26 to 48 of 48 ISO 27001 Lead Implementer Jobs in England

between threat, vulnerability, control effectiveness, likelihood, impact and residual risk. Using recognised approaches and frameworks such as ISO / IEC 27001 and ISO / IEC 27005, NIST Cybersecurity Framework, NIST SP 800-30 or the NCSC Cyber Assessment Framework … . Develop and maintain security standards, policies, and procedures to ensure alignment with recognised frameworks e.g. ISO 27001 and NIST. Conduct assurance and measurement processes for organisational security capabilities, to produce insightful reports and guide remedial actions across relevant business areas. Plan and execute ...

suits a security professional who can provide practical, risk-based advice in a client-facing environment. Key Responsibilities Support GRC activities aligned with ISO 27001, NIST Cybersecurity Framework, Cyber Essentials and GovAssure. Conduct information security risk assessments across business processes, projects, technology platforms … Risk Management. Experience in security risk assessments, control reviews and audit or compliance activities. Strong understanding of security governance, risk management and ISO 27001. Familiarity with NIST Cybersecurity Framework and Cyber Essentials. Strong stakeholder engagement, communication, report writing and presentation skills. Ability to communicate security concepts ...

organisation's Information Security Management System (ISMS), implementing technical controls that contribute to compliance with ISO / IEC 27001, Cyber Essentials Plus and other required standards. Monitor the security, health and performance of the IT environment, identifying risks, vulnerabilities and opportunities for improvement … understanding of information security principles and experience implementing technical security controls aligned with recognised frameworks such as ISO / IEC 27001 and Cyber Essentials Plus. Experience mentoring or providing technical leadership to junior IT professionals. Experience with infrastructure automation or scripting using technologies ...

security and technology risk assessments , working with technical teams to identify appropriate and practical mitigation plans. Support audit, assurance and compliance activities , including ISO 27001, Cyber Essentials and internal control programmes. Translate security frameworks and regulatory requirements into practical, operational standards and controls . … Security Compliance . Experience developing and maintaining security policies, standards, controls and governance documentation . A strong understanding of security frameworks such as ISO 27001 and NIST CSF . Experience producing security compliance reporting, MI or dashboards , ideally using Power BI. Experience managing ...

assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM / SOAR platforms, detection engineering, threat … autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring and rollback mechanisms. Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer / Auditor, cloud security certifications or AI / security-focused training. Please ...

assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM / SOAR platforms, detection engineering, threat … autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring and rollback mechanisms. Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer / Auditor, cloud security certifications or AI / security-focused training. Please ...

remediation strategies and residual risks to stakeholders. Supporting governance, risk and compliance activities within secure and regulated environments. Depending on experience, you may: Lead consultancy engagements and workstreams. Mentor and support the development of colleagues. Act as a trusted adviser to senior client stakeholders. Contribute to business … controls. Understanding of Defence procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud ...

regulated, high-consequence or security-conscious environment. You'll have a strong understanding of recognised cyber security frameworks such as NIST CSF, ISO 27001 and CAF , alongside experience leading cross-functional cyber initiatives. Excellent communication skills are essential, particularly the ability to take complex … Industrial Control Systems, cyber investment planning or major digital transformation programmes would be particularly advantageous. Relevant certifications such as CISSP, CISM, SABSA or ISO 27001 Lead Implementer would also be welcomed. Cyber Strategy Manager Why Apply? This ...

external (standards auditors) including preparation, execution and remediation tracking. Maintain documentation and evidence of certifications and attestations Maintain key standards such as ISO 27001, adding business value. Recruit, Manage, coach and develop the Risk & Compliance team, setting clear goals & objectives, cultivating an inclusive culture … accountability, continuous learning and collaboration. Proactively participate as senior member and leader within the ISO leadership team contributing to overall strategy, engagement, team dynamic and programmes within ISO. Act as a trusted advisor to executive and SME stakeholders, providing actionable insight and guidance to support risk-aware ...

Resilience frameworks. Desirable qualifications or equivalent relevant experience Degree or equivalent experience in Cyber Security, Information Security, Risk or Technology. CISM CRISC CISSP ISO 27001 Lead Implementer or Lead Auditor NIST Cybersecurity Framework Practitioner Certified ...

security policies; assist in internal and external security audits. Risk Assessment:Perform and document cyber risk assessments in line with NCSC CAF and ISO 27005 frameworks. Operational Technology (OT) Security: Collaborate with OT Security Manager to enhance security within control systems and manufacturing networks (ICS / SCADA … within a regulated or critical infrastructure environment. Working knowledge of:o NCSC Cyber Assessment Framework (CAF)o ISO / IEC 27001 Information Security Managemento NISR Regulations and ONR SyAPso Network security principles of IT systems Hands-on experience with SIEM tools (e.g. Splunk ...

inclusive workplace. / p p The Project Team Safety, Licensing and Assurance Function is seeking an experienced strong Cyber Security Manager / strong to lead the development and implementation of cyber security strategies for our SMR project. This role will focus on information in an IT realm … / li li Ensure compliance with relevant nuclear and cyber security standards, which could include: br / -ISO / IEC 27001 (Cyber Security Management) br / -UK NIS 18 regulations br / -NCSC guidance br / -NIST SP 800 Series br / -Codes ...

business teams, driving security risk assessments, compliance initiatives, business continuity planning and audit programmes. You will oversee regulatory and certification activities including ISO 27001, PCI DSS and NIS2, while ensuring identified risks are clearly communicated, prioritised and effectively remediated. The role offers significant exposure … ability to translate technical issues into business language and a passion for improving security maturity. Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor / Implementer are desirable, alongside substantial experience operating within complex enterprise ...

business teams, driving security risk assessments, compliance initiatives, business continuity planning and audit programmes. You will oversee regulatory and certification activities including ISO 27001, PCI DSS and NIS2, while ensuring identified risks are clearly communicated, prioritised and effectively remediated. The role offers significant exposure … ability to translate technical issues into business language and a passion for improving security maturity. Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor / Implementer are desirable, alongside substantial experience operating within complex enterprise ...

Assessment Framework and Cyber Essentials • MOD security assurance approaches, including JSP 440, Secure by Design and CSMv4 • ISO / IEC 27001 and NIST frameworks • FSC, IPSA and List N • ONR Security Assessment Principles (SyAPs) • UK GDPR, the Data Protection Act 2018, the Computer … level certifications and professional recognition, and to be working towards expert level. Examples include: • BCS CISMP or ISO / IEC 27001 Lead Implementer or Lead Auditor, and ideally holding, or actively studying for, ISC2 ...

Assessment Framework and Cyber Essentials MOD security assurance approaches, including JSP 440, Secure by Design and CSMv4 ISO / IEC 27001 and NIST frameworks FSC, IPSA and List N ONR Security Assessment Principles (SyAPs) UK GDPR, the Data Protection Act 2018, the Computer … expect you to hold intermediate-level certifications, or be working towards them. Examples include: BCS CISMP or ISO / IEC 27001 Lead Implementer or Lead Auditor. Associate Membership of CIISec and / or Associate ...

audits to ensure adherence to regulatory standards and local government frameworks.Ensure that security compliance efforts are aligned with relevant laws and regulations, and lead audits to verify compliance with standards like PSN, PCI-DSS, etc.Develop and manage ongoing assurance processes to evaluate the effectiveness of security controls … Systems Security Professional) or similar cybersecurity certifications (e.g., CISM, CISA, CRISC) are essential. Other relevant certifications, such as CISA (Certified Information Systems Auditor), ISO 27001 Lead Implementer, or SOC 2 knowledge are desirable.Essential requirements Candidates will only ...

requirements, the cyber threat landscape and business priorities Establish effective programme governance, control, reporting, risk management and assurance to support successful delivery outcomes Lead multi-disciplinary teams across cyber security, technology, risk, operations and business functions to deliver transformational change Deliver cyber maturity assessments, security roadmaps, implementation … management skills, with experience coordinating diverse delivery teams and suppliers Relevant cyber security qualifications or certifications such as CISSP, CISM, CRISC, CCSP, SABSA, ISO 27001 Lead Implementer / Auditor, SANS, GIAC certifications or equivalent Up-to-date knowledge ...

community; and play a significant part in the UK’s sustainable nuclear future. About the role As a Cyber Strategy Manager you will lead the development and execution of the organisation’s cyber security strategy, ensuring alignment with national security priorities, regulatory requirements, and operational resilience goals. … setting. Key responsibilities Develop and maintain a long-term cyber strategy aligned with organisational objectives and national frameworks (e.g., NCSC, ONR, BEIS). Lead strategic planning for cyber risk management, resilience, and capability development. Oversee cyber maturity assessments and drive continuous improvement initiatives. Coordinate cross-functional cyber ...

right questions, recognise when risk is not being managed, and make sure the right people act. What you will do Creatively lead product discovery and roadmap ownership: driving novel solutions, bringing fresh ideas, and translating complex operational problems into actionable product visions, user stories, and prioritized backlogs. … technical progress, security controls, and operational risks into actionable updates for senior sponsors. Give programme and client leadership the operational support required to lead relationships and outcomes, rather than carrying every programme mechanic personally. What good looks like after 90 days You have established a clear delivery ...

role can be based from Wokingham or Warwick and we continue to offer hybrid working from office and home. Key Accountabilities Governance & Strategy Lead the development and continual evolution of NESO's Security Governance Framework, ensuring alignment with organisational strategy, risk appetite and regulatory obligations. Develop … Risk Management Develop and operate NESO's enterprise cyber risk management framework, aligned to NIS Regulations, and external standards such as CAF, ISO 27001, and enterprise risk management processes. Drive a threat-informed approach to risk identification, assessment, prioritisation and treatment. Establish clear risk ...

standards and security baselines. Provide governance and assurance over Identity & Access Management (IAM), Privileged Access Management (PAM), cloud security and security configuration standards. Lead security architecture reviews and provide independent assurance over technology solutions, projects and material technology change. Ensure security requirements are embedded within project, change … activities. Experience assessing technology risks in financial services environments. Qualifications: Minimum of one below is required: CISSP CCSP TOGAF Azure Security Engineer ISO27001 Lead Implementer or Lead Auditor Problem Solving and Judgment Customer Focus Planning and Reviewing Performance Focus Communication ...

critical role in safeguarding complex engineering systems that support national security and critical infrastructure. Working within our Mission Technologies team, you’ll lead and influence how security is designed into systems from concept to operation, ensuring robust protection against evolving threats. This is an exciting opportunity … assurance. Day-to-day, you’ll have the following responsibilities: Develop and implement comprehensive Information Assurance Strategies to meet complex customer security requirements. Lead risk management activities that align with an industry standard such as NIST SP 800-37 or the ISO / IEC ...