1 to 25 of 291 ISO/IEC 27001 Jobs in London

Conduct third‐party assessments of Information Security and associated management systems in accordance with BSI requirements and ISO / IEC standards. Evaluate information security controls—technical, organisational, procedural—and determine their effectiveness and alignment with risk management objectives. Communicate assessment outcomes to clients, ensuring clear … Information Security, IT governance, risk management, data protection, cybersecurity, or related technical environments. Strong knowledge of management system frameworks, particularly ISO / IEC 27001 and related security standards. Ability to interpret technical environments (cloud, networks, applications, data flows) and map them to management ...

quality and regulatory matters, you will drive innovation, compliance, and transformation across Qureight. Your expertise will ensure that our clinical trial activities, SaMD / AIaMD clearances, biomarker validations, and interactions with regulatory authorities are executed with precision, integrity, and a forward-thinking approach. You will … processes and systems, implementing best-in-class frameworks to enhance efficiency, compliance, and scalability. Ensure all clinical operations adhere to ICH-GCP guidelines (R2 / R3), applicable regulations, and internal quality standards. Lead the implementation, improvement and validation of new processes, procedures, and IT systems (e.g., eQMS, eTMF ...

from one of Arups other UK locations. Purpose of the role: The role plans and delivers risk-based internal audits against ISO / IEC 27001 requirements, internal information security policies, client commitments, legal and regulatory obligations, and good-practice security controls. The postholder … Plan, scope and conduct internal audits of the ISMS, security governance processes, risk management activities and control operation. Assess conformance with ISO / IEC 27001, internal policies, procedures, standards, contractual obligations and applicable regulatory expectations. Perform audits remotely and, where appropriate, onsite across ...

network security, logging, monitoring and data protection. Leading and supporting threat modelling, attack surface analysis and risk assessments, including TARA to ISO / SAE 21434 , from item definition through to attack feasibility rating and risk treatment. Defining and embedding security requirements across the secure development lifecycle, covering … firmware, embedded systems, cloud services, APIs, CI / CD and software supply-chain security. Improving vulnerability intake, triage, remediation and reporting, plus SBOM / dependency visibility and product security incident readiness. Communicating complex risks to technical and non-technical stakeholders and producing assurance-grade documentation. What we need ...

Opportunity This is a hands-on role suited to someone who has successfully led, or played a significant role in, delivering an ISO 27001 certification programme. You'll own and continually improve the Information Security Management System (ISMS), working closely with Technology, Infrastructure, Engineering and business … meet evolving regulatory and compliance requirements. Key Responsibilities Lead the ongoing development and continual improvement of the Information Security Management System (ISMS) Drive ISO 27001 implementation, certification and ongoing compliance activities Conduct security risk assessments and manage enterprise risk registers Develop, review and maintain Information Security ...

data against cyber threats. We operate in a highly secure global SaaS organization that holds multiple certifications such as PCI‐DSS, ISO / IEC 27001, SOC, HIPAA, IRAP and works with a large, federated customer base. Responsibilities Develop and lead a team … latest security threats, vulnerabilities and mitigation techniques. Advantageous Skills and Experience Experience working on projects ensuring compliance with PCI DSS, ISO / IEC 27001, SOC, HIPAA, IRAP controls. Knowledge of security compliance standards relevant to the SaaS industry such as PCI, GDPR, ISO ...

Jobtailor is seeking an experienced Information Security Assessor to conduct third-party assessments against BSI and ISO / IEC standards in the UK. You will evaluate controls, communicate findings, and advise on certificate decisions, while building trusted client relationships with CISOs and IT leadership. Desirable … qualifications include CISSP / CISM / CISA and Lead Auditor credentials, with strong reporting skills and a deep understanding of GDPR, ISO / IEC 27001, and cloud security controls. #J-18808-Ljbffr ...

management principles and methodologies. Experience working with recognised frameworks and standards, including: NIST Cybersecurity Framework (CSF) NCSC Cyber Assessment Framework (CAF) ISO / IEC 27001 and ISO / IEC 27005 CIS Critical Security Controls COBIT Experience analysing risk … Days) Statutory & Contributory Pension EAP with Help@Hand Gym Membership Benefits Cycle to Work and Electric Vehicle Schemes Flexible Working Annual Away Days / Company Socials Diversity and Inclusion As an equal opportunities employer, we are committed to creating a work environment that supports, celebrates, encourages and respects ...

years’ Workday ecosystem). 5+ years of software development experience including Web apps. Strong grasp of Workday data model, security, business processes, custom objects / orgs, calculated fields, and reports / RaaS. Demonstrated delivery of production apps (portfolio or walkthroughs at interview). Proficiency with REST APIs … Workday Reporting (advanced), Time Tracking. Scripting experience (e.g., JavaScript / TypeScript, Python) for tooling and documentation automation. Knowledge of privacy & compliance (GDPR, SOX, ISO27001) and secure coding practices. Education & Certifications. Computer Science, Information Systems, Engineering or equivalent experience. Workday certifications (HCM / FINS / Integrations / ...

Monitor compliance with policies and conduct regular reviews and updates of security policies and procedures. Complete security assessments for third party suppliers, assets (buildings / retail) and projects to ensure adherence to cyber security policies and standards. Deliver and maintain the supplier risk assessment process. Identify and assess information … endpoint protection, identity and access management, vulnerability management, security testing). PREFERRED SKILLS ISO 27001 or nist framework experience. Surecloud / grc / alternatives. Exposure to ai governance frameworks (e.g. Nist ai rmf) or developing ai use-case risk assessments. Exposure to property technology ...

M365 Security Consultant (App sec / SCA / SAST / DAST , CI / CD Security, DevSecOps ) As an M365 Consultant / Senior Consultant, you will help transform clients’ cybersecurity posture by designing and implementing advanced Microsoft Threat Protection technologies. You will work directly with clients … large enterprise environments and contributing to robust Cyber Defence strategies across endpoints, identities, cloud, and collaboration platforms. Key Responsibilities Design and implement AV / EDR solutions (e.g., Microsoft Defender for Endpoint) to detect and respond to cyber threats across major operating systems. Protect email, messaging, and collaboration platforms from ...

enabled automations, threat modeling, design reviews. Build secure-by-design IaC modules for Landing Zones, Control Tower customizations, Zero-Trust architectures, and AI / ML workloads. Lead the design, deployment, and implementation of AWS security controls, continuous compliance monitoring, evidence collection, and remediation of insecure configurations to scale with … review scripts, and IaC (Python, Terraform, AWS CDK, CloudFormation, Rego). Lead exploratory POCs on emerging technologies. Define the hypothesis, success criteria, and go / no-go gates. Lead alignment, resolve escalations, troubleshooting, and root-cause analysis to closure Lead the development of technical content Communicate security risk ...

posture to leadership in clear, business-oriented terms. Compliance and certifications Drive certification and attestation efforts (e.g., ISO 27001 and / or SOC 2): design and maintain the control framework, own the documentation and evidence, and lead internal and external audits. Build a sustainable, “always … govern our Microsoft 365 environment — Entra ID, Microsoft Defender, Microsoft Purview, and Intune. Own identity and access management: conditional access, MFA, privileged access, joiner / mover / leaver processes, and least-privilege enforcement. Implement and tune data loss prevention (DLP), information protection / labelling, and device compliance. ...

expanding with many new builds, enhancing our focus on safeguarding data and infrastructure in the face of evolving cyber threats. The IC / OT Cybersecurity Engineer will support the security of a global OT environment by implementing, and validating cybersecurity controls across IC / OT systems. The role … internal stakeholders to drive consistent implementation of OT cybersecurity practices. Perform OT Cybersecurity Risk assessments against best practices and industry frameworks (e.g., ISA / IEC 62443, NIST SP 800‐82, NIST CSF) including participating in audits. Act as a key contributor in OT security testing by conducting ...

third-party assurance reports (e.g., SOC 2, ISO certifications), and historical security incident logs. Identify deal-impacting risks, quantify remediation effort (cost / timeline ranges), and advise on onboarding security priorities. Integration Roadmapping: Identify risk areas and formulate actionable post-acquisition security integration roadmaps and transition plans. … Standards & Compliance (ISO 27001 & SOC 2) Framework Governance: Assess, maintain, and mature existing security frameworks aligned with ISO / IEC 27001 and SOC 2 Type II. Develop and maintain information security policies, standards, and procedures aligned to these standards ...

benefits that matter to our people and enable us to be engaged both in and outside of work. We foster a culture where work / life balance is nurtured and encouraged, offering hybrid working, generous paid time off, paid holidays, volunteer time off, and Summer half-day Fridays. … resilient. ISO 27001 evidence remains current and surveillance-ready. Risks, vulnerabilities, recommendations and remediation actions are tracked and visible. Purview / SAR activity is repeatable, secure and auditable. Leadership has clear visibility of IT risk, operational maturity and open actions. Someone who exemplifies ...

have all of these but think you could be a good fit for the role, get in touch. Professional Qualifications CISA / … RiskIT / CISM / CISSP / CSSLP (Desirable) Knowledge of technology risk and control taxonomies and the industry standard frameworks (COBIT, ISO27001, ISO / IEC 27034) Experience working in IT with a risk or controls focus or in an internal audit function ...

across Humanoid's HMND 01 platform family — the Alpha Wheeled industrial robot and the Alpha Bipedal home robot — both powered by our KinetIQ VLM / VLA-based AI framework. Working alongside product, firmware, autonomy, and hardware teams as part of the Systems Engineering and Architecture Team, you will define … resilient. Contribute to the continual improvement of security engineering capability across the organisation. Ensure compliance with cybersecurity obligations under the EU Machinery Regulation 2023 / 1230 where cyber controls intersect with safety-critical functions and compliance to IEC 62443 (for industrial / OT product security ...

expertise with the strategic ability to translate complex threats into clear, actionable guidance. Responsibilities Design and own cloud security architecture across AWS, Azure, and / or GCP environments, including the development of reference architectures and reusable solution patterns Define and author enterprise‐level security policies, controls frameworks, and governance … 27001, Cyber Essentials Plus, PCI DSS, and other relevant regulatory frameworks Support DevSecOps adoption and integrate security tooling and controls into CI / CD pipelines across client delivery teams Engage senior stakeholders and executive teams with clear security risk reporting, remediation guidance, and strategic security roadmaps Lead ...

Payments, Financial Services, or regulated industries is highly valued. Integration & Technical Architecture: Solid grasp of APIs, webhooks, REST architecture, data pipelines, and modern security / compliance standards. Can analyse client infrastructure and map it to platform capabilities. Experience with Payments (Wise, Stripe, PayPal) or Financial Services integrations is valuable. … thrive without rigid playbooks. Comfortable operating in scale‐up environments where customer needs inform product direction. Security & Compliance Acumen: Understand security requirements, SOC 2 / ISO 27001, data residency, audit logging, encryption. Trusted conduit between Sales and Technology – able to articulate product capabilities on security ...

excellent opportunity for someone with 1 to 2 years' Information Security or GRC experience who is looking to develop their expertise across ISO 27001, governance, risk management, supplier assurance and compliance. Salary & Benefits £38,000 to £48,000 Hybrid working, 3 days per week … Central London office Excellent career development and training Exposure to ISO 27001 certification and audit activities Work alongside experienced Information Security professionals Strong benefits package What you'll be doing Support and enhance the Information Security Management System (ISMS) Assist with ISO 27001 ...

Accenture's thought leadership in OT security through publications, presentations, and client engagements. What You’ll Need Essential 10+ years of experience in OT / ICS cybersecurity or critical infrastructure security. Proven track record leading complex security programmes in regulated industrial environments. Deep understanding of Industrial Control Systems (SCADA … across multiple sectors: Energy, Utilities, Manufacturing, Aerospace, Defence, or Critical National Infrastructure. Knowledge of security standards including NERC‐CIP, IEC 62443, ISA / IEC 62443. Background in both advisory and hands‐on technical implementation. What We Offer Work on prestigious projects spanning critical national infrastructure ...

Manager Reference No: 2158 Company: FTSE 100 Reports to: Deputy Group CISO Location: London Working Pattern: 37.5 hours per week, Monday – Friday. Location: London / Peterborough, with potential travel to divisional sites as required by advisory engagements (hybrid working arrangements in place). Salary: £84,000 - £100,000 Benefits … from the GCS flexible resourcing desk, deploying expertise where it is most needed across the transformation programme and business-as-usual demand. Role Responsibilities / Accountabilities Cyber Enterprise Architecture Own and maintain the Group cyber enterprise architecture, defining the security architecture principles, patterns, and reference models that provide ...

Director in security matters as required Operation of the ISMS and Data Protection processes Managing risk register, preparing for management review meetings Developing / maintaining controls and ensuring they are implemented across the organisation Refining our security KPIs and maintaining them Proposing actions from KPIs, events and incidents … Director to create, maintain and manage policies and ensure compliance Planning and participating in incident response exercises Managing major incidents and conducting post mortems / reviews Person Specification Essential Criteria The ability to learn new skills and technologies quickly Experience of risk management Working knowledge of security standards ...

Overview Join Chambers as our next Cyber Security Analyst / Lead, a pivotal role at the heart of our commitment to safeguarding information and maintaining trust. A hands-on role, you’ll lead the development and delivery of our information security programme, protecting our systems, data, and digital assets … information security matters to various stakeholders across the organisation. Oversee the day-to-day operation of security systems and tools, including firewalls, intrusion detection / prevention systems (IDS / IPS), antivirus, anti-malware, SIEM (Security Information and Event Management), vulnerability scanners, and data encryption solutions. Manage vulnerability management ...