as Certified Identity and Access Manager (CIAM) or Certified Identity Management Professional (CIMP), CISSP, or CISM is highly desirable. Experience with cybersecurity frameworks and standards, such as NIST, ISO27001, or similar. General understanding of operational risk and risk-related control frameworks and practices such (ISO27001, NIST SP 800-53, NIST … understanding of IAM principles, technologies, and best practices. Strong and broad understanding of Cybersecurity and IAM methodologies, frameworks and best practices. Understanding of project management methodologies. Knowledge of M365 / Azure AD conditional access policies. Knowledge of Azure security principles and best practices. Bachelor's degree in computer science, information technology, or a related field. Excellent organizational skills. Ability … in a geographically dispersed virtual team environment. Excellent Power Point presentation documentation, verbal communication and interpersonal skills. Excellent stakeholder management skills and management of expectations. Proven experience in dealing / working with 3rd party suppliers. #J-18808-Ljbffr More ❯
aligned with industry standards (e.g., ISO27001, NIST). Assist in the deployment, configuration, and management of security infrastructure and technologies, including firewalls, intrusion detection / prevention systems, and secure network architectures. Provide guidance and support on Azure security practices, leveraging expertise in Microsoft Azure security frameworks and best practices. Stay updated with the latest … Energy or Construction industry projects is a plus. Experience in writing technical proposals along with other teams to deliver robust statement of works for client sign off. CERTIFICATIONS: CCNP / CCNA is nice to have. CREST / OSCP is nice to have. Microsoft and / or other cloud providers. ISO27001 Lead auditor More ❯
and policies aligned with industry best practices (e.g., NIST, ISO27001, CIS). Develop and maintain secure designs for firewalls, VPNs, intrusion prevention systems (IPS / IDS), network segmentation, and zero trust network access (ZTNA). Collaborate with IT, cloud, and cybersecurity teams to ensure secure integration across systems and applications. Lead architectural reviews and … of network protocols, routing, switching, DNS, DHCP, and encryption standards. Strong hands-on experience with network security solutions such as firewalls (e.g., Palo Alto, Fortinet, Cisco ASA), NAC, IPS / IDS, and SD-WAN. Understanding of Zero Trust Architecture, microsegmentation, and secure cloud networking (e.g., Azure, AWS, GCP). Experience with security information and event management (SIEM), threat intelligence … and vulnerability management. Excellent communication and documentation skills, with the ability to influence and educate stakeholders. Relevant certifications strongly preferred (e.g., CISSP, CCNP Security, CCIE Security, GIAC, Azure / AWS security certs). Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM More ❯
Gloucester, Gloucestershire, South West, United Kingdom
Morson Talent
enforce security best practices for Azure tooling, cloud workloads, and infrastructure components. Architect solutions for large-scale data centre migrations and greenfield deployments, including transformation from IaaS to PaaS / service compute. Oversee the deployment and optimisation of the Microsoft Defender Suite and cloud-native Azure security tooling. Design and manage network security components such as NSGs, network segmentation … Experience leading cloud migrations from on-premises or private data centres to Azure. Familiarity with Oracle environments, particularly during infrastructure transformation initiatives. Practical knowledge of DevSecOps and securing CI / CD pipelines. Strong foundation in network security, segmentation, and Azure networking principles. Certifications (Preferred) CISSP – Certified Information Systems Security Professional CCSP – Certified Cloud Security Professional CISM or SSCP – Highly … desirable Bonus Skills & Knowledge Awareness of compliance and risk frameworks such as ISO27001, NIST, and CIS Benchmarks. Ability to support threat modelling, cloud risk assessment, and incident response planning. Exposure to Infrastructure-as-Code (IaC) security using tools like Terraform, ARM templates, or Bicep. Skilled in translating technical risks into business terms for senior stakeholders. More ❯
PO15, Whiteley, Hampshire, United Kingdom Hybrid / WFH Options
Stratospherec Ltd
Server environments, and networking components. Develop and manage automation solutions to streamline infrastructure deployment, management, and monitoring. Implement and optimize automation tools such as Azure DevOps (or other CI / CD pipelines), Terraform, Node-Red, and Packer. Automate configuration management, infrastructure provisioning, and application deployment. Ensure system reliability, scalability, and performance through proactive monitoring and automation. Deploy and manage … monitoring tools (Zabbix, SolarWinds SentryOne, and other network / database monitoring solutions). Maintain and improve local network environments, including Dell servers and Dell switch configurations. Strong technical expertise in Microsoft Active Directory (AD), Windows Server environments, and authentication solutions. Plan for scalability, redundancy, and high availability to support future growth. Cloud & DevOps Integration (these tools and skills will … compliance in regulated environments. Proven ability to secure high-value data (PCI cardholder data, PII) and implement security best practices. Strong networking knowledge (LAN, WAN, DNS, DHCP, VPN, TCP / IP). Proficiency in firewall and load balancer technologies for secure environments. Hands-on experience with virtualization platforms (VMware, Citrix Xen) and backup solutions (Veeam or similar). Experience More ❯
expertise with monitoring and securing enterprise class technology estates. You will have proven experience with Cyber Security best practice including the NIST Cloud Security guidelines. You will support ISO27001 … compliance and have strong documentation skills. Experience in the Telco sector and knowledge of the UK Telecom Security Act would be advantageous to your application, as would CISSP and / or CISM accreditation. You will develop and maintain the information security architecture and will have proven experience with compliance, vulnerability management, network security, cloud security (AWS & Azure), firewalls and More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Sanderson
Experience with governance, risk, and compliance frameworks (e.g., ISO27001, NIST, GDPR) PRINCE2, PMP, or similar project management certification desirable Knowledge of cloud security (Azure / AWS) a plus Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications More ❯
vulnerability assessments. The ability to manage business and IT expectations, compliance, and Security requirements are critical to success. You should also have the ability to manage a small team / vendor resources for tasks assigned by Cyber Assurance Program Managers. Each Technical Project Manager will be responsible for oversight of a subset of annual penetration tests. This includes planning … include? Manage application and security assessments allocated by Cyber Assurance Program managers from start to end of the penetration Testing lifecycle. Testing should occur on time and output findings / reports should be communicated to internal stakeholders after review. Work with Cyber Assurance Program managers and Internal AXAXL stakeholders to strategically plan testing windows on suitable dates. Assisting testers … with Scoping Calls, ensuring prerequisites are in place in advance of test dates.Troubleshooting procedural / technical challenges and any blockers faced by testers. Ensure smooth delivery and completion of penetration tests. Providing regular updates to Cyber Assurance Program Managers on status of tests you have been allocated to support. Perform Technical Vulnerability and Web Application scans and provide output More ❯
Cyber Security Specialist ** Location: London / Hybrid (2 days in office) Rate: A highly competitive salary is available for suitable candidates Role Profile As a Cyber Security Specialist, you will be the go-to Subject Matter Expert (SME) for various projects, offering your insights and recommendations to enhance our security posture. With a strong technical background, you will work … and practises. Experience with security assessment and risk management methodologies. Proficiency in cloud security, particularly with Azure security tools and services. Familiarity with security standards and frameworks (e.g., ISO27001, NIST, CIS). Knowledge of security technologies such as firewalls and web proxies; experience with ZTNA, CTI, and threat modelling is beneficial. Excellent communication and interpersonal More ❯
SIEM) Experience with public cloud security (AWS, Azure, GCP) and an understanding of security best practices in those environments Understanding of enterprise security standards and frameworks such as ISO27001, NIST CSF, OWASP Top … Strong communication skills, with an ability to convey technical security issues to non-technical stakeholders Exposure to security architecture frameworks (e.g., TOGAF, SABSA) Hands-on experience with CI / CD security, container security, or secure application design Familiarity with vulnerability management and threat modelling techniques Security certifications such as CISSP, CISA, or equivalent (or working towards) Why join us More ❯
results. Familiarity with cloud security testing and testing applications hosted on platforms like AWS, Azure, or Google Cloud. Understanding of DevSecOps practices and experience integrating security testing into CI / CD pipelines. Experience: Minimum of 5-7 years of experience in information security, with at least 3 years focusing on penetration testing, vulnerability assessment, and application security. Proven track … vulnerability scanning tools (e.g., Nessus, Qualys, OpenVAS) and penetration testing tools (e.g., Metasploit, Burp Suite, Kali Linux). Familiarity with common security frameworks and compliance requirements (e.g., NIST, ISO27001, GDPR, PCI-DSS) Relevant certifications (e.g., CEH, OSCP, CISSP, CISM, GIAC) are strongly preferred. More ❯
manage cyber security incidents, ensuring timely resolution and root cause analysis. * Oversee the implementation and maintenance of InfoSec and Cyber Security compliance and assurance programs. * Ensure alignment with ISO27001, NIST, and other relevant security frameworks. * Collaborate with the Security Operations team to monitor, detect, and respond to threats. * Manage governance, risk, and compliance (GRC) activities … evolving threat landscape and emerging technologies. * Support audits and regulatory inspections as required. Essential Skills & Experience: * Proven experience in incident management and cyber security operations. * Strong knowledge of ISO27001, NIST, and other security frameworks. * Experience with governance, risk, and compliance (GRC) processes. * Familiarity with Security Operations Centres (SOC) and threat detection tools. * Excellent understanding of … in the strictest confidence and we would always speak to you before discussing your CV with any potential employer. Keywords: Cyber Security Manager, Incident Management, InfoSec, Cyber Assurance, ISO27001, NIST, CISSP, CISM, GRC, Security Operations, SOC, Risk Management, Threat Landscape, Defence, Stakeholder Engagement, Security Frameworks, SC Clearance, British National, Cyber Compliance, Security Governance, Security Training More ❯
and evaluation of risk, as well as using GRC tools and guidance developed for Risk mitigation. Practical knowledge of information security standards and risk assessment frameworks such as ISO27001, SOC 2, NIST 800-32 Strong knowledge of cyber controls, policies, and procedures. Experience of delivering metrics for senior level audiences. Demonstrate analytical and problem-solving … to work every day. And you'll never stop growing, whatever your level . Discover more reasons to connect with us, our people and purpose-driven culture at deloitte.co.uk / careers More ❯
St. Albans, Hertfordshire, United Kingdom Hybrid / WFH Options
Deloitte LLP
and evaluation of risk, as well as using GRC tools and guidance developed for Risk mitigation. Practical knowledge of information security standards and risk assessment frameworks such as ISO27001, SOC 2, NIST 800-32 Strong knowledge of cyber controls, policies, and procedures. Experience of delivering metrics for senior level audiences. Demonstrate analytical and problem-solving … to work every day. And you'll never stop growing, whatever your level . Discover more reasons to connect with us, our people and purpose-driven culture at deloitte.co.uk / careers More ❯
Reading, Berkshire, United Kingdom Hybrid / WFH Options
Deloitte LLP
and evaluation of risk, as well as using GRC tools and guidance developed for Risk mitigation. Practical knowledge of information security standards and risk assessment frameworks such as ISO27001, SOC 2, NIST 800-32 Strong knowledge of cyber controls, policies, and procedures. Experience of delivering metrics for senior level audiences. Demonstrate analytical and problem-solving … to work every day. And you'll never stop growing, whatever your level . Discover more reasons to connect with us, our people and purpose-driven culture at deloitte.co.uk / careers More ❯
Guildford, Surrey, United Kingdom Hybrid / WFH Options
Deloitte LLP
and evaluation of risk, as well as using GRC tools and guidance developed for Risk mitigation. Practical knowledge of information security standards and risk assessment frameworks such as ISO27001, SOC 2, NIST 800-32 Strong knowledge of cyber controls, policies, and procedures. Experience of delivering metrics for senior level audiences. Demonstrate analytical and problem-solving … to work every day. And you'll never stop growing, whatever your level . Discover more reasons to connect with us, our people and purpose-driven culture at deloitte.co.uk / careers More ❯
failure. Essential Skills & Experience: At least 2 years of hands-on experience in information security or IT infrastructure within an enterprise environment. Familiarity with security standards such as ISO27001, Cyber Essentials, GDPR, and Data Protection Act. Experience with Microsoft O365 Security solutions and network security operations. Understanding of security testing principles, including vulnerability scanning, risk … apply now. Keywords: Information Security Consultant, IT Security Consultant, Cybersecurity Specialist, Microsoft O365 Security, Enterprise Security Jobs, Information Security Leeds, IT Risk Management, Security Incident Response, Vulnerability Management, ISO27001, GDPR Compliance, Security Awareness, Disaster Recovery and Business Continuity. More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Precise Placements
Head of Cyber Security Location: London / Hybrid Type: Permanent Join a forward-thinking international organisation as Head of Cyber Security , where you will shape and lead the global cyber security strategy. This is a high-impact, senior leadership role ideal for someone who combines strategic oversight with hands-on expertise across security operations, incident response, and governance. As … cyber security strategy, policies, and controls across a multi-regional environment. Lead global security operations, including threat detection, incident response, and risk mitigation. Manage compliance with standards such as ISO27001, NIST, Cyber Essentials+, and GDPR. Build and develop a high-performing cyber team spanning multiple international offices. Collaborate with senior leadership, risk committees, and external vendors to ensure alignment on … level IT security teams and technologies. Deep understanding of cloud security (Microsoft stack preferred), firewalls, VPNs, ZTNA, and SIEM platforms. Knowledge of legal, regulatory, and risk management frameworks including ISO27001, GDPR, and NIST. Certifications such as CISSP, CISM or equivalent are desirable. Strong stakeholder engagement skills and the ability to work across business functions globally. Why Apply? Lead a global More ❯
solid technical understanding are essential. Responsibilities: Regulatory Compliance & Framework Development: Support the implementation of a comprehensive business resilience framework aligned with DORA and other regulatory requirements (e.g., NIST, ISO 22301, ISO27001). Develop training materials, policies, controls, and risk assessment methodologies to ensure adherence to regulatory standards. Support key pillars of the DORA … operational resilience, systems architecture, or related fields, with extensive exposure to Operational Resilience, particularly DORA . Strong understanding of UK regulatory requirements and frameworks such as DORA, NIST, ISO 22301, and ISO 27001. Proven experience conducting risk assessments, regulatory compliance reviews, and resilience testing . Ability to translate regulatory requirements into actionable plans and track them More ❯
of Olympus Tech. KNOWLEDGE, SKILLS AND EXPERIENCE Technical Educated to Degree Level, or equivalent, in Computer Science, Information Technology or related discipline. Proven experience in software support and technical / business / data analysis. Able to communicate effectively and clearly in writing and verbally, including drafting correspondence and documents and good presentation skills. Experience with business intelligence and … MRI Qube, Yardi or similar. Experience with complex databases Experience in system support, monitoring & troubleshooting. Experience of working in environments with high information security standards to meet needs of ISO27001, SOC2 and GDPR etc Experience with AI and / or Machine Learning Project planning and management experience. Experience with finance systems i.e. Sage, Qube, IRIS or similar. Experience with More ❯
of Olympus Tech. KNOWLEDGE, SKILLS AND EXPERIENCE Technical Educated to Degree Level, or equivalent, in Computer Science, Information Technology or related discipline. Proven experience in software support and technical / business / data analysis. Able to communicate effectively and clearly in writing and verbally, including drafting correspondence and documents and good presentation skills. Experience with business intelligence and … MRI Qube, Yardi or similar. Experience with complex databases Experience in system support, monitoring & troubleshooting. Experience of working in environments with high information security standards to meet needs of ISO27001, SOC2 and GDPR etc Experience with AI and / or Machine Learning Project planning and management experience. Experience with finance systems i.e. Sage, Qube, IRIS or similar. Experience with More ❯
of Olympus Tech. KNOWLEDGE, SKILLS AND EXPERIENCE Technical Educated to Degree Level, or equivalent, in Computer Science, Information Technology or related discipline. Proven experience in software support and technical / business / data analysis. Able to communicate effectively and clearly in writing and verbally, including drafting correspondence and documents and good presentation skills. Experience with business intelligence and … MRI Qube, Yardi or similar. Experience with complex databases Experience in system support, monitoring & troubleshooting. Experience of working in environments with high information security standards to meet needs of ISO27001, SOC2 and GDPR etc Experience with AI and / or Machine Learning Project planning and management experience. Experience with finance systems i.e. Sage, Qube, IRIS or similar. Experience with More ❯
services structure with mature or evolving capability across all areas of digital security and cyber defence. We align our efforts to the NIST framework and other recognised certifications including ISO27001 and SOC2 and strive to keep pace with the continually evolving threat landscape, in support of A&O Shearman's strategy to lead where global complexity creates opportunity. In addition … office based working for a minimum of 60% of your time ( i.e. three days per week for a full time role ) in accordance with our hybrid working policy. : youtu.be / WLYCYtSfJoc ,300# # / video# More ❯
East London, London, United Kingdom Hybrid / WFH Options
A&O Shearman
services structure with mature or evolving capability across all areas of digital security and cyber defence. We align our efforts to the NIST framework and other recognised certifications including ISO27001 and SOC2 and strive to keep pace with the continually evolving threat landscape, in support of A&O Shearmans strategy to lead where global complexity creates opportunity. In addition, you … implemented in our environment and align with NIST and CIS benchmarks. Validate effectiveness of implemented IAM security controls through technical analysis. Perform residual IAM risk assessments and document acceptance / rejection rationale. Scope and manage IAM security testing including penetration tests and Red Teaming as well as remediation activities. Work closely with wider Information Security team to ensure compliance … security, with a significant focuson identity and access management. Current Azure certifications (e.g., Azure Security Engineer Associate). Strong knowledge of security and compliance standards and frameworks, such as ISO27001, MS CAF, and WAF. Excellent communication, leadership, and interpersonal skills, with the ability to collaborate across teams and with external parties such as MSSP. Ability to work effectively in a More ❯
management. Knowledge of Risk Management frameworks and their integration with threat intelligence. Hands-on experience with cloud security reviews (AWS, Azure, GCP) considering cloud-specific threats. Familiarity with ISO27001 audits and threat-informed compliance practices. Additional certifications such as CISM, CISSP, ECSA, CREST CCT are advantageous. Who we are: We're a global business empowering More ❯