126 to 150 of 644 ISO/IEC 27001 Jobs in London

researchers to maximize velocity, removing obstacles while maintaining secure compute environments. Google Collaboration: Act as a key technical liaison within the broader Alphabet / Google ecosystem and with strategic security vendors, ensuring Isomorphic Labs maintains its agile, pioneering edge. Vulnerability and Incident Escalation: Serve as the senior technical escalation … qualificationsEssential: Engineering Leadership: Proven track record of managing, building, or leading technical security teams within fast-paced scale-ups, hyper-growth startups, and / or world-class technology organizationsStrategic Architecture: Deep experience defining, implementing, and defending security architectures across complex, multi-tenant cloud systems. Industry Exposure: Solid professional exposure ...

Group is seeking a skilled Information Security Officer to strengthen our SOC2 compliance and ISO 27001 governance within our Financial services clientele. The role focuses on policy development, audits, and serving as the main point of contact for client inquiries. The ideal … candidate has a Bachelor's degree, at least five years in a compliance role in finance, and strong communication skills. Certifications such as CISA / CISM / CISSP are a plus, and the ability to work both independently and #J-18808-Ljbffr ...

risk‐minimising solutions Proactive approach to staying updated with security threats and vulnerabilities Thorough understanding of the incident response process Desirable: network security, TCP / IP, BGP, VPNs, firewalls, WAFs, IDS / IPS and hybrid GCP / on‐premise connectivity Desirable: Assured Workloads and Access Transparency Desirable … ISO 27001 and PCI DSS experience Desirable: container provenance, Sigstore, Notary, container runtimes and software development lifecycle security Desirable: SAST / DAST and secure code reviews Desirable: cryptography management Desirable: ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty or GCP Professional Cloud Security Engineer certifications ...

Purview, BigID or Collibra. Understanding of cloud platforms (Azure, AWS or GCP), modern data environments and DevSecOps practices. Desirable Skills ISO 27701 / ISO 27001 and NIST Privacy Framework knowledge. Experience with Open Banking, PSD2, customer data platforms or consent management. CIPP / ...

Infra, budget..) Key 3 party operational infrastructure vendor management - i.e. management of managed service partners as a team extension globally, as well as service / solution delivery partners, Migration of Legacy VM based estates to SaaS and Cloud services platforms, Legacy Infra tech to Azure knowledge / experience … Prior to the last 5 years in Enterprise Management of a global estate / user-base, a demonstrable technical infrastructure engineering level background, working on Windows Server, AD , SQL environments, Firewalls / SDWAN, and Networks (WAN & / or LAN). The Client is based in the City ...

including configuring EDR policies, tuning SIEM rules, and optimizing the system for performance Work with the network engineers to implement posture management i.e. ICE / NAC segmentation / lateral movement control and firewalls Proactive collaboration with InfoSec to align CrowdStrike and other key security platforms with our security … support remediation and risk mitigation efforts Oversee WAF, DDoS, VPN, and perimeter firewalls Work with Endpoints team to administer MFA, SSO, PAM, MDM / MAM, and Conditional Access Maintain security certificates, encryption keys, and IDS / IPS systems Collaborate with third-party penetration testers to identify, prioritize ...

make informed decisions while supporting commercial success. You'll drive the day‐to‐day operation and continuous improvement of our compliance programs, including ISO 27001, SOC 2, TISAX, and emerging regulatory requirements. You'll serve as the subject matter expert during audits and ensure our control … information security governance, GRC, or technology risk within a SaaS or cloud environment. You've been the subject matter expert in SOC 2 and / or ISO 27001 audits — not just supporting them, but working directly on controls and partnering with auditors. Experience with additional ...

Engineer to join its engineering organisation and help standardise and improve build and deployment pipelines across a large application estate. The environment includes C# / .NET and Python applications , with a mix of modern and legacy technologies. You’ll work closely with application and engineering teams to create consistent … secure and highly reusable CI / CD processes that improve the way software is built, tested and deployed across the organisation. Key Responsibilities Design and operate scalable, highly available cloud infrastructure (primarily AWS and / or Azure). Build and maintain CI / CD pipelines, release tooling ...

External Key Manager (EKM) and Secret Manager, including cryptographic key ceremonies Experience with Workload Identity and Workload Identity Federation for keyless workload and CI / CD authentication Experience configuring and using cloud-native security logging, monitoring and detection services Strong programming skills in Python, Go and other languages … minimising solutions Proactive approach to staying updated with security threats, vulnerabilities and mitigation techniques Thorough understanding of incident response processes Desirable: network security, TCP / IP, BGP, VPNs, firewalls, WAFs, IDS / IPS and hybrid GCP / on-premise connectivity Desirable: data-residency and regulated-workload controls ...

risk assessments and vulnerability reviews. Identify, assess, and mitigate risks across industrial and operational environments. Ensure compliance with industry standards and frameworks including: IEC 62443 NIST Cybersecurity Framework (CSF) NIS2 ISO 27001 Support compliance with sector-specific regulatory requirements. Security Architecture & Implementation Design … network segmentation, and industrial protocols. Experience managing OT security incidents, vulnerabilities, and risk assessments. Knowledge of OT-focused cybersecurity frameworks and standards, including: IEC 62443 NIST CSF NIS2 ISO 27001 Ability to engage with both technical and non-technical stakeholders at all levels. Strong ...

SECURITY ARCHITECT ARCHITECT CONSULTANTHybrid Variable - London or BirminghamOverviewWe are seeking an experienced Senior AI Security Architect Consultant to design, implement, and govern secure AI / ML systems across the enterprise. This role is responsible for embedding security, privacy, and trust into AI solutions—from model development and deployment … monitoring and lifecycle management. The ideal candidate will combine deep cybersecurity expertise with hands-on knowledge of AI / ML technologies, ensuring that AI systems are resilient against adversarial threats, data leakage, and misuse. What you'll be doing: 1. AI Security Strategy & ArchitectureDefine and lead the AI security ...

security requirementsAdvise engineering and business teams on security best practice as they buildVulnerability management and testingManage penetration testing engagements, from scoping through remediationUse SAST / DAST and vulnerability scanning tools to prioritise and drive down riskPerform secure code reviews where neededSecure SDLCBuild and maintain secure SDLC standards for application … business self-serve on securityEvangelise secure development practices, especially for AI and low-code work, and coach rather than gatekeepIntegrate security checks into CI / CDAI and agentic toolingExtend the same rigour to AI tools and agents we build or deploy, including non-human identitiesAdvise on safe adoption ...

design and operate the processes, methodologies, and relationships that enable continuous validation of our security controls, supporting certifications such as TISAX and ISO 21434, meeting customer contractual commitments, and strengthening trust across the organisation. This is an opportunity to build a security assurance capability from the ground up. … balancing strong governance with the realities of a fast-moving engineering-led organisation. DesirableExperience supporting security assurance programmes for frameworks such as TISAX, ISO 21434, ISO 27001, SOC 2, or similar. Experience helping organisations evolve from periodic assurance towards continuous assurance. Familiarity with assurance ...

design and operate the processes, methodologies, and relationships that enable continuous validation of our security controls, supporting certifications such as TISAX and ISO 21434, meeting customer contractual commitments, and strengthening trust across the organisation. This is an opportunity to build a security assurance capability from the ground up. … strong governance with the realities of a fast-moving engineering-led organisation. Desirable Experience supporting security assurance programmes for frameworks such as TISAX, ISO 21434, ISO 27001, SOC 2, or similar. Experience helping organisations evolve from periodic assurance towards continuous assurance. Familiarity with assurance ...

management - i.e management of managed service partners, Migration of Legacy VM based estates to SaaS and Cloud services platforms, Legacy tech to Azure knowledge / experience, Prior to the last 5 years, a technical infrastructure engineering level background, working on Windows Server, AD , SQL environments, Firewalls / SDWAN … Networks (WAN & / or LAN). The Client is based in the City of London. This is a hybrid position with 3 days in the office. The salary for this role will be in the range £85K - £100K plus Benefits. #J-18808-Ljbffr ...

into pipelines including security scans, policy enforcement, and dependency checking. Security Monitoring & Incident Response: Monitor security alerts and events from SIEM, EDR, firewall, IDS / IPS, & other security tools. Triage and prioritise alerts based on severity and impact. Investigate security incidents and suspicious activities using log analysis, packet captures … forensic techniques. Lead containment, eradication, and recovery efforts during security incidents. Maintain alerting for security events & integrate with SIEM / SOAR platforms. Security Strategy & Programme Delivery: Define, own, and drive delivery of Asta's end-toend security programme spanning PAM, EDR, NDR, SIEM, penetration testing, DLP, and compliance. Translate ...

Location: Hybrid / Monument St, London EC3R 8AJ, UK job type: Permanent / Full-time Sector and subsector: IT | Data Engineer Salary: Competitive salary Platform Architecture & Engineering responsibilities: Design and implement scalable Databricks Lakehouse platforms on AWS and / or Azure aligned to client requirements Architect … layers Build and configure cloud infrastructure using infrastructure-as-code (e.g. Terraform & Declarative Automation Bundles(DAB's)) Establish secure, compliant environments including networking (VNet / VPC, Private Link), identity (IAM / Entra ID), data governance (Unity Catalog), and access controls Define environment strategies (dev / test / ...

cyber risk management, operational resilience, business continuity, disaster recovery, and incident response principles. Knowledge of common security and risk frameworks such as NIST, ISO 27001, COBIT, CIS Controls, and FFIEC guidance. Familiarity with financial services regulatory requirements relating to technology risk and resilience. Experience conducting risk … generation, or risk management outcomes. Preferred Qualifications Professional certifications such as CISSP, CISM, CRISC, CISA, CBCI, ISO 27001 Lead Implementer / Auditor, or equivalent. Experience supporting regulatory programmes involving PRA, FCA, DORA, NIS2, ECB, EBA, or similar regulatory frameworks. Knowledge of operational resilience requirements, including ...

Develop meaningful risk reporting, dashboards and management information for senior stakeholders. Ensure alignment with regulatory and industry frameworks including DORA, NIS2, NIST and ISO 27001. Act as the subject matter expert for third-party cyber risk across the organisation. What We're Looking For We are particularly interested … experience engaging both technical and non-technical audiences. Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor / Implementer. Suitable Backgrounds May Include Third Party Cyber Risk Manager Cyber Risk Manager Technology Risk Manager Supplier Assurance Lead Vendor Risk Manager Operational Resilience ...

standards for Entra ID and Active Directory, overseeing requirements for Conditional Access, MFA, SSO, and PIM.Threat Detection & Incident Response: Own and operate the SIEM / SOAR stack, including Microsoft Sentinel and Defender XDR, to develop detection rules and support forensic investigations. Infrastructure Hardening: Enforce secure baselines across virtualized environments … VMware / Hyper-V), Windows Servers, and Azure IaaS workloads. Data Protection: Manage the certificate lifecycle (PKI / AD CS) and implement data classification and DLP strategies using Microsoft Purview. Cloud Security Posture: Manage Azure Landing Zone security and connectivity, collaborating with Network Engineering to validate secure firewall ...

monitoring Championing Identity Threat Detection and Response (ITDR) solutions to proactively mitigate identity-based attacks Guiding the hardening of multi-site Active Directory domains / forests and cloud identity components (Entra / Azure AD) Collaborating with Security to design Azure Policies and guardrails supporting audit readiness (ISO … emerging technologies including passwordless authentication, decentralised identity frameworks, and adaptive access controls What We're Looking For Qualifications & Experience Proven background in IAM / identity engineering or architecture within large enterprise environments Prior global or large-scale enterprise experience preferred Microsoft Certified: Identity and Access Administrator Associate CISSP ...

more quickly and widely adopt emerging technologies while ensuring the integrity of their intellectual property; information flow during disaster response scenarios, and zero‐trust / least‐privilege environments for M&A, attorney‐client privileged communications, etc. And we’ve only scratched the surface. At our core, we're driven … 27001, Cyber Essentials Plus, and NIST 800‐53. Partner with Product & Engineering: Embed DevSecOps and secure SDLC practices into our CI / CD pipelines; oversee pentesting, red teaming, and threat modeling across our core infrastructure. Enable Enterprise Sales: Serve as the technical security authority in high‐stakes ...

Conduct Rules. Job DescriptionDefine and execute the Infrastructure and Cloud strategy, ensuring alignment to enterprise objectives, regulatory requirements (FCA / PRA), and organisational risk appetite, with a strong focus on resilience and security. Assess and continuously evolve the infrastructure estate across cloud and on‐premise environments, defining a clear … proactive service management with continuous improvement of MTTR and service stability. Define, implement, and continuously mature infrastructure governance and compliance frameworks, ensuring alignment to ISO27001 (Annex A), NIST CSF, CIS benchmarks, and regulatory expectations, including secure configuration, logging, monitoring, and audit readiness. Act as control owner for infrastructure and cloud ...

Cyber Risk Lead Up to 90,000 p / annum Hybrid Working - 3 days onsite CPS Group are supporting a global financial services organisation with the recruitment of a Cyber Risk Lead to own and develop their third-party cyber risk management framework. This is a great opportunity … experienced Cyber Security / Third-Party Risk professional to take ownership of a growing vendor risk function and work closely with IT, Procurement, Legal and senior stakeholders. The Role: Own and continuously improve the third-party cyber risk and security due diligence process. Lead vendor criticality assessments and ensure ...

Cyber Risk Lead Up to £90,000 p / annum Hybrid Working - 3 days onsite CPS Group are supporting a global financial services organisation with the recruitment of a Cyber Risk Lead to own and develop their third-party cyber risk management framework. This is a great opportunity … experienced Cyber Security / Third-Party Risk professional to take ownership of a growing vendor risk function and work closely with IT, Procurement, Legal and senior stakeholders. The Role: * Own and continuously improve the third-party cyber risk and security due diligence process. * Lead vendor criticality assessments and ensure ...