6 of 6 ISO/IEC 27001 Jobs in Guildford

provide assurance against all elements of contractual security obligations for product and service deliverables, as well as information and cybersecurity certifications such as ISO 27001, CE+, and DCCEnsure the delivery of relevant technical, framework and contract compliant governance, security strategies, policies, management plans, procedures, and processes … Compliance & Audit Reports, and Incident & Recovery PlansExperience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standardsExperience in facilitating, coordinating, and directing ITHCs including, but not limited to, the writing of Security Requirements Traceability ...

controls. Understanding of Defence procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security … professional development through mentoring, structured career pathways and industry-recognised certifications including: CISSP CISMP CREST Certifications ISO 27001 Lead Implementer / Auditor SABSA TOGAF NIST Programmes UK Cyber Security Council Professional Registration Each consultant is supported by a dedicated Mentor and Performance & Development Manager ...

experience across: AWS, Azure or GCP security Linux administration and hardening IAM, SSO, MFA, RBAC and privileged access SIEM, EDR and vulnerability management TCP / IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and / or ISO … 27001 Security incident investigation and remediation You don’t need to tick every box. What matters is a strong infrastructure background, credible hands-on security experience and the ability to troubleshoot problems. CISSP, CCSP or Security+ would be useful, but practical experience carries more weight. ...

risk into practical architectural solutions that support organisational objectives and digital transformation. Strong knowledge of security, regulatory and industry frameworks (e.g. including ISO 27001, NIST, GDPR and IEC 62443), with the ability to apply these across business, IT and OT environments. Demonstrable experience designing ...

standards.· Review and remediate infrastructure vulnerabilities.· Support access control processes, including access· reviews, privileged access checks, and enforcement of least privilege principles.· Support endpoint / server security controls.· Ensure appropriate logging and security monitoring is enabled and reviewed.· Support encryption and certificate-management requirements.· Review infrastructure against security standards … incidents, reviewing logs, identifying root causes, and implementing remediation. Knowledge & SkillsTechnical (Understanding, awareness or experience with the following)· Strong knowledge of networking, including TCP / IP, DNS, firewalls, VPNs, proxies, and load balancers.· Proficiency with infrastructure-as-code and automation tools such as Terraform, Ansible, Python, or Bash.· Familiarity ...

policies, controls and solutions. Monitor security events, risks and vulnerabilities and investigate incidents. Design, build, test and troubleshoot security solutions including SIEM and IDS / IPS.Manage vulnerability testing and recommend improvements. Provide cybersecurity expertise across network design and management. Maintain security policies, procedures and technical documentation. … with hands-on secure network design and management. Experience with Cisco, Juniper, SIEM, IDS / IPS, penetration testing and forensic tools. Knowledge of ISO27001, GDPR, ITIL and vulnerability management. Strong communication and customer-facing skills. SC Clearance or ability to obtain it. DesirableTelecommunications, satellite or maritime experience. ...