and implement information security policies, standards, and guidance in collaboration with stakeholders. Ensure compliance with industry standards such as NIST CSF, PCI-DSS, ISO27001, and SOC 2. Coordinate responses to internal and external audits and liaise with key stakeholders. Develop and deliver security policy awareness … regulated industry. Experience in developing and implementing information security policies, standards, and procedures. Familiarity with security standards such as NIST CSF, PCI-DSS, ISO27001, and SOC2. Strong skills in security metrics and reporting. Ability to engage collaboratively with technical and non-technical stakeholders. Excellent written More ❯
years in IT Audit, preferably within Financial Services. A relevant Professional qualification in Audit or Cyber Security Knowledge of cybersecurity frameworks (NIST CSF /ISO27001) and cloud security best practices (AWS, Azure, etc.). Excellent communication skills, both written and verbally, with a diverse More ❯
years in IT Audit, preferably within Financial Services. A relevant Professional qualification in Audit or Cyber Security Knowledge of cybersecurity frameworks (NIST CSF /ISO27001) and cloud security best practices (AWS, Azure, etc.). Excellent communication skills, both written and verbally, with a diverse More ❯
london, south east england, United Kingdom Hybrid / WFH Options
Bruin
years in IT Audit, preferably within Financial Services. A relevant Professional qualification in Audit or Cyber Security Knowledge of cybersecurity frameworks (NIST CSF /ISO27001) and cloud security best practices (AWS, Azure, etc.). Excellent communication skills, both written and verbally, with a diverse More ❯
prioritising risks. Lead end-to-end risk remediation, ensuring security enables business operations. Conduct risk assessments, monitor threats, and maintain control frameworks (NIST, ISO27001, Cyber Essentials). Produce risk management reports and support board-level reporting. Collaborate with auditors, regulators, and vendors to evaluate IT … and drive incident management. Requirements: Strong experience in Information Security, focusing on Governance, Risk, and Compliance (GRC). Expertise in risk frameworks (NIST, ISO27001, Cyber Essentials) and IT policy development. Relevant certifications (CISA, CRISC, CISM) are highly preferred. For more information, please apply directly More ❯
prioritising risks. Lead end-to-end risk remediation, ensuring security enables business operations. Conduct risk assessments, monitor threats, and maintain control frameworks (NIST, ISO27001, Cyber Essentials). Produce risk management reports and support board-level reporting. Collaborate with auditors, regulators, and vendors to evaluate IT … and drive incident management. Requirements: Strong experience in Information Security, focusing on Governance, Risk, and Compliance (GRC). Expertise in risk frameworks (NIST, ISO27001, Cyber Essentials) and IT policy development. Relevant certifications (CISA, CRISC, CISM) are highly preferred. For more information, please apply directly More ❯
prioritising risks. Lead end-to-end risk remediation, ensuring security enables business operations. Conduct risk assessments, monitor threats, and maintain control frameworks (NIST, ISO27001, Cyber Essentials). Produce risk management reports and support board-level reporting. Collaborate with auditors, regulators, and vendors to evaluate IT … and drive incident management. Requirements: Strong experience in Information Security, focusing on Governance, Risk, and Compliance (GRC). Expertise in risk frameworks (NIST, ISO27001, Cyber Essentials) and IT policy development. Relevant certifications (CISA, CRISC, CISM) are highly preferred. For more information, please apply directly More ❯
Lead or support vulnerability analysis activities, including risk-based prioritisation and remediation tracking. Ensure alignment with global security standards and frameworks (e.g. NIST, ISO27001, CIS). Partner with compliance, audit, and internal stakeholders to address regulatory requirements and support evidence gathering for audits. Leverage SIEM … Consultant, Risk Analyst, or GRC Specialist in enterprise environments—ideally within financial services. Strong working knowledge of security frameworks and standards: NIST CSF, ISO27001, CIS, etc. Experience with security risk assessments, controls design, and compliance monitoring. Familiarity with vulnerability management practices and tools. Exposure to More ❯
as part of critical vendor performance assessment ensuring operational resilience is maintained. In collaboration with GT, manage security systems, including firewalls, intrusion detection / prevention systems, and antivirus software. In collaboration with GT, Develop and test incident response plans and coordinate responses to security incidents and breaches Raise awareness … of cybersecurity issues among bank London employees; conduct annual training / workshops to educate staff on security best practices aligned with GT. Other Duties Maintain professional and technical knowledge (Conduct Rule 2) e.g. by attending educational workshops; read professional publications; benchmarking state-of-the-art practices etc where relevant. … work deliverables are in compliance with policies and regulatory requirements . Maintains quality service by establishing and enforcing organization standards. To act as second / third level support with GT for support related issues. To comply with all applicable FCA / PRA conduct rules. Compliance with all mandatory More ❯
security in processes and digital projects. Perform cybersecurity analysis , translating regulatory and business requirements into actionable tasks. Advise on frameworks such as NIST, ISO27001, CIS Controls, CSA CCM. Support GRC activities , including risk assessments and compliance monitoring. Must-Have Experience & Skills: 5+ years in IT … security consulting or transformation roles. Proven delivery of complex, multi-site security projects globally. Deep knowledge of security frameworks (NIST, ISO27001, CIS, CSA CCM). Strong understanding of GRC processes , vulnerability management, incident response, and SOC. Familiarity with DevSecOps , secure SDLC, disaster recovery, and BCP. More ❯
security in processes and digital projects. Perform cybersecurity analysis , translating regulatory and business requirements into actionable tasks. Advise on frameworks such as NIST, ISO27001, CIS Controls, CSA CCM. Support GRC activities , including risk assessments and compliance monitoring. Must-Have Experience & Skills: 5+ years in IT … security consulting or transformation roles. Proven delivery of complex, multi-site security projects globally. Deep knowledge of security frameworks (NIST, ISO27001, CIS, CSA CCM). Strong understanding of GRC processes , vulnerability management, incident response, and SOC. Familiarity with DevSecOps , secure SDLC, disaster recovery, and BCP. More ❯
london, south east england, United Kingdom Hybrid / WFH Options
Eames Consulting
security in processes and digital projects. Perform cybersecurity analysis , translating regulatory and business requirements into actionable tasks. Advise on frameworks such as NIST, ISO27001, CIS Controls, CSA CCM. Support GRC activities , including risk assessments and compliance monitoring. Must-Have Experience & Skills: 5+ years in IT … security consulting or transformation roles. Proven delivery of complex, multi-site security projects globally. Deep knowledge of security frameworks (NIST, ISO27001, CIS, CSA CCM). Strong understanding of GRC processes , vulnerability management, incident response, and SOC. Familiarity with DevSecOps , secure SDLC, disaster recovery, and BCP. More ❯
create and ensure compliance with industry regulations and company-specific policies. Implementing and maintaining Information Security and Privacy Standards and Frameworks, such as ISO27001, NIST, and CIS. Reviewing system and data architectures alongside engineering teams and architects, recommending best practices. Assessing vulnerabilities, articulating their impact … technical stakeholders. Managing and supporting project stakeholder expectations with a flexible, pragmatic approach. Cyber Governance Analyst Requirements: Strong knowledge of cybersecurity frameworks (e.g., ISO27001, NIST, CIS). Proven experience in a similar role, supporting governance, monitoring controls, and managing risks. Ability to assess and articulate … for enhanced flexibility. We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, sex, disability, religion / belief, sexual orientation or age. More ❯
create and ensure compliance with industry regulations and company-specific policies. Implementing and maintaining Information Security and Privacy Standards and Frameworks, such as ISO27001, NIST, and CIS. Reviewing system and data architectures alongside engineering teams and architects, recommending best practices. Assessing vulnerabilities, articulating their impact … technical stakeholders. Managing and supporting project stakeholder expectations with a flexible, pragmatic approach. Cyber Governance Analyst Requirements: Strong knowledge of cybersecurity frameworks (e.g., ISO27001, NIST, CIS). Proven experience in a similar role, supporting governance, monitoring controls, and managing risks. Ability to assess and articulate … for enhanced flexibility. We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, sex, disability, religion / belief, sexual orientation or age. More ❯
closely with Engineering and IT teams to embed security at every stage of the development lifecycle Help maintain compliance with frameworks such as ISO27001, GDPR, PCI DSS, and CIS benchmarks Contribute to evolving internal policies and promote awareness of good security practices across teams What … application security principles, with exposure to penetration testing or ethical hacking (CEH or similar certification is a plus) Awareness of industry frameworks like ISO27001, CIS, or similar, and ideally holding a CISMP certification A proactive interest in cyber security trends, with a willingness to engage … e.g. Monthly Light's Up and The Shine awards Relaxed dress code and modern office space (games area, chill-out areas, bookclub, free drinks / snacks) Onsite gym at HQ (including access to free HIIT & stretch classes) Strong learning and development culture More ❯
Rochester, Kent, South East, United Kingdom Hybrid / WFH Options
Technical Placements
regarding regulatory compliance and Cyber security. Ensure compliance with industry standards and regulatory requirements specific to fire alarm and life safety devices (EN54\UL864\ISO27001\CE). Implement best practices in coding, testing, and documentation. Develop and refine measurable software development processes to enhance efficiency and quality. Collaborate with R … with a Software focus. Experience Considerable proven experience managing development teams of 10-15 engineers within an electronic product segment, ideally regulatory controlled. Knowledge / Skills Management Proven experience leading and managing software development teams of various sizes, with a track record as an exceptional people manager. Ability to … the product design and functionality. Certification Experience in designing products for a regulatory controlled market and ensuring compliance with those standards including ISO9001 and ISO27001/ NIST or other relevant security frameworks. This is an excellent opportunity to become part of the key engineering team within a developing business More ❯
of selling and leading cyber resilience and transformation projects Experience of the application of key cyber security standards and best practices such as ISO27001, IEC 62443, NIS regulations and NIS CAF. Additional information Life At PA encompasses our peoples' experience at PA. It More ❯
Information Security Officer – Cybersecurity - Banking Excellent opportunity opens for an Information Security Officer / Information Security Assurance Officer with Financial Services experience to join a London based bank’s team, helping to ensure all information and cyber risks are identified, analysed, mitigated, and monitored, ensuring the smooth operation of … identified during audits or external assessments. Develop, review, and maintain information security governance documents, including policies, standards, frameworks, and procedures. Create and deliver Information / Cyber Security Awareness training, educating staff on best practices. Maintain comprehensive records and documentation of ISO activities. Provide regular updates and reports … prioritize tasks. Strong analytical and problem-solving skills. Proficiency in Microsoft Office. Interested? Please Apply! SOC ISO ISAO CISSP NIST CSF ISO27000 ISO27001 PCI DSS GDPR Cybersecurity Cyber Security Information Security Infosec Cybersec Risk Infrastructure ISMS More ❯
Information Security Officer – Cybersecurity - Banking Excellent opportunity opens for an Information Security Officer / Information Security Assurance Officer with Financial Services experience to join a London based bank’s team, helping to ensure all information and cyber risks are identified, analysed, mitigated, and monitored, ensuring the smooth operation of … identified during audits or external assessments. Develop, review, and maintain information security governance documents, including policies, standards, frameworks, and procedures. Create and deliver Information / Cyber Security Awareness training, educating staff on best practices. Maintain comprehensive records and documentation of ISO activities. Provide regular updates and reports … prioritize tasks. Strong analytical and problem-solving skills. Proficiency in Microsoft Office. Interested? Please Apply! SOC ISO ISAO CISSP NIST CSF ISO27000 ISO27001 PCI DSS GDPR Cybersecurity Cyber Security Information Security Infosec Cybersec Risk Infrastructure ISMS More ❯
Information Security Officer – Cybersecurity - Banking Excellent opportunity opens for an Information Security Officer / Information Security Assurance Officer with Financial Services experience to join a London based bank’s team, helping to ensure all information and cyber risks are identified, analysed, mitigated, and monitored, ensuring the smooth operation of … identified during audits or external assessments. Develop, review, and maintain information security governance documents, including policies, standards, frameworks, and procedures. Create and deliver Information / Cyber Security Awareness training, educating staff on best practices. Maintain comprehensive records and documentation of ISO activities. Provide regular updates and reports … prioritize tasks. Strong analytical and problem-solving skills. Proficiency in Microsoft Office. Interested? Please Apply! SOC ISO ISAO CISSP NIST CSF ISO27000 ISO27001 PCI DSS GDPR Cybersecurity Cyber Security Information Security Infosec Cybersec Risk Infrastructure ISMS More ❯
designs from a people, process and technology perspective; including security technologies, controls and assessment methodologies Experience with information security frameworks and standards such as ISO27001/ 2, NIST, PCI DSS and their application in diverse environments. Experience within a consultancy practice. Knowledgeable about existing best practices for integration of More ❯
What do you want to search? Keyword Apprenticeship Type Location Cyber Security Apprentice Apply From: 17 / 02 / 2025 Learning Provider Delivered by FIREBRAND TRAINING LIMITED Employer THAMES WATER UTILITIES LIMITED Vacancy Description What you will be doing as a Cyber Security Apprentice - Level 4 Daily responsibilities … the gathering of evidence for the annual review Support compliance with relevant industry standards, regulations, and best practices, such as GDPR, NIS and ISO27001 submissions to the Directorate of Water Inspection DWI Provide the monthly metric dashboards for the Digital Performance and Strategy meetings, ensuring … Vacancy Location Clearwater Court Vastern Road Berkshire RG1 8DB Wage Frequency Custom Number of Vacancies 1 Vacancy Reference Number Key Dates Apply From 17 / 02 / 2025 Closing Date For Applications 2025-03-:59:59 Interview Begin From Possible Start Date 2025-09-:00:00 Training Training More ❯
service review meetings with key clients, identifying opportunities for improvement and growth. Operational Responsibilities Drive help desk processes, ensuring adherence to ISO/ ITIL-based best practices. To ensure security best practices are worked to including GDPR, and clients own policies and procedures. Work closely with technical … infrastructure, cloud services, or managed IT solutions. Experience working on a ticketing customer service platform Exposure to compliance and security frameworks such as ISO27001, Cyber Essentials, NIST, or GDPR. What We Offer Competitive salary and benefits package. Professional development and training opportunities. A positive, supportive More ❯
Employment Type: Permanent
Salary: £40000 - £50000/annum Hybrid, Bonus, Health Care Plan
service review meetings with key clients, identifying opportunities for improvement and growth. Operational Responsibilities Drive help desk processes, ensuring adherence to ISO/ ITIL-based best practices. To ensure security best practices are worked to including GDPR, and clients own policies and procedures. Work closely with technical … infrastructure, cloud services, or managed IT solutions. Experience working on a ticketing customer service platform Exposure to compliance and security frameworks such as ISO27001, Cyber Essentials, NIST, or GDPR. What We O ffer Competitive salary and benefits package. Professional development and training opportunities. A positive More ❯
Become a product expert on Vanta and how our platform can be used to improve security posture through our compliance offerings (SOC 2, ISO27001, GDPR, HIPAA, USDP, and Custom Frameworks), Trust Reports, and Risk Management solution. Guide implementation, configuration, and optimization of Vanta Trust Management … enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA, and ISO27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous-not More ❯