51 to 75 of 111 SOC 2 Jobs in England

newly created senior leadership position, reporting directly to the CTO. With Cyber Essentials Plus already achieved and a 24/7 outsourced SOC in place, the organisation is now focused on achieving ISO 27001 certification, strengthening its governance and compliance framework, and ensuring the secure adoption of a rapidly … business continuity, AI security and governance, and information security - acting as the authoritative voice on cyber and security matters across the organisation.Location: London, hybrid (2-3 days onsite) Package: 110,000-140,000 + excellent benefits Key Responsibilities: Own security monitoring, incident response and security tooling, working closely with ...

help you grow, while partnering day-to-day with Infrastructure and product engineering teams.This is a hands-on engineering role, not a dashboard-watching SOC seat or a governance one: you'll build, fix, and improve, while a separate team owns policy and risk frameworks. You'll learn fast … pentest coordination: prepare test environments, track remediation items.Maintain documentation on security procedures and runbooks.What We're Looking ForMust-haves:Foundational experience in security engineering, SOC, or a DevOps/SRE role with a strong security focus, eager to deepen across the security stack.Solid understanding of web application security (OWASP ...

and have a genuine desire to outsmart the bad guys. You have experience in leading discovery conversations with client security teams (CISO, SOC leads, architects) to understand the current state, identify gaps, and map Falcon platform capabilities to business outcomes. You have designed and deliveredcompelling technical demonstrations … adjacent modules), either in a vendor, partner, or customer capacityProven, demonstrated experience leading technical client conversations at the CISO, security architect, or SOC lead levelExtensive experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

and trust center platforms (e.g., Loopio, Responsive, SafeBase) and GRC tools (e.g., Drata, Vanta).Ability to read and interpret security documentation, penetration test reports, SOC 2 audit reports, and architecture diagrams.Comfort with process automation concepts—scripting, workflow builders, or no-code/low-code tools to reduce manual ...

business before. Bonus points if you've helped shape DevOps roadmaps, mentored others, or worked with cost optimisation, security, or compliance frameworks (ISO, SOC2, etc.). This is more than just another DevOps role - it's a chance to join a company at the perfect stage: profitable, scaling, tech ...

hybrid mail flow.Familiarity with identity and access management concepts such as Okta, Azure AD, SSO, and SAML, along with how email security integrates into SOC and SIEM/SOAR workflows.Experience engaging technical administrators, CISOs, C-level executives, and legal and compliance teams, with the ability to translate complex security … CISSP Associate or full certification, CEH, or credentials aligned with email or cloud security—are preferred.Familiarity with FINRA, HIPAA, FCA, GDPR, ISO 27001, and SOC 2, plus the ability to interpret API logs, review connector health, and diagnose integration issues without first-level escalation, is preferred.The base salary ...

Cyber Essentials Plus (CE+). Familiarity with Secure by Design (SbD) principles and JSP 453 assurance activities. Understanding of vendor risk management, SOC2, or NIS2 directives. Previous experience performing duties as a Crypto Custodian or Alternate Custodian. Relevant industry certifications such as CISA, CRISC, CISM, or CISSP. ...

and have a genuine desire to outsmart the bad guys. You have experience in leading discovery conversations with client security teams (CISO, SOC leads, architects) to understand the current state, identify gaps, and map Falcon platform capabilities to business outcomes. You have designed and delivered compelling technical demonstrations … Experience with CTEM (Cyber Threat Exposure Management), vulnerability prioritization platforms (Qualys, Tenable, Rapid7), or attack surface management Working knowledge of compliance frameworks: NIST CSF, SOC 2, ISO 27001, DORA, HIPAA, or FedRAMP Familiarity with threat intelligence operationalization (CrowdStrike CAO/Intel, MITRE ATT&CK, adversary tracking)What ...

access control (ABAC), Role-based access control (RBAC).Build software-defined identity governance policies to ensure compliance with security policies, industry regulations (e.g., NIST, SOC2, ISO 27001), and organizational standards.Present technical information to teams and stakeholders, providing guidance and insight on identity management and best practices.Ideally you’d have:5+ ...

platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical expert, but you must be able to understand and articulate these concepts to customers. Demonstrate ...

platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical expert, but you must be able to understand and articulate these concepts to customers. Demonstrate ...

related field, or equivalent experience Experience in the following would also be useful - Working with secure multi-tenancy environments HPC administration experience SOC 2, ISO 27001, HIPAA, and PCI-DSS This is a hybrid role (2/3 days per week in their central Cambridge office). ...

Role Summary TheSecurity Awareness Lead is responsible for developing, delivering, andContinuously improving global security awareness and behaviour change programme across a multinational organisation of 2,000+ users. This roleEnsures employees, contractors, and partners understand their securityResponsibilities, make secure decisions, and actively contribute to a strongSecurity culture. The ideal candidate … baselining across regions and business units. Develop KPIs and metrics totrack behavioural change, susceptibility, and programme effectiveness. Use data insights fromPhishing, security incidents, and SOC analytics to drive targetedInterventions. 4. Stakeholder Engagement Collaborate closely with HR,Communications, IT, Data Protection, Legal, and Regional Business Leads. Influence senior stakeholdersAnd communicate ...

escalation playbooksDriving the transition of advanced detection capability into Cyber Security ownershipWhat we’re looking forProven experience in detection engineering, threat hunting, or advanced SOC rolesDeep understanding of modern attacker tradecraft and intrusion techniques across the attack lifecycleHands-on experience buidling detection logic in modern SIEM platforms (e.g Sentinel … build detection pipelines and automationWillingness to challenge bad detections, weak assumptions, and vanity metricsPragmatic mindset: precision and impact beat coverage theatreExperience operating beyond traditional SOC or MSSP modelsHands-on cloud detection experience (identity, control plane, SaaS)Familiarity with threat intelligence platforms and frameworks such as PCI DSS, NIST ...

payment modernisation programmes.Understanding of UK and EMEIA payment regulations and industry standards.Experience with audit analytics and automated control testing.Experience with Service Organisation Controls (SOC1, SOC2, ISAE3402) reporting.Knowledge of cloud, AI and emerging technology risks.Experience supporting large banking, capital markets, asset management or insurance clients.Relevant certifications such as CISA; CISM; CISSP ...

Security, Continuous Integration and Continuous Delivery techniques• Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc.• Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and can articulate threats and risk via threat ...

improve security posture.4+ years experience working as a Security Engineer/Application Security AnalystPreferred Qualifications:Experience with regulatory frameworks (e.g., GDPR, PCI-DSS, SOC 2) and their integration into security processes.Industry-recognised security certifications (e.g., OSCP, OSCE, or similar).Familiarity with the latest security tools and frameworks ...

success. Enjoy generous time-away and health benefits from day one, with the opportunity for flexible work options Receive 2-for-1 matching gifts for your charitable contributions and the opportunity to secure annual grants for the organizations you love Access on-demand professional development resources that allow … and access management (IAM), encryption, and audit logging. Partner with InfoSec and data-governance teams to meet regulatory and internal-policy requirements such as SOC 2 and applicable data-privacy regulations. Codify what works into reusable tools, patterns, and playbooks, and feed insights back to platform, product, and ...

bring: 7+ years of experience in security and compliance, ideally within eCommerce, payments, or technology environments Familiarity with industry frameworks such as PCI DSS, SOC 2, ISO 27001, NIST, or similar Experience managing third-party audits, including coordinating evidence collection across teams Solid grasp of security measures, threats ...

Risk or Information Security, you will be comfortable working with a range of stakeholders and possess: Experience working with frameworks such as ISO 27001, SOC 2, Cyber Essentials, NIST or CIS Controls Experience supporting organisations through audits or compliance assessments Strong communication and stakeholder management skills The ability ...

carve out territory.We're a payments business operating in a regulated space, with HIPAA and ISO 27001 behind us and PCI DSS, GDPR, and SOC 2 Type II ahead of us this year. The security bar is not theoretical. To foster a collaborative environment that thrives on face ...

team, within tight timescales, to budget and a high level of quality. - Experience preparing, supporting, or auditing certification audits (e.g., ISO 27001, SOC 2, Cyber Essentials). Cyber Security Auditor In accordance with the Employment Agencies and Employment Businesses Regulations 2003, this position is advertised based upon ...

problem analysis and appropriate escalation. - Supporting the operation of corporate security controls and maintaining evidence for ISO 27001. - Helping the organisation prepare for future SOC 2 requirements. - Maintaining accurate SaaS, licensing, asset and access records. - Identifying duplicated, unused, unmanaged or potentially high-risk technology across the business. - Using ...

development practices appropriate for handling sensitive compensation, payroll, and equity data including privacy, auditability, segregation of duties, and country-specific data protection requirements (GDPR, SOC 2, country-level payroll regulations). Partner with product, mobility tax, payroll, and equity subject-matter experts to translate complex regulatory and client ...