now have an opportunity for an IT Manager working within our IT team. Key Requirements Run new IT Projects including the following: Implement ISO27001 Running further salesforce developments and integrations to systems working with our salesforce partner Maintain existing Powerbi reports and work with various … Network Strong understanding of business systems and basic ERP functionality. Oversee the cyber security for the group Cyber Essentials and Cyber Essentials Plus ISO27001 Support the IT Team with first line support requests and any out of hours fixes that might be … required and filling in when support staff are on annual leave Timely procurement of new IT equipment as required Oversee new office IT Setup / Refresh Ensuring that our IT systems are secure, backed up and available at all times What we look for in our people Firstly, we More ❯
now have an opportunity for an IT Manager working within our IT team. Key Requirements Run new IT Projects including the following: Implement ISO27001 Running further salesforce developments and integrations to systems working with our salesforce partner Maintain existing Powerbi reports and work with various … Network Strong understanding of business systems and basic ERP functionality. Oversee the cyber security for the group Cyber Essentials and Cyber Essentials Plus ISO27001 Support the IT Team with first line support requests and any out of hours fixes that might be … required and filling in when support staff are on annual leave Timely procurement of new IT equipment as required Oversee new office IT Setup / Refresh Ensuring that our IT systems are secure, backed up and available at all times What we look for in our people Firstly, we More ❯
Reading, Oxfordshire, United Kingdom Hybrid / WFH Options
Thames Water Utilities Limited
Job title Senior Cyber Threat Intelligence Analyst Ref 40789 Division Digital Transformation Location Reading - Clearwater Court - RG1 8DB Contract type Permanent Full / Part-time Full-time Hours 36 Salary Offering up to £65,000 per annum depending on experience Job grade B Closing date 15 / 05 / 2025 As a Senior Cyber Threat Intelligence Analyst , you will play a key role in protecting Thames Water's digital infrastructure by researching, analysing, and communicating the latest cyber threats facing the organisation. You'll evaluate global risks, provide actionable intelligence to stakeholders, and support the … capabilities and the broader cyber security roadmap. Base Location: Hybrid - Flexible working with travel to Thames Water offices as required Working Pattern: Full Time / 36 Hours per week What you should bring to the role: Minimum of 3 years in a cyber threat intelligence environment Strong knowledge of More ❯
Basingstoke, Hampshire, United Kingdom Hybrid / WFH Options
Office Angels
to liaise effectively with internal teams and external partners. Detail-oriented with the ability to track and manage multiple tasks simultaneously. Familiarity with ISO 9001, ISO27001, and ISO 14001 standards is a plus. Why Join Us? At our client, you'll More ❯
develop new technical and consulting capabilities to ensure a distinctive voice in the UK Cyber Market. You will also lead the newly developed Cyber / Information Security Consulting Practice and be accountable for its P&L. You will be a specialist in security in large projects as Technical Design … Include: Strategic Roadmap implementation of IS / IT security restructure programmes, projects of both a GRC and technical nature alongside frameworks such as ISO27001/ 2:2005 / 13, DORA, NIS 2, PCI-DSS, GDPR-DPO, NIST CSF SP800-53, PSD-2, FCA / PRA, and … Ownership of Strategic, Operational, and Tactical IT Security and Risk Management, technical and legislative mandates ranging from planning, design, build, and budgetary mandates. Programme / Project management of large and corporate security transformation and change programmes. Excellent leadership, communication, and diplomacy skills, influencing and organisational qualities, through application of More ❯
recognised, top-tier bank who provide world-class services to various institutions and individuals. Offering a comprehensive range of retail and corporate financial services / products, this thriving business with over 10 million active customers in over 700 business locations is the oldest African bank in the UK. Due … the office and 2 days working from home. Key Responsibilities: 1. Compliance and Governance: a. Oversee, and maintain compliance with Cyber Essentials Plus and ISO27001 requirements and other international standards as part of business as usual (BAU) to ensure periodic recertification. b. Conduct monthly testing of Cyber and IT controls. … Strong background in coordinating and conducting DR and BCP testing. Experience in Cloud computing Technology and delivery Service Desk Management Experience Excellent understanding of ISO27001 requirements and other relevant regulatory standards. Strong Analytical and problem–solving skills Excellent communication skills Ability to manage multiple tasks and projects simultaneously. In return More ❯
london, south east england, United Kingdom Hybrid / WFH Options
FirstBank UK Limited
recognised, top-tier bank who provide world-class services to various institutions and individuals. Offering a comprehensive range of retail and corporate financial services / products, this thriving business with over 10 million active customers in over 700 business locations is the oldest African bank in the UK. Due … the office and 2 days working from home. Key Responsibilities: 1. Compliance and Governance: a. Oversee, and maintain compliance with Cyber Essentials Plus and ISO27001 requirements and other international standards as part of business as usual (BAU) to ensure periodic recertification. b. Conduct monthly testing of Cyber and IT controls. … Strong background in coordinating and conducting DR and BCP testing. Experience in Cloud computing Technology and delivery Service Desk Management Experience Excellent understanding of ISO27001 requirements and other relevant regulatory standards. Strong Analytical and problem–solving skills Excellent communication skills Ability to manage multiple tasks and projects simultaneously. In return More ❯
to extend) Company: FTSE 100 Company How you will contribute.. The Head of SOC Operations will play a critical role in, overseeing the 24 / 7 / 365 monitoring, detection, and response to cybersecurity threats and incidents, ensuring operational excellence, threat intelligence integration, and alignment with the organization … knowledge of security technologies, SIEM platforms (e.g., Chronicle, Splunk, QRadar), EDR tools, firewalls, and network security. Experience with security frameworks and regulations (NIST, ISO27001, MITRE ATT&CK, CIS, etc.). Demonstrated experience leading security incident investigations and crisis response. Excellent leadership, communication, and project management More ❯
London, United Kingdom Posted on 24 / 02 / 2025 Job Description: Security Testing Engineer Location: Remote with occasional travel as required Employment Type: Permanent About the Role Scrumconnect Consulting is looking for a Security Testing Engineer to ensure the security, resilience, and compliance of GOV.UK digital services … GOV.UK digital services. Identify security vulnerabilities through static and dynamic application security testing (SAST & DAST) . Ensure security testing is seamlessly integrated into CI / CD pipelines and DevSecOps processes. Define security requirements and best practices, aligning with government security policies . 2. Functional & Non-Functional Security Testing Conduct … Burp Suite, Nessus, Metasploit, Nikto, or equivalent . Experience in API security testing using Postman, SoapUI, or REST-Assured . Strong understanding of CI / CD security, DevSecOps, and cloud security best practices (Azure, AWS, GCP) . Ability to simulate attack scenarios and conduct penetration testing on applications and More ❯
is responsible for developing, implementing and overseeing the organisation's IT compliance and risk management programmes, with a strong focus on maintaining the ISO27001 and ISO 90001 certifications. The role ensures that IT security and operations align with global Pluxee policies & procedures as … stakeholders. Define an annual roadmap for IT risk management and mitigations aligned to UK Portfolio, Information Security and Business Risk Roadmaps. PLX UK holds ISO27001 (Information Security Management System) and 9001 (Quality Management System) certifications and already has a traditional framework for risk management. Globally as Pluxee expands its governance … management. CRISC (Certified in Risk and Information Systems Control) would be a distinct advantage. Strong organisation, administration and documentation skills. Experience and knowledge of ISO27001 (Information Security Management System) and ISO 9001 (Quality Management System), ideally to Management Representative level. Knowledge of GDPR (General Data Protection Regulation) rules More ❯
is responsible for developing, implementing and overseeing the organisation's IT compliance and risk management programmes, with a strong focus on maintaining the ISO27001 and ISO 90001 certifications. The role ensures that IT security and operations align with global Pluxee policies & procedures as … stakeholders. Define an annual roadmap for IT risk management and mitigations aligned to UK Portfolio, Information Security and Business Risk Roadmaps. PLX UK holds ISO27001 (Information Security Management System) and 9001 (Quality Management System) certifications and already has a traditional framework for risk management. Globally as Pluxee expands its governance … management. CRISC (Certified in Risk and Information Systems Control) would be a distinct advantage. Strong organisation, administration and documentation skills. Experience and knowledge of ISO27001 (Information Security Management System) and ISO 9001 (Quality Management System), ideally to Management Representative level. Knowledge of GDPR (General Data Protection Regulation) rules More ❯
Guildford, Surrey, United Kingdom Hybrid / WFH Options
Sycurio
The Information Security Director develops, shapes, and maintains Sycurio's information security capability, driving the attainment and maintenance of the ISO27001, PCI-DSS, and SOC2 compliance. They are the subject matter expert on all things regarding security and compliance, owning the information risk management processes. They are the thought leader … relevant parties and providing assurance of policies, procedures, and systems. Develop, maintain, and expand the information security management system ('ISMS') to optimise compliance for ISO27001, PCI-DSS, and SOC2. Identify gaps in the information security capability, both technical and operational, and propose remediation and mitigation plans and solutions. Responsible for … or related field (Master's preferred). Industry certifications such as CISSP, CISM, CISA, or equivalent. Experience: 10+ years of information security experience. Financial / Fintech services / payments desirable. Deep knowledge of security frameworks (PCI, ISO27001, NIST) and regulations (GDPR, CCPA). More ❯
27001, Cyber Essentials , and internal policies. ✔ User Support : Resolve 2nd-line issues for workstations, networks, and peripherals. ✔ Disaster Recovery : Execute backup / recovery plans and respond to outages. ✔ Security Patching : Manage updates for endpoints, firewalls, and EDR tools (e.g., CrowdStrike, Microsoft Defender ). ✔ Account Management : Administer … user access rights in line with security policies. Skills & Experience ✅ 5+ years in desktop / server support, networking, or security operations. ✅ Technical Proficiency : Microsoft / VMware / Cloud technologies. Firewalls, SIEM (e.g., Microsoft Sentinel ), and EDR tools. WAN / LAN and endpoint security (patch management, AV More ❯
reading, south east england, United Kingdom Hybrid / WFH Options
4Square Recruitment Ltd
27001, Cyber Essentials , and internal policies. ✔ User Support : Resolve 2nd-line issues for workstations, networks, and peripherals. ✔ Disaster Recovery : Execute backup / recovery plans and respond to outages. ✔ Security Patching : Manage updates for endpoints, firewalls, and EDR tools (e.g., CrowdStrike, Microsoft Defender ). ✔ Account Management : Administer … user access rights in line with security policies. Skills & Experience ✅ 5+ years in desktop / server support, networking, or security operations. ✅ Technical Proficiency : Microsoft / VMware / Cloud technologies. Firewalls, SIEM (e.g., Microsoft Sentinel ), and EDR tools. WAN / LAN and endpoint security (patch management, AV More ❯
perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to 'Secure by Design' principles, corporate security policy / standards as well as industry recognised frameworks and best practice What you'll be doing: Develop, deliver and continually enhance a coherent approach to … to quantify and lead risk mitigation plans Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify / evidence appropriate compliance and security KPIs Work closely with 1st, 2nd and 3rd lines of defence on all matters relating to cyber security, information … process and technical security controls are maintained What experience you'll bring: Minimum of 5 years' experience in a multi-tiered IT enterprise environment / Governance, Risk and Compliance role Minimum of 5 years' experience in a Governance, Risk and Compliance role A track record of delivering security solutions More ❯
regulatory requirements and industry standard methodologies related to product security (e.g., GDPR, SOC2, SOX). Contribute to security risk assessments and audits. Essential Skills / Experience: Bachelor's degree in computer science, Information Security, or a related field (or equivalent experience). 8+ years of experience in cyber security … modern authentication protocols, credential vaulting, cloud user roles and least privilege approach. Solid understanding of Identity Governance tools and capabilities (e.g., Sailpoint , Saviynt), joiner / mover / leaver processes and identity proofing. Experience with credential vaulting and rotation tools and capabilities (e.g., CyberArk, Thycotic) Expertise in Active Directory … convey complex security topics to a wide audience. Minimum of 3 years of experience in a large global organization with 50K+ employees Desirable Skills / Experience Master's degree or equivalent experience in information security, Computer Science, or a related field. Industry certifications such as CISSP, CISM, or CEH. More ❯
analysts, business intelligence teams, and stakeholders to understand data requirements and translate them into technical specifications. Optimize and tune existing Power BI data models / datasets for performance and scalability. Troubleshoot and resolve backend issues related to data connectivity, refresh failures, and performance bottlenecks. Implement security measures to ensure … fintech firms, and multiple Silicon Valley startups. What makes Confiz stand out is our focus on processes and culture. Confiz is certified under ISO 9001:2015 (QMS), ISO27001:2022 (ISMS), ISO 20000-1:2018 (ITSM), and ISOMore ❯
Define roles, responsibilities, and expectations for team members. Conduct regular performance reviews, training sessions, and professional development programs. Manage team schedules to ensure 24 / 7 / 365 coverage. Collaborate with cross-functional teams, including Development and IT / NOC. Lead the transformation from legacy infrastructure practices … and Compliance Implement and manage infrastructure security measures, including firewalls, VPNs, and intrusion detection systems. Ensure compliance with industry standards such as GDPR, ISO27001 and SOC 2. Perform regular audits and address vulnerabilities in both cloud and traditional systems. Strategic Planning and Optimization Collaborate with … in cloud environments. Proven experience in monitoring tools, ITSM platforms, and hybrid or multi-cloud setups. Technical Skills Strong understanding of networking protocols (TCP / IP, DNS, routing, load balancing). Hands-on experience with cloud platforms such as AWS, Azure and VPS (Private and Self Hosted Clouds). More ❯
multiple projects simultaneously, ensuring timely completion within budget. *Strong Technical Report writing and presenting. *Work within and take ownership of the OHSAS18001, ISO9001, ISO14001, ISO27001 and PAS99 processes within the operational side of the business. Qualifications and Education Requirements *HNC / HND / BEng / MEng or … High level of proficiency in test and measurement. *Strong practical capabilities. (Rework to 0402, comfortable with QFN is desirable) *Demonstrable track record of CE / UKCA marking and product commercialisation. Personal Attributes *Strong attention to detail. *Positive and self-motivated with a high degree of initiative. *Focused on solutions … Strong IT, literacy, and numerical skills. *Good time management skills, balancing multiple interesting projects. Beneficial *Have or be working towards professional recognition - Eng Tech / IEng / CEng. *CCTV, Test, analogue electronics experience or interest. *NDT and sensing with experience of common practices / methodologies. *Good knowledge More ❯
Manchester, Lancashire, United Kingdom Hybrid / WFH Options
Action For Humanity
Here at Action For Humanity (AFH), we are looking for Senior Architect / Architect - Information Security to join us at our International Office in Manchester. You will join us on a full-time basis and in return you will receive a competitive annual salary. AFH is an INGO that … emergencies and critical needs through humanitarian, development and peace-building action, helping affected communities survive, recover and build a better future. The Senior Architect / Architect - Information Security will lead the design and implementation of security frameworks within a Microsoft-centric environment. The ideal candidate will have extensive hands … compliance with security policies. Support secure DevOps (DevSecOps) methodologies in IT and software development environments. What we are looking for in our Senior Architect / Architect - Information Security: Education Microsoft Certifications: Microsoft Certified: Cybersecurity Architect Expert, Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900), Microsoft Certified: Azure Security More ❯
a Security Engineer or in a similar role within a banking or financial services environment . Strong knowledge of network security, cloud security (AWS / Azure / GCP), encryption, IAM, endpoint protection, and SIEM solutions . Hands-on experience with tools such as Splunk, CrowdStrike, Qualys, Nessus, Palo … Alto, Fortinet, or similar . Solid understanding of security frameworks and standards: NIST, CIS Controls, ISO27001 , and compliance mandates relevant to banking. Familiarity with secure coding practices and DevSecOps pipelines. Experience with incident response, security monitoring, and digital forensics. More ❯
City of London, London, United Kingdom Hybrid / WFH Options
IPS Group
Key Areas of Responsibility: Regulatory Implementation & Frameworks Assist in establishing a comprehensive resilience framework that meets DORA standards and other recognised guidelines (e.g. ISO 22301, ISO27001, NIST). Draft internal controls, policies, training content, and risk assessment methodologies. Contribute to core DORA workstreams More ❯
london, south east england, United Kingdom Hybrid / WFH Options
IPS Group
Key Areas of Responsibility: Regulatory Implementation & Frameworks Assist in establishing a comprehensive resilience framework that meets DORA standards and other recognised guidelines (e.g. ISO 22301, ISO27001, NIST). Draft internal controls, policies, training content, and risk assessment methodologies. Contribute to core DORA workstreams More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Cyber Talent Limited
enhance our security posture. Ensure alignment of security strategies with business objectives and compliance mandates. Hands-on DevSecOps Implementation: Integrate security practices into CI / CD pipelines, automating security testing and compliance checks. Collaborate with development and operations teams to ensure secure coding practices and configurations. Implement and manage … network architectures are secure, scalable, and resilient. Policy Development and Compliance: Develop and enforce security policies, standards, and guidelines. Collaborate with the Compliance Manager / CISO to ensure adherence to regulatory requirements (e.g., GDPR, ISO27001). Incident Response and Management: Establish and maintain incident … with cloud security architectures (AWS). Technical Skills: understanding of security principles, protocols, and standards. Proficiency with DevOps and DevSecOps tools (e.g. GitLab CI / CD, Ansible, Terraform). Experience with security tools like SIEM / SOAR (preferably Rapid7), IDS / IPS, vulnerability scanners, and code analysis More ❯
attention to detail. Excellent written and verbal communication skills. Good organisation and time management ability. In addition, the following would be desirable: Development and / or source code review experience. AWS, Azure, GCP security review experience. ISO27001 auditing / implementation experience. Experience of More ❯