1 to 25 of 140 Remote/Hybrid ISO/IEC 27001 Jobs in London

Opportunity This is a hands-on role suited to someone who has successfully led, or played a significant role in, delivering an ISO 27001 certification programme. You'll own and continually improve the Information Security Management System (ISMS), working closely with Technology, Infrastructure, Engineering and business … meet evolving regulatory and compliance requirements. Key Responsibilities Lead the ongoing development and continual improvement of the Information Security Management System (ISMS) Drive ISO 27001 implementation, certification and ongoing compliance activities Conduct security risk assessments and manage enterprise risk registers Develop, review and maintain Information Security ...

data against cyber threats. We operate in a highly secure global SaaS organization that holds multiple certifications such as PCI‐DSS, ISO / IEC 27001, SOC, HIPAA, IRAP and works with a large, federated customer base. Responsibilities Develop and lead a team … latest security threats, vulnerabilities and mitigation techniques. Advantageous Skills and Experience Experience working on projects ensuring compliance with PCI DSS, ISO / IEC 27001, SOC, HIPAA, IRAP controls. Knowledge of security compliance standards relevant to the SaaS industry such as PCI, GDPR, ISO ...

posture to leadership in clear, business-oriented terms. Compliance and certifications Drive certification and attestation efforts (e.g., ISO 27001 and / or SOC 2): design and maintain the control framework, own the documentation and evidence, and lead internal and external audits. Build a sustainable, “always … govern our Microsoft 365 environment — Entra ID, Microsoft Defender, Microsoft Purview, and Intune. Own identity and access management: conditional access, MFA, privileged access, joiner / mover / leaver processes, and least-privilege enforcement. Implement and tune data loss prevention (DLP), information protection / labelling, and device compliance. ...

third-party assurance reports (e.g., SOC 2, ISO certifications), and historical security incident logs. Identify deal-impacting risks, quantify remediation effort (cost / timeline ranges), and advise on onboarding security priorities. Integration Roadmapping: Identify risk areas and formulate actionable post-acquisition security integration roadmaps and transition plans. … Standards & Compliance (ISO 27001 & SOC 2) Framework Governance: Assess, maintain, and mature existing security frameworks aligned with ISO / IEC 27001 and SOC 2 Type II. Develop and maintain information security policies, standards, and procedures aligned to these standards ...

benefits that matter to our people and enable us to be engaged both in and outside of work. We foster a culture where work / life balance is nurtured and encouraged, offering hybrid working, generous paid time off, paid holidays, volunteer time off, and Summer half-day Fridays. … resilient. ISO 27001 evidence remains current and surveillance-ready. Risks, vulnerabilities, recommendations and remediation actions are tracked and visible. Purview / SAR activity is repeatable, secure and auditable. Leadership has clear visibility of IT risk, operational maturity and open actions. Someone who exemplifies ...

have all of these but think you could be a good fit for the role, get in touch. Professional Qualifications CISA / … RiskIT / CISM / CISSP / CSSLP (Desirable) Knowledge of technology risk and control taxonomies and the industry standard frameworks (COBIT, ISO27001, ISO / IEC 27034) Experience working in IT with a risk or controls focus or in an internal audit function ...

excellent opportunity for someone with 1 to 2 years' Information Security or GRC experience who is looking to develop their expertise across ISO 27001, governance, risk management, supplier assurance and compliance. Salary & Benefits £38,000 to £48,000 Hybrid working, 3 days per week … Central London office Excellent career development and training Exposure to ISO 27001 certification and audit activities Work alongside experienced Information Security professionals Strong benefits package What you'll be doing Support and enhance the Information Security Management System (ISMS) Assist with ISO 27001 ...

Accenture's thought leadership in OT security through publications, presentations, and client engagements. What You’ll Need Essential 10+ years of experience in OT / ICS cybersecurity or critical infrastructure security. Proven track record leading complex security programmes in regulated industrial environments. Deep understanding of Industrial Control Systems (SCADA … across multiple sectors: Energy, Utilities, Manufacturing, Aerospace, Defence, or Critical National Infrastructure. Knowledge of security standards including NERC‐CIP, IEC 62443, ISA / IEC 62443. Background in both advisory and hands‐on technical implementation. What We Offer Work on prestigious projects spanning critical national infrastructure ...

Manager Reference No: 2158 Company: FTSE 100 Reports to: Deputy Group CISO Location: London Working Pattern: 37.5 hours per week, Monday – Friday. Location: London / Peterborough, with potential travel to divisional sites as required by advisory engagements (hybrid working arrangements in place). Salary: £84,000 - £100,000 Benefits … from the GCS flexible resourcing desk, deploying expertise where it is most needed across the transformation programme and business-as-usual demand. Role Responsibilities / Accountabilities Cyber Enterprise Architecture Own and maintain the Group cyber enterprise architecture, defining the security architecture principles, patterns, and reference models that provide ...

Director in security matters as required Operation of the ISMS and Data Protection processes Managing risk register, preparing for management review meetings Developing / maintaining controls and ensuring they are implemented across the organisation Refining our security KPIs and maintaining them Proposing actions from KPIs, events and incidents … Director to create, maintain and manage policies and ensure compliance Planning and participating in incident response exercises Managing major incidents and conducting post mortems / reviews Person Specification Essential Criteria The ability to learn new skills and technologies quickly Experience of risk management Working knowledge of security standards ...

Senior Information Security Analyst - Audit & Compliance ISO27001, SOC2, PCI-DSS, NIST, GDPR London (Barbican). Hybrid. 2 days a week onsite. Up to £100k plus 8% bonus, pension, private medical etc We're working with a global technology partner to find a certified Information Security Analyst. This is a fantastic … SOC2, PCI DSS, Cyber Essentials) Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal / external audits and compliance assessments. Relevant security / audit certifications (CISA, CISM, CISSP, ISO 27001 Lead Auditor, Cyber Essentials Assessor ...

enterprise‐grade product Experience working directly with large engineering teams on the roadmap, release planning, dependency mapping, and cross‐team sequencing Current programming / scripting experience and a familiarity with DevSecOps practices in order to drive automation without compromising quality or security Strong stakeholder communication skills when translating between … engineering, product, customer‐facing teams, and leadership Exposure to security and compliance frameworks (e.g. SOC 2 / ISO 9001 / ISO 27001) Ideally, you would also have: This is not an additional list of requirements; this reflects the tech stack currently used ...

data security controls and AI security standards. \n Up to date on cybersecurity threats, risk assessment, and frameworks / regulations (GDPR, PCI, NIST, ISO27001). \n Proven experience in requirements identification, solution testing, and vendor product selection. \n Demonstrated leadership and relationship management with internal and external partners, along … management and security requirements with tact and tenacity to senior executives \n Strategic orientation with ability to act tactically as required. \n Strong negotiator / facilitator and consensus builder with results-oriented commitment. \n Ability to interact at all levels of the organisation. \n\n Key responsibilities ...

cyber security systems, solutions and services considerations and enable smooth handovers.Develop and maintain governance and compliance documentation, ensuring adherence to standards such as ISO 27001, NIST, GDPR, NIS2, and UK regulations.Act as a trusted advisor, sharing best practices and emerging technologies, and maintaining up-to-date … environment, for everyone.Your skills and experienceStrong knowledge of cyber security principles and compliance frameworks (ISO 27001, NIST, GDPR, NIS2, ISA / IEC 62443).Experience in solution design for complex IT / security projects, including bid management and cost modelling ...

term roadmap: Endpoint & identity security engineering - contributing to the CrowdStrike AU→UK CID migration (Intune-deployed, scripted), Entra ID configuration for the new EU / UK tenant, and Intune / MDM policy build-out. Network security delivery - hands-on work on Netskope deployment for SaaS / web steering, Tailscale ACL and zero-trust access design, and FortiGate / UniFi security configuration for the Winnersh Triangle site. Site security build - working the physical / technical security side of the Winnersh Triangle stand-up: access control (Paxton), CCTV, structured cabling security, vendor delivery oversight ...

with one or more GRC technology platforms (OneTrust, ServiceNow GRC, Archer, MetricStream, or similar). Familiarity with widely used GRC frameworks and standards (ISO 27001, ISO 27701, SOC 2, NIST CSF, COSO, or similar). Working knowledge of GDPR … Consulting experience, whether at a professional services firm, a Big Four, or a privacy or risk specialist firm. A recognised credential such as CIPP / E, CIPM, CRISC, CISA, ISO 27001 Lead Auditor or Implementer, or equivalent. A relevant degree in a field such ...

will maintain and administer key security platforms, support client-facing security assurance activities, and help strengthen the company's security posture ahead of ISO 27001 certification. Responsibilities: * Implement, manage and actively monitor security controls across email, web, endpoint and cloud environments. * Monitor and respond to security … governance, DLP and compliance tooling are essential for success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and / or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would ...

advisory guidance on how Group standards interact with local legal and regulatory requirements. Knowledge & Skills Familiarity with the security technology estate – including Microsoft E5 / Defender suite, Zscaler, Qualys, Abnormal Security, Claroty, and Axonius – sufficient to provide informed advisory guidance on standards compliance and configuration questions without requiring specialist … platform engineering support for routine queries. Understanding of OT / ICS security considerations relevant to food and beverage manufacturing, distribution, and supply‐chain environments. Knowledge of firewall policy review tooling (e.g. Tufin, AlgoSec, FireMon) and structured approaches to rule base analysis and optimisation. Strong written communication skills; able ...

compliance and secure our scaling global operations. Acting as the authoritative voice on internal information security, you will lead the evolution of our ISO 27001:2022 management system and serve as an essential partner to our business operations. This high-impact, individual contributor position is designed … ambitious professional looking to own our governance roadmap and influence senior stakeholders. What you'll be doing: Owning and continuously improving our ISO 27001:2022 Information Security Management System (ISMS) to ensure robust compliance. Designing and executing comprehensive internal audit schedules to verify adherence to security ...

need as an Operational Technology (OT) Cyber Security Consultant 25 years' experience within Operational Technology or Industrial Cyber Security. Experience with OT / ICS environments including SCADA, DCS, PLCs or RTUs . Understanding of Industrial IoT (IIoT) and industrial communications. Knowledge of OT cyber risk, security architecture and monitoring. … Experience within energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum ...

need as an Operational Technology (OT) Cyber Security Consultant 610 years' experience within Operational Technology or Industrial Cyber Security. Strong experience securing OT / ICS environments including SCADA, DCS, PLCs, RTUs and industrial communications . Expertise across Industrial IoT (IIoT), OT cyber risk, security architecture and security monitoring . … projects across energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within ...

Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting – CCNP Level, Expert Level Preferred High Availability and Disaster Recovery – CCNP Level, Expert Level Preferred Security / Cyber Security Skills Required Cisco Firepower Firewalls (ASA, FTD) – CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer … SIEM use cases for key controls etc. Risk Management in Cyber Security, SSL Blind spots, what causes them and how to mitigate Malware / Ransomware and how to mitigate along with Penetration testing concepts Understanding of White / Black / Grey Box penetration testing. Developing Security policies ...

Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security / Cyber Security Skills Required Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer … SIEM use cases for key controls etc Risk Management in Cyber Security, SSL Blind spots, what causes them and how to mitigate Malware / Ransomware and how to mitigate along with Penetration testing concepts Understanding of White / Black / Grey Box penetration testing. Developing Security policies ...

trusted boardroom advisor to mid-market clients across cyber security, risk, and resilience. Core Frameworks: Lead client assessments and certifications across Cyber Essentials / CE+, ISO 27001, and UK GDPR . Innovation: Build next-generation AI Governance and operational resilience (BC / DR) frameworks. … Strong practical knowledge of Cyber Essentials, UK GDPR, and ISO 27001. Exceptional executive presence—confident presenting risk and strategies to C-suite / board levels. Commercial acumen to partner with sales teams and expand client adoption. Desirable: CISSP, CISM, CRISC, or ISO 27001 ...

GDPR and related data protection frameworks Strong regulatory interpretation and analytical skills Excellent written and verbal communication, especially for reporting Ability to translate legal / regulatory language into technical and operational requirements Strong organizational and stakeholder management skills Proactive mindset with high attention to detail Might haves: Professional certifications … such as: CISM, CISSP, CRISC, CISA ISO 27001 Lead Implementer / Auditor Experience working with regulators or in regulated industries (e.g., telecom, financial services, critical infrastructure) Familiarity with compliance tools (e.g., ServiceNow GRC, Archer, MetricStream) Experience with control frameworks such as ISO 27001 ...