26 to 50 of 111 SOC 2 Jobs in England

innovation and business objectives.Nice to HaveExperience securing AI-enabled products, platforms or digital services.Familiarity with recognised security frameworks such as ISO 27001, ISO 42001, SOC2, NIST AI RMF or OWASP AI Top 10.Experience working with cloud environments including Azure, AWS or Google Cloud.Security certifications such as CISSP, CISM, CCSP ...

observability and monitoring stacks (e.g., CloudWatch, Prometheus, Grafana, Datadog)Knowledge of data sovereignty, residency requirements and compliance frameworks relevant to AI workloads (e.g., FedRAMP, SOC 2, ISO 27001, NIST 800-53, HIPPA, PCI, HITRUST, GDPR)Familiarity with data protection regulations and AI Security frameworks (e.g., GDPR, NIST ...

alert triage.Map detection coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate.Maintain alignment to PCI DSS, SOC2, ISO27001 NIST, and CIS frameworks. Produce documentation and evidence to support audit and assurance activities.AI SecurityDesign and implement guardrails for AI/LLM systems, covering … and frameworks: OWASP LLM Top 10, NIST AI RMF.Scripting proficiency in Python, PowerShell, or Bash for security automation.Strong grasp of PCI DSS, NIST CSF, SOC 2, ISO27001, CIS Benchmarks, and MITRE ATT&CK for Cloud.Nice to haveAZ-500, AWS Certified Security – Specialty, or equivalent cloud security certification.Experience integrating ...

deploying applications into K8 and Docker environmentsData Loss Prevention (DLP) and SaaS security governance.Advanced detection engineering or SOAR playbook development.Experience supporting ISO 27001 or SOC 2 audits.Relevant certifications (e.g. CISSP, CISM, GIAC).Workplace & BenefitsAt Deliveroo we know that people are the heart of the business and we prioritise ...

centres and cloud.o Executing and concluding security controls maturity assessments against industry standards such as the NIST Cyber Security Framework, ISO27001/2, SOC2, etco Working closely with stakeholders to review all projects and initiatives, assessing them for appropriate/correct levels of security design and controls.o Identification ...

Github Actions, Concourse, CircleCI)Familiarity with maintaining HIDS systems (Wazuh preferred).NICE TO HAVEKnowledge of security standards and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them.Hands-on experience with building and maintaining a SIEM comprised of open-source and hosted componentsExperience securing ...

DevOps and DevSecOps practices and how these can be integrated into managed cyber offerings.• Knowledge of global cyber frameworks including NIST CSF, ISO 27001, SOC 2, PCI DSS, CIS, MITRE ATT and CK, and regulatory requirements across multiple jurisdictions.• Excellent written and verbal communication skills with experience presenting ...

Security, Zero Trust & ComplianceEmbed Zero Trust principles across hybrid cloud—identity, segmentation, encryption, and posture control.Align infrastructure with regulatory and compliance frameworks (ISO 27001, SOC2, CIS, NIST).Define security integration patterns across cloud and on‐prem: IAM, PAM, KMS, certificates, secrets management.Partner with security architects to ensure platform designs meet ...

enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us!Location: Remote, within UKAbout … engineering teams, and embed them into CI/CD and GitOps workflows.Work with compliance teams to ensure adherence to frameworks such as ISO 27001, SOC 2, and GDPR, translating requirements into practical technical controls.Conduct architecture reviews, threat modeling, and code reviews to identify security risks, collaborating closely with ...

quality. Competent in working with a range of clients, from SMEs to large enterprise environments.Experience preparing, supporting, or auditing certification audits (e.g., ISO 27001, SOC 2, Cyber Essentials)DesirableIndustry-recognised certifications such as ISO 27001 Lead Auditor/Implementer, CISSP, CISA, CISM, or similar.Exposure to penetration testing ...

native firewalls, and web application firewalls.Encryption at rest and in transit, and key management across multi-cloud environments.Working knowledge of relevant compliance frameworks (e.g. SOC 2, ISO 27001, and sector-specific regimes) as applied to cloud architecture.FinOps & Cost OptimisationPractical experience with cost visibility and management tooling (Cost Explorer ...

CNAPP tools such as Wiz, including custom configuration rules and graph queries.Direct experience mapping cloud-native controls to frameworks like NIST CSF, ISO 27001, SOC2, or CIS Benchmarks.Deep operational knowledge of AWS and GCP native security suites.Proficiency in applying the Security Pillar from AWS and Google Cloud Architecture Frameworks.Ability ...

integrate mandatory security checks.Impress Us More By Having (Desirable)Proven experience working with and adhering to FinTech-related certifications, standards, or frameworks such as SOC2, ISO 27001, PCI DSS, DORA or similar regulated environments.Relevant certifications such as Google Cloud Professional Security Engineer, CKS (Certified Kubernetes Security Specialist), or CISSP.BenefitsWhy ...

and information risks, and achieve or maintain compliance with recognised standards and frameworks including ISO/IEC 27001, Cyber Assessment Framework (CAF), Cyber Essentials, SOC-2, PCI, DSS, GDPR, and other relevant regulatory or contractual requirements. This is a customer-facing consultancy role, requiring confident engagement with senior stakeholders … GDPR and relevant information security standards or best practice frameworks Knowledge of additional frameworks such as CAF, NIS-2, NIST Cybersecurity Framework, CIS Controls, SOC 2, ISO 22301, ISO 27701 or PCI DSS. ExperienceusingGRC,auditmanagement,riskregisterorreporting tools. HoldSC/DVclearanceorwillingnesstoundertakesecurity vetting. MemberofCiSPoranotherrelevantprofessional community. Willingnesstostudyforandattainfurtherrelated qualifications. Experienceofimplementingandmanaging ISO 9001. ...

systems, and cloud environments (AWS, Azure, GCP).Enterprise readiness. Ensure the platform is configured, secured, and monitored to meet enterprise security and compliance requirements (SOC 2, ISO 27001, data residency, etc.).Bridge field back to product. Push field learnings into the core platform so the next deployment ...

haves:Experience with ElasticSearch/ELK stack in production.Familiarity with AWS, GCP, Snowflake, Datadog, Okta.Knowledge of security standards and frameworks (ISO 27001, OWASP, SOC 2, PCI-DSS).Experience in a regulated fintech or payments environment.Reverse engineering and analysis of minified/obfuscated code.Not ticking every ...

Network Security Engineer Job Title: IT Security Engineer Location: Oxfordshire - Hybrid (2 days per week on-site) Industry: Enterprise SaaS/Technology Solutions About the Role We are partnering with a rapidly scaling, globally active software and data platform enterprise looking to appoint a dedicated IT Security Engineer … . Framework Knowledge: Solid comprehension of ISO 27001 principles, threat modelling frameworks, vulnerability scanning, risk treatment life-cycles, and secondary compliance standards (e.g., SOC 2 or PCI DSS). Qualifications: Relevant technical diploma or equivalent practical background, reinforced by desirable professional credentials (such as CISSP, CEH, CCNA Security ...

newly created senior leadership position, reporting directly to the CTO. With Cyber Essentials Plus already achieved and a 24/7 outsourced SOC in place, the organisation is now focused on achieving ISO 27001 certification, strengthening its governance and compliance framework, and ensuring the secure adoption of a rapidly … continuity, AI security and governance, and information security - acting as the authoritative voice on cyber and security matters across the organisation. Location: London, hybrid (2-3 days onsite) Package: £ + excellent benefits Key Responsibilities: Own security monitoring, incident response and security tooling, working closely with the outsourced SOC ...

encryption standards (at rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute ...

encryption standards (at rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute ...

encryption standards (at rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute ...

encryption standards (at rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

trust center platforms (e.g., Loopio, Responsive, SafeBase) and GRC tools (e.g., Drata, Vanta). Ability to read and interpret security documentation, penetration test reports, SOC 2 audit reports, and architecture diagrams. Comfort with process automation concepts—scripting, workflow builders, or no-code/low-code tools to reduce ...

and have a genuine desire to outsmart the bad guys. You have experience in leading discovery conversations with client security teams (CISO, SOC leads, architects) to understand the current state, identify gaps, and map Falcon platform capabilities to business outcomes. You have designed and delivered compelling technical demonstrations … amount of travel will vary from 0 to 100% depending on business need and client requirements. Job Qualifications Here's what you need Minimum 2 years hands-on experience with the CrowdStrike Falcon platform (endpoint protection, EDR, or adjacent modules), either in a vendor, partner, or customer capacity Minimum ...