001 Reporting to the Operational Excellence … wider team. Committed to transparency, accountability and the highest standards of personal and professional integrity. Essential Experience & Qualifications Degree in Engineering or another numerate / scientific discipline, or equivalent relevant experience. Strong knowledge of management system and regulatory standards. Experience developing and implementing new processes. Experience conducting internal audits. ...

months INSIDE IR35 Start: October 2026 Day rate: Dependent on experience NRG is supporting a life sciences organisation that is beginning an ISO 27001 implementation within one of its departments. We are looking for an experienced ISO 27001 Implementation Consultant … help create an approach that can be rolled out across other departments and operating companies Key requirements: Proven experience of delivering an ISO 27001 implementation from an early stage Strong knowledge of ISO 27001:2022, information security risk management and control implementation ...

will be responsible for the: Development, implementation, and continuous improvement of VPN’s Information Security and Risk Management framework, ensuring alignment with ISO 27001 standards and broader regulatory requirements like GDPR, Cyberessentional, CAF. Key areas of responsibilities: Establish, Support the maintenance and continuous improvement … verbal communication skills, Qualification: Education : Bachelor's degree (or higher) in a related discipline Certification : - Certifications in Information Security Management such as CISSP / CISM / CISA, ISO 27001 or equivalent Previous experience in the information security domain Location of the Job: #J ...

Engineering and Technology teams to embed security into the software development lifecycle, including secure design reviews, threat modelling, secure coding standards, dependency scanning, SAST / DAST tooling, secrets management, application / API penetration testing, vulnerability remediation tracking and release security governance. Support DORA‐related client and contractual obligations … agreed financial controls. Operate a risk‐based third‐party security assurance framework covering supplier onboarding, periodic reassessment, critical supplier classification, contractual security controls, subcontractor / sub‐processor oversight, supplier incident monitoring and exit arrangements. Own the client security assurance process, including security questionnaires, RFP / RFI responses, client ...

data classification through Azure Information Protection labelling. Help maintain the evidence and controls that support the company's accreditations, including ISO / IEC 27001, 27017, and 27018, Cyber Essentials Plus, and SOC 2. Learn and apply the principles of risk and information governance … Technical Requirements Two or more years' experience in a cyber security, SOC, or information security analyst role. Experience working within an ISO / IEC 27001 (or equivalent) accredited environment. Familiarity with ITIL service management processes, particularly Incident, Request, Change, and Problem management. Understanding ...

Computerized Systems Quality Assurance & Validation on a permanent full‐time capacity. Purpose of the Role: This role supports the compliant and timely design / development, testing, verification, validation, configuration, and life cycle management of computerized systems (including software) developed, purchased and / or utilised by IXICO. This role … compliance with current GCP, FDA 21 CFR Part 11, EU Annex 11, GAMP, FDA QSR Part 820 (QMSR), EU MDR (Regulation 2017 / 745), IEC 62304, GDPR, ISO 13485, ISO 27001 and ISO 42001 / EN 18286 regulatory ...

information security compliance, risk management, internal audit or assurance. Working knowledge of at least one major framework, such as PCI DSS, ISO / IEC 27001, SOC 2 or NIST CSF, with the ability to apply requirements in practice. Experience reviewing policies, audit reports … unsupported status updates. Experience operating within a PCI DSS Level 1 service provider, regulated technology or cloud services environment. Familiarity with ISO / IEC 42001, ISO 9001, HIPAA / HITECH, Cyber Essentials or related assurance frameworks. Experience using GRC, audit, project tracking ...

Sales. Job requirements Demonstrable and considerable experience in cloud security architecture (AWS essential and Azure), including IAM design, network segmentation, and secrets / KMS management. Hands-on DevSecOps experience: CI / CD pipeline security, Infrastructure-as-Code scanning, and policy-as-code. Strong hands-on software development … scripting capability, including Python and C# / .NET, with the ability to read, review and write secure production-quality code; familiarity with PowerShell, Bash, REST APIs and common software development tooling. Experience building security automation, API integrations, test harnesses or internal engineering tools, using source control, peer review, testing ...

regulatory specialists, the candidate will design and implement a QMS aligned with relevant international standards, including ISO 13485 and ISO / IEC 27001, while supporting the platform's longer-term regulatory strategy. The candidate will lead the development of quality processes … work collaboratively across strategy, planning, and technical teams to explore clinical trial applications. Desirable criteria 6. Experience of working with med tech and / or digital health. 7. Familiarity with ISO 13485:2016, and ISO / IEC 27001. 8. Experience working with ...

regulatory specialists, the candidate will design and implement a QMS aligned with relevant international standards, including ISO 13485 and ISO / IEC 27001, while supporting the platform's longer-term regulatory strategy. The candidate will lead the development of quality processes … work collaboratively across strategy, planning, and technical teams to explore clinical trial applications. Desirable criteria 6. Experience of working with med tech and / or digital health. 7. Familiarity with ISO 13485:2016, and ISO / IEC 27001. 8. Experience working with ...

business impact analyses, business continuity and IT disaster recovery plans and their testing (including the AWS cloud environment), helping ensure recovery objectives (RTO / RPO) are documented, achievable and evidenced, with lessons learned fed into improvements. Data Protection Governance Support the Data Protection Officer in operating the bank … security awareness and data protection training to foster a strong risk awareness culture across the bank. Requirements EDUCATION & TRAINING Bachelor's degree in Information / Cyber Security, Computer Science or a related discipline; equivalent professional experience may be considered. Relevant professional certifications are strongly preferred, for example CISM, CISSP ...

risks from across all of OMNIA, and ensuring that security risks are properly reported to all relevant Stakeholders in accordance with the defined governance / assurance model (aligned with MoD Secure by Design). Supporting the Information Assurance team with the implementation of the MoD Secure by Design methodology … Risk Indicators; Supporting the development of the necessary Information Assurance artefacts and outcomes which support compliance against the MoD assurance process (NIST 800-30 / 37 / 53); Support Information Assurance based engagements with Partners / suppliers and Authority representatives; Support and contribute towards Security Working Groups ...

risks from across all of OMNIA, and ensuring that security risks are properly reported to all relevant Stakeholders in accordance with the defined governance / assurance model (aligned with MoD Secure by Design). Supporting the Information Assurance team with the implementation of the MoD Secure by Design methodology. … Risk Indicators. Supporting the development of the necessary Information Assurance artefacts and outcomes which support compliance against the MoD assurance process (NIST 800-30 / 37 / 53). Support Information Assurance based engagements with Partners / suppliers and Authority representatives. Support and contribute towards Security Working ...

Senior Information Security Manager, Risk, Compliance, Security, London, Hybrid / Remote to £65,000 A leading independent authority are requiring a Senior Information Security Manager to play a pivotal role in their Compliance team. The Reporting to the Head of Compliance, you will lead the ISO 27001 … incidents, and contributing to policy development. The key responsibilities of this role are to oversee information security standards by managing and continually improving ISO 27001-certified Information Security Management System, leading business continuity management for information and technology risks, and supporting the organisation’s development ...

here is not a paperwork exercise at the edge of the business. It is a condition of doing business. We are working toward ISO 27001 certification and SOC 2 Type II attestation across a company that is scaling quickly, operating multi-tenant infrastructure in several countries … here, not your previous salary Equity in Volta, giving you the opportunity to share in the company's long-term success Retirement / pension contributions Comprehensive health, wellbeing and insurance benefits Generous number of vacation days each year Additional Information Equal Opportunity Volta is an equal opportunity employer. ...

Vulnerability Management Analyst – Qualys VM Role Summary We are looking for a hands‐on Vulnerability Management professional with strong operational experience on Qualys VM / VMDR to support BAU vulnerability operations for large enterprise environments. The role is execution‐heavy and requires day‐to‐day ownership of scanning, validation … stakeholder coordination , rather than advisory or governance‐only work. Key Responsibilities Qualys VM Operations Perform authenticated and unauthenticated vulnerability scans using Qualys VM / VMDR across: Servers (Windows & Linux) Network devices Endpoints Cloud workloads (AWS / Azure) Manage asset discovery, tagging, and grouping within Qualys. Configure and maintain ...

Vulnerability Management Analyst – Qualys VM Role Summary We are looking for a hands‐on Vulnerability Management professional with strong operational experience on Qualys VM / VMDR to support BAU vulnerability operations for large enterprise environments. The role is execution‐heavy and requires day‐to‐day ownership of scanning, validation … stakeholder coordination , rather than advisory or governance‐only work. Key Responsibilities Qualys VM Operations Perform authenticated and unauthenticated vulnerability scans using Qualys VM / VMDR across: Servers (Windows & Linux) Network devices Endpoints Cloud workloads (AWS / Azure) Manage asset discovery, tagging, and grouping within Qualys. Configure and maintain ...