1 to 25 of 635 ISO/IEC 27001 Jobs in London

recruit an ISO 27001 and ISO 27018 Information Security Analyst to strengthen our Information Security and Audit / Compliance functions. Alfa Systems sits at the heart of some of the world's largest asset finance companies, across 26 countries which means information security … compliance with ISO 27001 and ISO 27018 on point. You'll get involved in SSAE 18 / ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and processes, and contribute ...

recruit an ISO 27001 and ISO 27018 Information Security Analyst to strengthen our Information Security and Audit / Compliance functions. Alfa Systems sits at the heart of some of the world’s largest asset finance companies, across 26 countries which means information security … compliance with ISO 27001 and ISO 27018 on point. You’ll get involved in SSAE 18 / ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and processes, and contribute ...

recruit an ISO 27001 and ISO 27018 Information Security Analyst to strengthen our Information Security and Audit / Compliance functions. Alfa Systems sits at the heart of some of the world's largest asset finance companies, across 26 countries which means information security … compliance with ISO 27001 and ISO 27018 on point. You'll get involved in SSAE 18 / ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and processes, and contribute ...

role is for you. Technical Skills & Experience To be considered for this opportunity, you must have at least 5+ years of hands‐on GRC / information security experience in roles such as: GRC Analyst / GRC Manager, Information Security Officer / Manager, ISMS Owner, Compliance Manager … / Security Internal Auditor, or Security & Compliance Consultant Mandatory GRC skills — you must be able to demonstrate: Practical, implementation‐level experience with ISO / IEC 27001 (2022 control set): scoping, risk assessment and treatment, Statement of Applicability, running or facing internal ...

Databricks environments. Working closely with our managed SOC, you'll investigate alerts and incidents, close monitoring gaps, and keep our ISO / IEC 27001:2022 controls backed by complete, audit-ready evidence - including running customer and client security-assurance questionnaires on the business … service levels. Close monitoring gaps by improving detection use cases, alert logic, playbooks and escalation criteria. Own the evidence cycle for ISO / IEC 27001:2022 controls - mapping, collecting and maintaining audit-ready evidence, and resolving gaps with control owners. Support internal, certification ...

technologyWork with customer teams to design secure AI architectures and establish governance frameworks aligned to standards such as NIST AI RMF, ISO / IEC 42001, and EU AI Act guidanceTranslate technical findings into actionable recommendations for both executive and technical audiencesServe as a subject matter … Transit Gateway, Direct Connect, Route 53, and Gateway Load Balancer – Azure VNets, VNGs, ExpressRoute, vWAN, Load Balancer, and DNS)Experience designing and securing AI / ML infrastructure including AWS SageMaker, AWS Bedrock, Azure AI Foundry, Google Vertex AI, Databricks, GPU-accelerated compute, and model inference pipelinesExposure to unique threat ...

events; maintain records and documentation. Support security control reviews, vulnerability assessments, security awareness and data protection training. Requirements Bachelor’s degree in Information / Cyber Security, Computer Science or a related discipline; equivalent professional experience may be considered. Relevant professional certifications are strongly preferred, for example CISM, CISSP, ISO … 27001 Lead Implementer / Lead Auditor. Technology-centric training and certification is an advantage. 5+ years’ experience in information and cyber security implementation, management and governance, ideally within UK financial services, covering ISMS management, risk management, and management reporting. Working knowledge of information security and data protection ...

testing and feedback clearly documented (ITGCs + relevant application controls)IT teams trained and confident in operating controls, producing consistent evidence, and supporting walkthroughs / testing. Helping to drive a clear, workable SOX operating model for IT (RACI, control calendar, evidence standards, testing approach).Riskonnect configured / ready … analysis of IT controls against SOX expectations, providing guidance as necessary. Test ITGCs and supporting procedures across Access Management, Change Management, IT Operations, SDLC / Release governance. Create / refresh control documentation (narratives, flowcharts, RCMs, control procedures, evidence checklists).Upskilling and knowledge transferFacilitate structured IT SOX handover ...

Lead - ISO27001, ISO 27002, ISO 27005, ISO 31000 ISMS, Security Audits Our leading global law firm client are actively looking to take on a new GRC Lead (ISO 27001, ISO 27002, ISO 27005, ISO … broad range of security activities such as Policy Development, Risk Management, Internal & External audits & compliance etc. To be considered for this GRC Lead (ISO 27001, ISO 27002, ISO 27005, ISO 31000 ISMS, Security Audits) role, it's ideal that ...

Kampagnen, SoD‐Regeln, Delegations‐ und Rezertifizierungsprozessen; Automatisierung von Kontrollen. Privileged Access & Compliance: Verzahnung mit PIM, Logging / Monitoring sowie regulatorischen Anforderungen (z.B. ISO27001, SOX, NIS2 / DORA - kundenspezifisch). Adoption & Enablement: Workshops, Guidelines, Betriebskonzepte; je nach Seniorität fachliche Führung von Workstreams, Mentoring und Qualitätssicherung (Konzept‐ / Design … Kampagnen, SoD‐Regeln, Delegations‐ und Rezertifizierungsprozessen; Automatisierung von Kontrollen. Privileged Access & Compliance: Verzahnung mit PIM, Logging / Monitoring sowie regulatorischen Anforderungen (z.B. ISO27001, SOX, NIS2 / DORA - kundenspezifisch). Adoption & Enablement: Workshops, Guidelines, Betriebskonzepte; je nach Seniorität fachliche Führung von Workstreams, Mentoring und Qualitätssicherung (Konzept‐ / Design ...

testing plans. Implement and maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001 / 27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF. Develop and maintain information security policies, standards and procedures, ensuring organisational compliance. Define, coordinate … banking, energy, telecommunications and media, industrial protection, and critical infrastructure protection. Knowledge of SOC operations, digital forensics and fraud management. Experience with GRC / IRM platforms and the automation of security and compliance processes. Additional security certifications such as CGEIT, C CISO, QSA, CDPP, or Security Director certification issued ...

oversight with a meticulous, hands‐on approach. You are a self‐starter who excels in a proactive, autonomous environment, capable of steering our ISO certifications toward continuous maturity. Beyond maintenance, you will partner across departments to embed a culture of quality, driving the achievement of key performance indicators … need them. The patient is at the heart of everything we do. They are our inspiration and our ultimate beneficiary. Your mission: Support and / or lead all aspects of the IMS audit life cycle Work with stakeholders to produce IMS status reports regularly and present these to Executive ...

activity are focused on reducing material cyber and technology risk. Own the Information Security Management System and support continued alignment with ISO / IEC 27001:2022, the NIST Cybersecurity Framework and other recognised standards. Maintain effective security policies, standards and controls, ensuring they … Experience across security operations, governance, risk and compliance, architecture, engineering, third-party risk, assurance and operational resilience. Strong practical knowledge of ISO / IEC 27001, PCI DSS, UK GDPR, the Data Protection Act 2018 and recognised control frameworks such as NIST. A solid ...

Note : This role could be located anywhere between Bristol, London or Derby but 2 days / week in Derby are mandatory. Who we are: ALTEN is an engineering and technology consultancy services company. We are a leading Engineering and IT consultancy operating across 30 countries, making waves … implement corrective actions. Communication and Reporting Serve as the primary liaison for quality-related issues between clients and ALTEN teams. Participate in client / ALTEN meetings (PRM / CRM) and contribute with presentations. Organize quality reviews and provide performance reports as required. C. KPIs and Performance Quality Dashboards ...

starterHigh professional ethics and commitment to improving risk cultureExperience of managing deficiencies and remediation activitiesComfortable giving an opinion and forming conclusionsDesired skillsExperience of IFRS / US GAAP accounting standardsQualification by relevant governing body with 5 years post qualification experience (e.g., ACA, ACCA, CIMA, CPA or equivalent)Previous experience with … policy managementPrevious experience of working with OracleExperience of driving automation / AI in a controls functionStrong data enquiry / analytics / scripting skillsExperience of managing a co-source agreementUnderstanding of other regulatory frameworks e.g. NIST, ISO 27001, EU CRAUK Benefits include: Flexible benefits ...

including vulnerability management, identity and access management, cloud security, security operations and supplier assurance. Support Secure SDLC and broader security transformation initiatives. Provide vCISO / outsourced security management support where required. Design and facilitate client workshops, discovery sessions and stakeholder interviews. Translate technical security issues into clear business risks … consultancy experience. A good understanding of information security governance, risk and technical controls. Practical experience with ISO 27001 and / or other recognised security frameworks. Experience conducting security assessments, gap analyses or risk assessments. The ability to understand a client's business and provide pragmatic ...

accomplished audit professional who can take ownership of developing and delivering a risk-based, multi-year internal audit programme, aligned to ISO / IEC 27001:2022 and ISO 22301:2019. The Role You will be responsible for developing the audit strategy … annual ISMS & BCMS audit model, including methodology, templates, governance, findings tracking and knowledge transfer to support future audit cycles. Key Requirements ISO / IEC 27001:2022 Lead Auditor certification ISO 22301:2019 Lead Auditor certification Demonstrable experience conducting internal audits against ...

Computerized Systems Quality Assurance & Validation on a permanent full‐time capacity. Purpose of the Role: This role supports the compliant and timely design / development, testing, verification, validation, configuration, and life cycle management of computerized systems (including software) developed, purchased and / or utilised by IXICO. This role … compliance with current GCP, FDA 21 CFR Part 11, EU Annex 11, GAMP, FDA QSR Part 820 (QMSR), EU MDR (Regulation 2017 / 745), IEC 62304, GDPR, ISO 13485, ISO 27001 and ISO 42001 / EN 18286 regulatory ...

Sales. Job requirements Demonstrable and considerable experience in cloud security architecture (AWS essential and Azure), including IAM design, network segmentation, and secrets / KMS management. Hands-on DevSecOps experience: CI / CD pipeline security, Infrastructure-as-Code scanning, and policy-as-code. Strong hands-on software development … scripting capability, including Python and C# / .NET, with the ability to read, review and write secure production-quality code; familiarity with PowerShell, Bash, REST APIs and common software development tooling. Experience building security automation, API integrations, test harnesses or internal engineering tools, using source control, peer review, testing ...

business impact analyses, business continuity and IT disaster recovery plans and their testing (including the AWS cloud environment), helping ensure recovery objectives (RTO / RPO) are documented, achievable and evidenced, with lessons learned fed into improvements. Data Protection Governance Support the Data Protection Officer in operating the bank … security awareness and data protection training to foster a strong risk awareness culture across the bank. Requirements EDUCATION & TRAINING Bachelor's degree in Information / Cyber Security, Computer Science or a related discipline; equivalent professional experience may be considered. Relevant professional certifications are strongly preferred, for example CISM, CISSP ...

here is not a paperwork exercise at the edge of the business. It is a condition of doing business. We are working toward ISO 27001 certification and SOC 2 Type II attestation across a company that is scaling quickly, operating multi-tenant infrastructure in several countries … here, not your previous salary Equity in Volta, giving you the opportunity to share in the company's long-term success Retirement / pension contributions Comprehensive health, wellbeing and insurance benefits Generous number of vacation days each year Additional Information Equal Opportunity Volta is an equal opportunity employer. ...

Data Integrations and UK GDPR and India's Digital Personal Data Protection (DPDP) Act awarenessCloud SecurityAwareness of: Microsoft Azure, AWS, Google Cloud Platform, Cloud / Container / API Security / CASB High level understanding of OT / IoT SecuritySecurity IntegrationsGood understanding of integrating multiple cybersecurity platforms … including: SIEM integrationsIdentity integrationsThreat Intelligence integrationsFirewall integrationsEndpoint integrationsCloud integrationsSOAR playbooksAPI-based security integrationsGovernance & ComplianceAwareness of: ISO / IEC 27001NIST Cybersecurity FrameworkCIS ControlsPCI DSSUK GDPRDPDPLeadership & CollaborationLead technical discussions during customer engagements. Coordinate with OEMs, delivery teams, and technology specialists. Mentor junior architects and consultants. Stay current ...

relationshipsContribute to Accenture's thought leadership in OT security through publications, presentations, and client engagementsWhat You'll Need: Essential10+ years of experience in OT / ICS cybersecurity or critical infrastructure securityProven track record leading complex security programmes in regulated industrial environmentsDeep understanding of Industrial Control Systems (SCADA … GRIDExperience across multiple sectors: Energy, Utilities, Manufacturing, Aerospace, Defence, or Critical National InfrastructureKnowledge of security standards including NERC-CIP, IEC 62443, ISA / IEC 62443Background in both advisory and hands-on technical implementationWhat We Offer: Work on prestigious projects spanning critical national infrastructure, advanced manufacturing ...

remote contract with occasional travel to London. You will develop and execute a risk-based internal audit programme aligned to ISO / IEC 27001:2022 and ISO 22301:2019. You will plan and deliver audits, assess control effectiveness, interview stakeholders ...

cloud, hybrid data center networks at scale while driving network performance and resiliency Deploy and manage cloud constructs such as subnet allocations, routing-tables / associations, VPCs, VPC-peering / PrivateLink, Hub-spoke topologies, gateways, and direct connects Develop and maintain IaC (ansible, Terraform) and automation tooling throughout … / CD pipeline (Python, Go) to provision networks at scale, while improving the efficiency and velocity of network deployments Troubleshoot complex production issues and contribute to incident root-cause analysis Participate in on-call rotations Implement network solutions meeting regional compliance and data sovereignty requirements (ISO 27001 ...