1 to 25 of 124 Remote/Hybrid SOC 2 Jobs in England

suppliers to. Our own assurance is part of the product promise: we are ISO 27001 certified, hold Cyber Essentials Plus and have achieved SOC 2 Type 1. The team works closely with Engineering, Product, Sales, Customer Success, People and Finance, making security and compliance something that helps … work, not delegate it. There's no team to inherit. You'll be the person who keeps ISO 27001 running, takes us from SOC 2 Type 1 to Type 2, and owns the risk framework the leadership team relies on. It's a highly collaborative role: expect ...

security design and architecture reviews, paired with the governance and process work that scales the program. You will partner on customer due‐diligence and SOC 2 evidence and turn security controls into repeatable workflows that fit how the business already works. You will apply that lens across … and DevOps to reduce risk through secure design and simplicity, not just added controls. Governance, Risk & Compliance Partner on customer due‐diligence (DDQ) and SOC 2 Type II evidence gathering, keeping compliance sustainable rather than fire‐drilled. Build repeatable security workflows that embed controls into existing engineering processes ...

and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part of a fast-growing community … effectiveness Identify control gaps, deficiencies, and areas for improvement Compliance & Risk Alignment Assess controls against relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2) Assess control effectiveness across: Design Effectiveness (DE), Operating Effectiveness (OE) and Control Automation (CA) Support regulatory and internal compliance initiatives Ensure ...

classification, data handling, retention, access, cross-border processing and related technology controls. Support compliance obligations relevant to cloud and software services, including GDPR, CCPA, SOC 2, ISO 27001, FedRAMP and NIST-based requirements, where applicable. Monitor remediation of technology-related data-protection and compliance gaps through closure. … establishing technology control frameworks and supporting audits, certifications, customer assurance and remediation programs. Working knowledge of relevant frameworks and requirements, such as ISO 27001, SOC 2, NIST, GDPR, CCPA and FedRAMP, as applicable. Experience integrating security, privacy and compliance controls into product development or technology‐delivery lifecycles. Experience ...

align with a cloud-first strategy. Partner with Security to harden the Microsoft 365 tenant and infrastructure estate against relevant compliance frameworks (ISO 27001, SOC 2, DORA). Technical Leadership Act as a senior technical point of contact for infrastructure design decisions, escalations, and complex troubleshooting. Change Control … Intune and Kandji are compliant, patched, and enrolled to policy. The Microsoft 365 tenant and wider SaaS estate meet relevant compliance frameworks (ISO 27001, SOC 2, DORA). Infrastructure changes are documented, tested, and follow IT change control processes without exception. Technical documentation, runbooks, and architecture records ...

such as the EU AI Act Perform third-party/vendor security and AI risk assessments Contribute to control testing across frameworks such as SOC 2, ISO 27001, CSA Star, NIST CSF, and emerging AI governance standards Track remediation efforts and maintain risk registers and reporting dashboards Support … Foundational understanding of cybersecurity principles (network security, cloud security, IAM, application security, vulnerability management) Familiarity with common frameworks such as NIST CSF, ISO 27001, SOC 2, or similar Understanding of AI/ML concepts and associated risks (data governance, model bias, hallucinations, prompt injection, model misuse, etc. ...

overflow. You are taking over a production estate that is highly specific: a Node.js application and public API running on Amazon EKS (eu-west-2) , backed by Aurora MySQL 8 (with a read replica) and ElastiCache Redis , fronted by ALB and CloudFront/WAF. Everything is codified using Terraform …/CodeBuild. Observability runs on CloudWatch and a self-hosted Prometheus/Grafana cluster stack, paging via PagerDuty. You will also directly own our SOC 2 compliance programme, keeping controls green via Vanta. What You'll Do Run EKS Production: Own our live AWS environment, handling EKS node ...

when necessary to support them. You will own the IT strategy and roadmap, service performance, vendor procurement outcomes, and the IT control environment, including SOC 2, Cyber Essentials, and GDPR-related IT controls. You will plan and manage the project portfolio, hold vendors and the team to account … outcome, the Indeed relationship, and vendor performance Security, Risk & Compliance: Own the IT control environment and security posture, including policy, access standards, SOC 2, Cyber Essentials, GDPR-related IT controls, and audit outcomes. Direct the team's evidence gathering and control maintenance, and represent IT on security and ...

and close the coverage gaps where some products are today outside the standard tooling. Governance, risk and compliance and vendor management Own ISO 27001, SOC 1, SOC 2 and PCI DSS compliance, the audit calendar, the compliance automation platform and the relationship with our auditors. Work with … software or SaaS company serving regulated enterprise customers, and of facing those customers on security matters. Working knowledge of ISO 27001 and SOC 2, and experience of being accountable for audits and certifications. PCI DSS experience is an advantage. Practical understanding of cloud security on AWS and Azure ...

Access Transparency, relevant to deploying per-market for different banks' regulators Hands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2 ...

Dexory is transforming warehousing and logistics with data intelligence in the UK. We seek an Information Security Lead to own ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes, and to respond to customer security due diligence across engineering, product and operations. ...

creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning and tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ … years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security Command Center) CISSP, OSCP, or equivalent certification Nice ...

secret rotation and offboarding. Connectors Microsoft 365 and the other sources we read handling tokens, scopes and permissions safely. Compliance The controls behind our SOC 2 and ISO 27001 work in Vanta, with the auditor and pen-test firm you choose and manage. Security answers The security pack … major cloud, GCP ideally, Azure or AWS welcome, and written the infrastructure as code for it. You have been the person who got a SOC 2 or ISO 27001 audit through at a startup or scale-up, and can name the controls you owned and the evidence ...

fake domains and accounts impersonating our brands and leaders. Policy, compliance and trust. Write and enforce policies people actually follow. Prepare the company for SOC 2 or ISO 27001 with Legal & Compliance. Own the public security and trust story, including the trust page on our products. Team leadership. … half your time hands-on while leading a small, fully remote team across many time zones. Nice to have Has prepared a company for SOC 2 or ISO 27001. Has secured or evaluated AI agents and LLM-based tools in production. Has run a third-party risk program ...

demonstrations that showcase how Vanta solves the customer's specific problem, including how Vanta automates and operationalises their GRC programmes across frameworks such as SOC 2, ISO 27001, and HIPAA. Validate the feasibility of standard and semi-complex integrations and confirm alignment with customer environments, workflows, and architectures. … trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making ...

Reporting & Compliance Support by owning operational metrics and performance reporting, communicating risk to stakeholders, and contributing evidence and control monitoring activities supporting ISO 27001, SOC 2 and NIS2 compliance requirements. Key outcomes: Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying … and platforms. Contribute to a high‐performing Security Operations function by mentoring analysts, delivering meaningful operational reporting, and supporting compliance obligations including ISO 27001, SOC 2 and NIS2. Experience required: Proven experience operating within a Security Operations, Cyber Security Analyst, Security Engineer or Incident Response role, with responsibility ...

Reporting & Compliance Support by owning operational metrics and performance reporting, communicating risk to stakeholders, and contributing evidence and control monitoring activities supporting ISO 27001, SOC 2 and NIS2 compliance requirements. Key outcomes: Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying … and platforms. Contribute to a high‐performing Security Operations function by mentoring analysts, delivering meaningful operational reporting, and supporting compliance obligations including ISO 27001, SOC 2 and NIS2. Experience required: Proven experience operating within a Security Operations, Cyber Security Analyst, Security Engineer or Incident Response role, with responsibility ...

endpoint or account security alerts. Work with Security colleagues to remediate issues and strengthen security controls. Assist with compliance activities, including maintaining evidence for SOC 2, ISO 27001, DORA or comparable frameworks. 7. Projects and Continuous Improvement Identify and implement automation opportunities that reduce repetitive administration and improve … management and Linux endpoints. Building integrations and automations using scripts, APIs or workflow tools. Experience maintaining CMDBs, asset registers and operational dashboards. Involvement in SOC 2, ISO 27001, DORA or similar audit and compliance activities. Supplier management, technology procurement and coordination of workplace technology projects. Benefits The organisation ...

and procedures sharp and our compliance with ISO 27001 and ISO 27018 on point. You’ll get involved in SSAE 18/ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and … excellent organisational skills. You write clear documentation and reports, and can translate complex requirements for stakeholders at every level You’ll have at least 2 years’ experience in a related role Experience in a regulated industry, familiarity with other information security frameworks and assurance reports, and exposure to Jira ...

and procedures sharp and our compliance with ISO 27001 and ISO 27018 on point. You'll get involved in SSAE 18/ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and … organisational skills.* You write clear documentation and reports, and you can translate complex requirements for stakeholders at every level.* You'll have at least 2 years' experience in a related role.* Experience in a regulated industry, familiarity with other information security frameworks and assurance reports, and exposure to Jira ...

services and modern security practices, you will take ownership of designing, deploying, and maintaining cloud infrastructure while upholding compliance with industry standards such as SOC 2. This is a mid-level role suited for an engineer with proven commercial experience who is ready to independently manage infrastructure operations, implement … Management: Monitor systems for threats, conduct regular vulnerability assessments, apply proactive patches, and support remediation efforts. Compliance & Auditing: Partner with compliance teams to maintain SOC 2 alignment, support security audits, and keep comprehensive compliance documentation and security procedures up to date. SRE Collaboration: Work closely with the Site ...

privacy notices, consent, data retention, and contractual commitments Support audits and compliance programs through evidence collection and remediation tracking Contribute to ISO 27001, SOC 2, and other compliance initiatives Support privacy, security, and third-party risk assessments and maintain risk registers Support privacy incident investigations and remediation activities … Experience with privacy assessments, documentation, supplier reviews, and customer questionnaires Understanding of cloud technology, information security principles, and frameworks such as ISO 27001 and SOC 2 Strong research, critical thinking, and problem-solving skills Clear communication skills with the ability to explain complex topics simply Organised, detail-oriented ...

Risk Ledger is seeking a GRC Lead to own governance, risk and compliance. You will drive ISO 27001, SOC 2 and risk management across the business, partnering with engineers, sales and leadership to ensure evidence, reporting, and controls are effective and scalable. This hands-on role requires ...

customer responsibilities to federal stakeholders, and evaluate security requirements for prospective contracts. Align federal controls and evidence with the broader GRC program, including CJIS, SOC 2, and applicable UK requirements. Report program health, risks, and readiness to GRC leadership, and incorporate evolving federal requirements into program priorities. What … responsibility models. Experience supporting federal agency authorization processes and evaluating security requirements in federal contracts. Experience aligning controls and evidence across federal requirements, CJIS, SOC 2, ISO 27001, or international public sector frameworks. Familiarity with CMMC and NIST SP 800-171. People who thrive on our team ...

certified technology company with offices in the UK and Asia. The work runs from December 2026 to February 2027 at about 2 to 3 days a week, then moves to a lighter monthly review. You will work with our ISMS Manager and Cyber Assurance lead, who check your work … is. Risk rate each supplier as high, medium or low using our method. Send and follow up security questionnaires, and collect evidence such as SOC 2 reports, ISO 27001 certificates and penetration test summaries. Review the evidence, record gaps and agree follow up actions with the supplier owner. ...