126 to 150 of 291 ISO/IEC 27001 Jobs in London

reports, and automated policy workflows Manage project timelines, deliverables, and escalations with minimal oversight Regulatory & Compliance Map client data flows to GDPR, DPDP, CCPA / CPRA, HIPAA, and ISO 27001 obligations Support RoPA, DPIA, and PIA documentation for client compliance programs Advise on data retention … deletion, and breach notification protocols TECHNICAL SKILLS BigID Platform Data discovery & scanning (structured, unstructured, cloud) Classification policies, labeling, and tagging DSR / DSAR automation workflows Risk & privacy modules — correlation, remediation BigID Open SDK, APIs, and custom app development Data & Cloud SQL / NoSQL databases — Snowflake Cloud platforms ...

address to the relevant regulatory requirements they address. Facilitate in attesting and demonstrating compliance with relevant authorities, regulators and auditors during compliance assessment and / or audits. Technology and Cybersecurity Regulatory Engagements Programs Collaborate in the developing and shaping Regulatory engagement operating model and standard processes. Devise and upkeep … from the application process through to joining WTW, please email candidatehelpdesk@wtwco.com Job Info Job Identification 202602167 Job Category IS Security Posting Date 07 / 31 / 2026, 10:38 AM Locations 51 Lime Street, London, EC3M 7DQ, GB #J-18808-Ljbffr ...

risks. What You’ll Bring Prior and proven experience gained as a Security Architect or in a technical cyber role working across public sector / government agencies . Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls … / NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS / Azure Architect, CISSP, CISM (or working towards CIISEC / UK Cyber Security Council registration). Soft Skills: Strong analytical thinking, communication, teamwork, and adaptability. What ...

DevSecOps Engineer, you will be responsible for: Owning Security Tooling: Selecting, integrating, and maintaining security tooling both within our environments and in our CI / CD pipelines Engineering Security Guardrails: Designing, implementing, and enforcing automated security guardrails and policies across our entire cloud estate and CI / … Terraform or OpenTofu. Security Tooling Expertise: Hands‐on experience deploying and managing key security tools (e.g., Aqua Security, Falco, Prisma Cloud, or similar CSPM / CWPP / CNAPP solutions). Automation & Scripting: Proficient in at least one relevant language (Python, Golang, or Shell) for developing security automation ...

Cyber Technical Delivery Manager Location: London (Hybrid – 4 Days per Week Onsite) Contract Length: 12 Months Engagement: Inside IR35 Industry: Investment Banking / Financial Services Start Date: ASAP Overview We are supporting a leading investment banking client in London who is seeking an experienced Cyber Technical Delivery Manager … 27001 CIS Controls Cyber Essentials Regulatory requirements within Financial Services Technical Knowledge Good understanding of: Microsoft Azure AWS Active Directory / Entra ID Security Monitoring Platforms Identity Management Solutions Network and Infrastructure Security Ability to engage effectively with technical architects, engineers, and security specialists. Delivery Management Proven ...

risks. What You'll Bring Prior and proven experience gained as a Security Architect or in a technical cyber role working across public sector / government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG / NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS / Azure Architect, CISSP, CISM (or working towards CIISEC / UK Cyber Security Council registration). What's in it for You Flexible Working: Remote-first with travel ...

Leadership, Applications, ITSM, Cloud, Digital Transformation, M&A, CyberSec, Suppliers, 3rd Parties, Governance, Budgets, ISO, Cyber Essential, AI, Automation, Azure, Hybrid (4d / w London) This is an exceptional permanent Head of IT opportunity to join a growing tech organisation undergoing significant technology, operational and business transformation. … CyberSec) and general transformations and modernisations. As Head of IT any experience with AI, M&A is beneficial. Strong M365, Prince2, ITIL and governance / security is essential. Strong senior IT leadership, stakeholder management, supplier governance, budget control and transformation experience are essential as Head of IT. Key skills ...

technologies to architectures and solution designs, such as Privilege Access Management, SSO, IDAM, Network security and encryption. Advise clients on regulatory compliance (e.g., ISO 27001, NIST, GDPR, PCI-DSS) Identify security vulnerabilities in system architectures and articulate these via risk terminology Due to the nature … Sign on bonus Private medical insurance To hear more about the Security Consultant role, get in touch with Sophie Higginson at Anson McCade AMC / SHI / ...

breaches (i.e. major incidents, material audit findings)* Provide clear, data-driven risk and impact assessments to product owners in business-led risk forums / committees. 4. Regulatory, Audit & External Engagement* Own first-line response to audit and regulatory reviews, including: + Issue ownership and remediation tracking. + Evidence provision … regulators and executive stakeholders.* Cloud and third-party risk oversight. **Qualifications & Certifications (preferred)*** CRISC, CISM, CISSP, ISO 27001 Lead Auditor / Implementer, ITIL Expert.* Degree in Computer Science / Engineering or equivalent experience. **Skills & Attributes*** Combines deep risk expertise with engineering credibility.* Strong decision ...

cyber risk. Experience required: A strong, hands-on technical background in operational cyber security spanning endpoint & EDR, identity & Active Directory, Microsoft 365 & Azure, network / ZTNA, and SIEM / log management - able to act as a senior technical authority within the team. Tools: Azure, Active Directory, CrowdStrike Falcon … Zscaler, Vulnerability Management (Qualys, Tenable Nessus, Rapid7), Incident Response ownership experience & Playbooks / Mitre Att&ck) Demonstrable experience leading cyber security incident response (incident command), from detection through containment and remediation. Working knowledge of MITRE ATT&CK and at least one recognised control framework (ISO 27001 ...

operational procedures. Monitor and improve key SOC performance metrics including MTTD, MTTR and SLA performance. Ensure effective use and optimisation of SIEM, EDR / XDR and SOAR technologies. Coordinate major cyber incidents and lead post-incident reviews. Work closely with threat intelligence, infrastructure, cloud and security engineering teams … technical cyber security teams. Strong understanding of incident response, threat detection and security operations. Hands-on knowledge of enterprise security technologies including SIEM, EDR / XDR and SOAR platforms. Experience with Microsoft Sentinel, Microsoft Defender XDR, Splunk or similar enterprise security tooling. Strong understanding of security frameworks including ISO ...

Partner with Trading, Middle Office and Quant (Institutional FinOps) teams to map out inventory trading systems, data flows, third‐party integrations and custody / settlement touchpoints. Conduct deep‐dive assessments mapping critical assets and workflows to identify structural vulnerabilities. You will be responsible for defining the Target State … maintain monitoring for FinOps‐specific security signals such as abnormal order patterns, signature misuse, unusual settlements. You will integrate these signals into our SIEM / SOAR for real‐time response. Support secrets and key‐management hygiene. You will ensure app / service keys are stored in KMS / ...

successful doing what they love. Your Team You’ll join SumUp’s Global Internal Audit team , part of our wider G&A / GRC function , reporting directly to the Global Head of Internal Audit . This team plays a critical role in protecting SumUp’s integrity, supporting regulatory compliance … hands‐on IT auditor who enjoys combining technical depth with clear communication and stakeholder collaboration. Must‐have experience: Minimum 4 years’ experience in IT / Internal Audit within a regulated financial services environment Strong knowledge of audit standards, risk management, and internal controls Experience auditing IT controls and frameworks ...

being run everywhere, by humans and agents. Harmonic Security governs all of it. The AI Governance and Control (AIGC) platform understands user / agent intent and data context in real time, giving security teams visibility and control across every tool and workflow so companies can move faster with … deep specialization in security architecture rather than general backend development Proven track record designing and personally implementing platform-level security controls in production - OAuth / OIDC / SAML, encryption, secrets and key management, multi‐tenant isolation Strong grounding in threat modeling and secure-by-design principles, applied ...

Senior Security & Compliance Architect London / Hybrid (1-2 days onsite per week) Salary: Up to £140,000 + Package We are seeking a Senior Security & Compliance Architect to lead the design, governance, and assurance of secure cloud and SaaS platforms across large-scale enterprise transformation programmes. This … access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS / vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience, backup, and disaster recovery architecture patterns and standards Collaborate with ...

Cyber Security GRC Consultant (DV Cleared) Location: Cambridgeshire / London, Hybrid - c. 3 days minimum on-site presence required Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk … culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD / Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce ...

performing technology risk team. Requirements Senior leadership in technology risk within regulated financial services. Ownership of control frameworks aligned to recognised standards (NIST, ISO, COBIT). Strong track record in risk governance and remediation of systemic … issues. Operational resilience and incident management expertise. Experience engaging with regulators and executive stakeholders. Cloud and third-party risk oversight. Degree in Computer Science / Engineering or equivalent experience. Certifications (preferred): CRISC, CISM, CISSP, ISO 27001 Lead Auditor / Implementer, ITIL Expert. #J ...

Overview Sitting in our 2nd Line Function, the Information Security Officer (ISO) plays a pivotal role in helping the bank achieve its growth ambitions in a compliant and secure manner. Working with the Chief Risk Officer and Data Protection Officer, the role holder will ensure the bank … drafting Board and committee papers. Experience of third-party security due diligence and supplier risk assessments. Relevant certifications such as CISSP, CISM, CRISC, CIPP / E or ISO 27001 Lead Auditor (desirable). #J-18808-Ljbffr ...

such as identity & access management (IAM), zero-trust architectures, cloud security, and data privacyframeworks, payment systems, fraud detection, digital banking security, and third-party / vendor risk management. Advise financial institutionsonregulatory compliance(e.g., FCA / PRA, - relevant regulations, , ISO 27001, NIST,CSF, Data Privacy … Advise clientsin areas such as identity & access management (IAM), zero-trust architectures, cloud security,data privacyframeworks, fraud detection, digital banking security, and third-party / vendor risk management. Support financial institutionsin achieving compliance with evolving regulations, enhancingoperational resilience and cyber incident response capabilities. Develop cyber risk frameworksthat embed security ...

experienced Cloud Security Engineer, your working day will include but not be limited to: DevSecOps & SDLC Champion integration of security testing into CI / CD pipelines across all development teams and usage of automated security gates: SAST, DAST, dependency scanning, secrets detection Enable self-serve security tooling for development … coding standards, ethical hacking techniques, network security and risk analysis Understanding of managing Secure Development Lifecycle and Vulnerability Management. Understanding and practical experience of ISO27001:2022 controls and audit processes Desirable AWS Security Specialty or similar certification Experience in regulated environments (healthcare, financial services) Familiarity with NHS DSPT Technical knowledge ...

senior level within complex organisations. Key Skills & Experience Proven experience developing and delivering cyber security strategies Strong understanding of security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls ...

prioritize threats and compare mitigation strategies. Work with Economist teams, external suppliers and engage with the customer to develop new policies, design processes / procedures and develop technical designs to drive remediation. Help to design a secure connected architecture. Audit embedded code to identify security vulnerabilities and develop solutions … support your wellbeing, growth, and work-life balance. It includes a highly competitive pension or 401(k) plan, private health insurance, and 24 / 7 access to counselling and wellbeing resources through our Employee Assistance Program. We also offer a range of lifestyle benefits, including our Work From Anywhere ...

model. Leading the ongoing development of Moneybox’s Information Security Programme, using NIST CSF as the practical risk‐management framework while aligning with ISO 27001 for governance, control maturity and assurance. Reducing real security risk across Moneybox’s technology estate, people processes, suppliers and products. Building ...

model. Leading the ongoing development of Moneybox’s Information Security Programme, using NIST CSF as the practical risk‐management framework while aligning with ISO 27001 for governance, control maturity and assurance. Reducing real security risk across Moneybox’s technology estate, people processes, suppliers and products. Building ...

creates trusted insight into effort, progress, and capacity (without bureaucracy). Provide technical leadership and escalation support: guide architecture and implementation choices, review designs / code when needed, and unblock high‐severity issues in production environments. Create scalable field engineering practices: build reusable patterns, playbooks, and standards that improve … reliability, maintainability, and speed across deployments. Shape the product via field learnings: translate recurring customer needs into clear productization proposals and partner with Product / Core Engineering to reduce one‐offs over time. Partner with customer engineering and enterprise stakeholders: collaborate directly with customer teams (architecture, security, platform ...