101 to 125 of 405 SOC 2 Jobs in England

information security principles and cybersecurity frameworks relevant to cloud environments: MITRE ATT&CK for Cloud, CIS Benchmarks, AWS Well‐Architected Security Pillar, NIST CSF, SOC 2, ISO 27001. Willingness and ability to participate in an on‐call rotation, including after‐hours response. Ability to produce clear, comprehensive, and ...

Drive the adoption of cloud governance policies, security standards and architectural best practice, and help maintain continuous compliance evidence against the firm’s obligations (SOC 2, ISO 27001, GDPR, DORA). Contribute to observability and monitoring across the estate, and to incident response and on-call, including troubleshooting ...

report to the Head of Information Security. You will help respond to customer security questionnaires, support audits, and maintain a controls library aligned to SOC 1, SOC 2, ISO 27001, ISO 42001, and FedRAMP. This is a global role working with teams across time zones. #J ...

tabletop/purple-team exercises and postmortem improvements. A major focus is driving AI security and internal AI governance: integrating LLMs/ML into SOC triage and anomaly detection, defending AI attack surfaces (agent activity, prompt injection, machine identities), hardening against AI-driven threats (phishing-resistant MFA, supply chain … with all three. Nice to have: securing AI product features, OWASP Top 10 for LLM Applications, the NIST AI Risk Management Framework, MITRE ATLAS, SOC 2, or ISO 27001. Education Degree in a STEM field, preferably Information Security or Computer Engineering, or equivalent practical experience. Certifications such ...

manufacturing, or other mission-critical technical teams. Working knowledge of recognized security and compliance frameworks such as CIS Controls and Benchmarks, NIST, ISO 27001, SOC 2, Cyber Essentials, or equivalent local and contractual standards. Experience with security tooling such as SIEM, vulnerability-management platforms, privileged-access management, data ...

Cloud platforms: AWS, Azure, GCP. A background in financial services or similar regulated industries. Familiarity with compliance frameworks and security requirements (e.g., ISO 27001, SOC 2, SOX, PCI DSS, FedRAMP, FFIEC, NYDFS, SEC). A track record in consulting, solutions architecture, or technical coaching. Interest in technical sales ...

observability and monitoring stacks (e.g., CloudWatch, Prometheus, Grafana, Datadog) Knowledge of data sovereignty, residency requirements and compliance frameworks relevant to AI workloads (e.g., FedRAMP, SOC 2, ISO 27001, NIST 800‐53, HIPPA, PCI, HITRUST, GDPR) Familiarity with data protection regulations and AI Security frameworks (e.g., GDPR, NIST ...

evaluate cloud environments and provide recommendations for performance optimisation, security, cost reduction and resource efficiency. You will ensure compliance with industry standards (GDPR, HIPAA, SOC2) and implement best practices for security, IAM, encryption and data protection.We **INNOVATE** with data-driven solutions – You will create Proof of Concepts and Minimum Viable ...

building trust with customers, regulators and partners, delivering assurance, audit and compliance engagements focused on technology, cybersecurity and privacy. Work on engagements including SOC 1, SOC 2, ISAE 3402/3000 and ISO 27001, with opportunities to influence governance and risk across multiple projects while collaborating with ...

cloud security, identity security, endpoint security, and vulnerability management concepts. Awareness of common security and compliance frameworks such as ISO 27001, NIST CSF, SOC 2, HIPAA, or GDPR. Core Competencies Strong analytical and investigative mindset. Excellent written and verbal communication skills. Ability to communicate technical findings clearly, accurately … opportunities, including Focus Fridays, a half-day each month to focus on learning and personal growth Generous PTO and paid holidays Mental health benefits 2 MAD Days per year (Make A Difference Days for paid volunteering) Additional benefits may be offered by country, based on your eligibility - ask your ...

and improving. Hands-on delivery is the core expectation; this is not a governance or oversight position. You will work closely with an external SOC and MDR provider, acting as the internal security practitioner against their outputs. The role also requires genuine compliance capability, you will contribute to internal … that. What you will be doing Operating as the primary hands-on resource for security monitoring, triage, and incident response, working with the external SOC and MDR provider Operating and maintaining security tooling, including CSPM, SAST, and DAST platforms, ensuring coverage, configuration, and outputs are maintained to a defined ...

Engineering to join our collaborative and inclusive team. Reporting to our Global Head of Platform Engineering, this is a hybrid-working role, typically requiring 2 days per week in the office. The role will also include leadership of our Forward Deployed Engineers, ensuring this team is closely aligned with … Azure AKS or Google GKE. Strong understanding of GitOps tooling such as Argo CD, Flux or equivalent deployment automation approaches. Experience with ISO 27001, SOC 2 or similar assurance frameworks, particularly where operational teams are required to provide evidence for access, change, incident, backup, resilience and monitoring controls. ...

Collaborate with security and engineering teams to understand and articulate technical controls in a customer-facing context. Support compliance initiatives across frameworks such as SOC 2, ISO 27001, ISO 42001, EU AI Act, UK Cyber Essentials, and GDPR, including evidence collection and audit readiness. Identify common themes and ...

with containers and orchestration platforms such as Docker and Kubernetes. Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, or SOC 2. Ability to conduct threat modelling, infrastructure risk assessments, and architecture reviews. Strong troubleshooting, documentation, and cross-functional communication skills. Personal Team player with ...

. Familiarity with Kubernetes (GKE RBAC + workload identity). Experience using Secret Manager, Vault, or other secrets management tools. Knowledge of compliance frameworks (SOC2, ISO 27001, PCI, HIPAA). Education Bachelor's degree in computer science, Engineering, Information Security, or equivalent hands-on experience. #J-18808-Ljbffr ...

. * Familiarity with Kubernetes (GKE RBAC + workload identity). * Experience using Secret Manager, Vault, or other secrets management tools. * Knowledge of compliance frameworks (SOC2, ISO 27001, PCI, HIPAA). Education * Bachelor's degree in computer science, Engineering, Information Security, or equivalent hands-on experience. If you receive suspicious outreach ...

detection coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate. Maintain alignment to PCI DSS, SOC2, ISO27001 NIST, and CIS frameworks. Produce documentation and evidence to support audit and assurance activities. AI Security Design and implement guardrails for AI/LLM systems … OWASP LLM Top 10, NIST AI RMF. Scripting proficiency in Python, PowerShell, or Bash for security automation. Strong grasp of PCI DSS, NIST CSF, SOC 2, ISO27001, CIS Benchmarks, and MITRE ATT&CK for Cloud. Nice to have AZ-500, AWS Certified Security – Specialty, or equivalent cloud security ...

genuine passion for security. Here's what we need: Risk-based decision-making and adherence to regulatory and internal security standards (PCI DSS, NIST, SOC 2, ISO 27001, CIS).Broad knowledge across security domains and their capabilities within AWS, Azure, and GCP, with 6+ years' hands-on experience … Security Engineer, or equivalent cloud security certification. Microsoft Certified: Azure Solutions Architect Expert, or Google Professional Cloud Architect. Experience integrating ATT&CK Navigator into SOC workflows. Additional InformationBring all of you to workWe create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that ...

centres and cloud.o Executing and concluding security controls maturity assessments against industry standards such as the NIST Cyber Security Framework, ISO27001/2, SOC2, etco Working closely with stakeholders to review all projects and initiatives, assessing them for appropriate/correct levels of security design and controls.o Identification ...

across our platform, including access control, vulnerability management, and data encryption. You will also ensure compliance with relevant industry standards and regulations, such as SOC 2 and GDPR. You will also conduct regular security audits and penetration testing to identify and mitigate potential security risks. Qualifications Strong software ...

across our platform, including access control, vulnerability management, and data encryption. You will also ensure compliance with relevant industry standards and regulations, such as SOC 2 and GDPR. You will also conduct regular security audits and penetration testing to identify and mitigate potential security risks. Qualifications Strong software ...

across our platform, including access control, vulnerability management, and data encryption. You will also ensure compliance with relevant industry standards and regulations, such as SOC 2 and GDPR. You will also conduct regular security audits and penetration testing to identify and mitigate potential security risks. Qualifications Strong software ...

across our platform, including access control, vulnerability management, and data encryption. You will also ensure compliance with relevant industry standards and regulations, such as SOC 2 and GDPR. You will also conduct regular security audits and penetration testing to identify and mitigate potential security risks. Qualifications Strong software ...

across our platform, including access control, vulnerability management, and data encryption. You will also ensure compliance with relevant industry standards and regulations, such as SOC 2 and GDPR. You will also conduct regular security audits and penetration testing to identify and mitigate potential security risks. Qualifications Strong software ...

across our platform, including access control, vulnerability management, and data encryption. You will also ensure compliance with relevant industry standards and regulations, such as SOC 2 and GDPR. You will also conduct regular security audits and penetration testing to identify and mitigate potential security risks. Qualifications Strong software ...