101 to 125 of 292 ISO/IEC 27001 Jobs in London

gaps, and drive accountable remediation across teams. This is a senior individual contributor role for someone who has managed global compliance frameworks and security / privacy compliance programs in a technology company. You will bring structure to ambiguous compliance changes, translate requirements into actionable control expectations, facilitate risk workshops … preferably in a global technology, marketplace, SaaS, fintech or payments environment. You have managed or materially contributed to a global compliance framework or security / privacy compliance management program. You have built, operated or significantly improved a compliance change management, obligations management, control mapping or regulatory-change process. ...

depending on experience. Key Skills & Experience Proven experience in a cyber security management or leadership role Strong knowledge of recognised frameworks (e.g. ISO 27001, Cyber Essentials) Experience overseeing governance, risk, and assurance activities Broad technical understanding across networks, cloud, infrastructure Hands-on experience leading or coordinating … goals Lead governance, risk management, and compliance initiatives Own and maintain the Information Security Management System (ISMS) Ensure alignment with standards such as ISO 27001 and Cyber Essentials Identify, assess, and mitigate cyber risks, maintaining the risk register Lead incident response capability, ensuring plans are tested ...

Driving engineering quality, delivery performance and operational maturity Overseeing a modern technology stack including React, Node.js, JavaScript and TypeScript Leading the organisation’s ISO 27001 implementation through to certification Strengthening security, governance, risk and compliance … Overseeing an AWS cloud environment and modern cloud-native architecture Identifying and implementing practical AI opportunities across products, engineering and internal operations Improving CI / CD, automation, DevOps and software delivery practices Partnering with the CEO and senior leadership team on technology investment and strategy We’re looking ...

with the future state cloud-first strategy and architecture.* Define and document cloud service security baselines that align with modern security frameworks (CIS, CSA, ISO27001, etc.)* Define and document repeatable cloud service patterns* Drive adoption and migration from traditional technology platforms to public cloud services.* Recommend tools and methodologies … managed by individuals or teams in a scalable manner.* Ensure systems and application have efficient and actionable monitoring with SLO aligned with business goals.Qualifications / Requirements:* You have expert knowledge of Microsoft Azure products and capabilities.* You have proven experience with all aspects of Cloud service models and application ...

responsibilities Execute vendor security assessments by collecting, analysing, and documenting supplier control evidence, audit reports, and risk findings against defined frameworks including ISO 27001 and NIST CSF. Identify and document third‐party security risks, recommending proportionate risk treatment options aligned to JET's risk appetite. Support … vendor reviews end‐to‐end, including evidence collection, gap analysis, and documented findings. Working knowledge of security frameworks such as NIST CSF, ISO 27001, or CIS Controls applied in a product or engineering context. Ability to communicate security risk clearly to both technical and non‐technical ...

Record of Processing Activities (ROPA) up to date. ● Manage data subject requests and any data breach reporting requirements. Information security ● Maintain our ISO 27001 Information Security Management System (ISMS), ensuring policies, controls and documentation remain current. ● Manage surveillance audits and recertification activities, acting as the primary … Experience of GamStop and the National Self-Exclusion Scheme. ● Experience within online bingo or other remote gambling products. ● Data protection qualification such as CIPP / E or the BCS Certificate in Data Protection. Package ● £40,000–£55,000 pro rata (based on three days per week) ● Flexible working pattern ...

with the future state cloud-first strategy and architecture. Define and document cloud service security baselines that align with modern security frameworks (CIS, CSA, ISO27001, etc.). Define and document repeatable cloud service patterns. Drive adoption and migration from traditional technology platforms to public cloud services. Recommend tools and methodologies … Proven experience working in DevOps teams within a mission‐critical environment. Working experience in Agile methodologies and have actively managed scrums. Experience with CI / CD, Infrastructure-as-Code management and governance. Passionate about innovation and leading technological change. Passionate in creating a collaborative, caring and safe environment ...

Faculty is seeking an Information Security Manager to drive compliance and secure its scaling global operations. You will lead the ISO 27001:2022 management system, partner with senior stakeholders, and own the governance roadmap. This is an ambitious, individual-contributor role with high impact on security ...

London, United Kingdom | Posted on 20 / 07 / 2026 Engagement: Inside IR35 Start Date: ASAP Overview We are supporting a leading investment banking client in London who is seeking an experienced Cyber Technical Delivery Manager to join a large-scale Cyber Security Transformation Programme. This role will … 27001 CIS Controls Cyber Essentials Regulatory requirements within Financial Services Technical Knowledge Good understanding of: Microsoft Azure AWS Active Directory / Entra ID Security Monitoring Platforms Identity Management Solutions Network and Infrastructure Security Ability to engage effectively with technical architects, engineers, and security specialists. Delivery Management Proven ...

compliance. SFIA Level 5 capability or equivalent experience. Experience within telecommunications, mobile network operators, critical national infrastructure or emergency services. Knowledge of 4G / 5G Core Networks, Radio Access Networks (RAN), IMS, OSS / BSS platforms and network virtualisation (NFV / SDN). Understanding of Zero Trust … more about this Security Assurance Lead opportunity, hit apply or get in touch with Sophie Higginson at Anson McCade for a confidential discussion. AMC / SHI / ...

Purpose Build, implement, and maintain the technical security controls that protect infrastructure, applications, and data. Key Responsibilities Implement and maintain security tooling (firewalls, EDR / XDR, SIEM, IAM / PAM platforms, DLP) Configure and harden cloud environments (AWS / Azure) in line with security baselines Support vulnerability … SOAR) in partnership with the SOC Support incident response - containment, investigation, and remediation of confirmed threats Automate security processes via scripting (Python, PowerShell, Terraform / IaC) Work with architects to implement designed controls (Zero Trust, network segmentation, encryption) Support audit and compliance evidence-gathering (ISO 27001 ...

Main Responsibilities Duties will include: Setting and personally delivering target architecture for the ECP data estate the data warehouse, data hub, data lake, raw / ODS layers, dimensional model, audit and schema-change tracking, and the load schedules that tie them together. Hands-on T-SQL, stored procedure … framework and PowerShell development at expert level partition design and partition-aligned indexing, clustered / nonclustered index strategy, deduplication, parallel-run cutovers, schema migration, performance tuning of high-impact production queries. Driving the in-flight ETL replatform replacing legacy SSIS jobs with a table-driven, parallel ...

technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365 / Azure), including patching assurance, disaster recovery and business continuity testing. Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence … gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards / frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR, DSP Toolkit and wider public sector assurance requirements. Drive security awareness and practical adoption of secure ...

technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365 / Azure), including patching assurance, disaster recovery and business continuity testing. Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence … gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards / frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR, DSP Toolkit and wider public sector assurance requirements. Drive security awareness and practical adoption of secure ...

technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365 / Azure), including patching assurance, disaster recovery and business continuity testing. Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence … gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards / frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR, DSP Toolkit and wider public sector assurance requirements. Drive security awareness and practical adoption of secure ...

Develop and report meaningful security metrics to inform leadership decisions and continuous improvement.**Requirements:*** Several years’ experience in a BISO or senior security leadership / advisory role.* Strong cloud and application security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR / XDR, CSPM, SAST / DAST).* Experience embedding security into CI / CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat modeling, and control gap analysis.* Experience collaborating with SOC and Incident Response teams during security events.* Working knowledge of security frameworks and regulations (NIST ...

embed security into how engineers work every day. You’ll report directly to the CTO and have broad scope across the platform (from CI / CD pipelines to multi‐tenant APIs to incident response on authentication flows). Responsibilities Own the secure SDLC: drive SAST, dependency scanning, secrets detection … LLMs and agents to accelerate security workflows (triage, code review, evidence gathering) with guardrails you trust and help secure and monitor the (code / application / device) fleet. Support compliance work where it intersects security engineering: SOC 2, ISO 27001, customer security reviews ...

best practices, emerging threats, and regulatory requirements. Develop and present security roadmaps and improvement plans. Support clients in achieving certifications and compliance objectives, including ISO27001, Cyber Essentials and Cyber Essentials Plus, NIST Cybersecurity Framework, CIS Controls, GDPR and Data Protection requirements, DORA, and other sector-specific regulations where applicable. Review … reports and presenting recommendations to senior management. Strong leadership, project management and organisational skills. Experience working within regulated industries. Certifications (Desirable) CISSP CISM CRISC ISO27001 Lead Implementer or Lead Auditor Why Join Us? Joining Sysgroup means becoming part of a dynamic and innovative team that is dedicated to excellence. ...

Manager of Product Solutions, EMEA with a strong background in any of the following areas: Internal audit, internal controls over financial reporting (ICFR) / Sarbanes-Oxley (SOX), or enterprise risk management. The Manager of Product Solutions, EMEA will be a product expert in the Optro platform and be able … navigate the client's risk / audit / control environment and convey a high value proposition. This person will facilitate product demonstrations, answer product / sales questions, and consult clients on industry best practices as they learn about Optro. Internally, the Manager of Product Solutions will partner ...

Software Engineer (Backend) Job type: Full Time · Department: Technology · Work type: Hybrid · USD 150,000-200,000 / year London, England, United Kingdom; New York, New York, United States About Lorum Global payments are not broken. Incentives are. Clearing has been deprioritized inside balance sheet driven institutions whose models … across the team. Tooling, testing & continuous improvement Write comprehensive tests (unit, integration, and where appropriate property‐based tests) and support automated testing in CI / CD. Contribute to internal tooling, developer experience, and shared libraries. Share knowledge, mentor peers, and help raise the overall technical bar. Ideal candidate Must ...

with UK regulatory expectations (FCA, PRA, Lloyd's) and internal policies Translate regulatory and Group requirements into actionable control frameworks Information Security Officer (ISO) Role Act as the ISO for UK entities, providing risk leadership on Information Security matters Serve as a trusted advisor to senior … stakeholders Robust alignment with Group and UK regulatory expectations Successful navigation of a complex, multi-entity international environment Experience & Expertise Experience in Information Security / Cyber Risk / IT Risk roles Strong background in Information Security frameworks (e.g. ISO 27001, NIST) Experience operating ...

managed settings) and turn new capabilities into field-ready demos and guides within days of release. Own enterprise deployment and identity conversations: SSO (SAML / OIDC), SCIM provisioning, role, seat, and spend-limit management, sandbox and permission design. Sit credibly across from CISOs and security architects. Advise and unblock … customers running production workloads on the the company API and on Bedrock / Vertex, in close partnership with Applied AI. Teach. Design and deliver enablement that turns users into daily active developers, for audiences ranging from senior staff engineers to business users new to AI and develop the customer ...

industry best practices. Experience delivering security assurance reviews, audits and control effectiveness assessments. Knowledge of cloud security principles with exposure to Azure and / or AWS environments. Experience creating and implementing security policies, standards and governance processes. Understanding of broader cyber security domains such as Security Architecture, Vulnerability Management … work on complex enterprise security challenges and play a key role in helping organisations improve their cyber resilience, governance and risk posture. Reference: AMC / DMI / IAM Postcode: SW1 #damc ...

complex regulatory landscape. Lead solution design and delivery of enterprise compliance initiatives collaborating with Security Architecture and Assurance and the broader Security teams (ISO 27001 certification and Cybersecurity Assessment Framework). Collaborate with GRC Security Architecture and Assurance to enable and track risk-reduction, focused security … business. Legal and regulatory partner to business. Your team will collaborate with business, Tech and security to deliver: Policies and standards (top level / ISMS). Communications and engagement. Third party risk management (compliance / legal / contractual). Security assurance and audit-readiness against controls. Horizon ...

London Arena, United Kingdom | Posted on 29 / 07 / 2026 Specialized Cloud Network Engineer -Multi-Cloud Contract Location: London / Belfast (Hybrid) Contract Duration: 12 months initially (with potential extension) Contract Start Date: Immediate Contract Classification: Inside IR35 Job Summary As a Cloud Network Engineer … philosophy to ensure operationalexcellence. Key Responsibilities Multi-Cloud Network Architecture & Engineering: Design, implement, and manage advanced network architecturesacross AWS and GCP, including VPC / VNet design, subnetting, routing, IPaddressing schemes, and network segmentation. Hybrid Cloud Connectivity: Establish and maintain robust, high-performance, and secure connectivitybetween on-premise data centers ...