126 to 150 of 189 ISO/IEC 27001 Jobs in London

platforms Assist with the annual cyber essentials plus audit and ensure systems and processes adhere to these requirements. Assist with ensuring the ISO27001 information security assessments are completed on time and with ISO22301. Assist the IT Manager with monthly reporting of the performance of the MSP to enable analysis … Management and Disaster Recovery or Business Continuity Plan. Windows Server, Windows 11, SQL Server, O365 & Admin Center, cloud backup systems. A good understanding of ISO27001 and ISO22301 and has written policies and participated in audits. Cyber Essentials Plus - Good understanding has answered the Cyber Essentials questionnaire and has participated ...

development and deployment of products and services within the region, aligning with product security standards. Corporate Investigations: Ensure any Operating Companies investigations and data / evidence acquisitions is conducted following WPP polices and process. Incident Response: Coordinate and manage the response to security incidents within the region, working closely … Significant experience in information security, and experience within a leadership role. Strong understanding of global and regional security standards and regulations (e.g., GDPR, ISO 27001).Experience in a global, multi-national organisation. Proven track record in risk management, incident response, and security policy implementation. Demonstrated experience ...

maintain secure, scalable and highly available GCP infrastructure. Implement Infrastructure as Code (IaC) using Terraform and other automation tools. Develop, maintain and optimise CI / CD pipelines using tools such as GitLab CI, Jenkins, GitHub Actions or Cloud Build. Automate deployment, configuration management and operational processes using scripting languages … comply with applicable security policies, governance requirements and operational standards. Contribute to technical documentation, operational runbooks and knowledge sharing across the team. Key Skills / Experience: Proven commercial experience working as a DevOps Engineer, Cloud Engineer, Platform Engineer or in a similar role. Strong hands-on experience with Google ...

Cyber Security Engineer Hybrid - 4 days on-site p / w in London Initial Contract to 30 April 2027 Inside IR35 - 544.83pd Umbrella Rate Are you a cyber security engineer who enjoys owning a tool from deployment through to day-to-day operation, and then replacing it with something … defensive security, and what it takes to keep controls effective Experience supporting audit or risk activity, or knowledge of frameworks such as ISO 27001 and NIST Desirable: Python, Bash or PowerShell scripting, forensic, threat monitoring or deception tools, ServiceNow, Azure or AWS, CISSP, Security+, CEH Please ...

Cyber Security Engineer Hybrid - 4 days on-site p / w in London Initial Contract to 30 April 2027 Inside IR35 - £544.83pd Umbrella Rate Are you a cyber security engineer who enjoys owning a tool from deployment through to day-to-day operation, and then replacing it with something … defensive security, and what it takes to keep controls effective Experience supporting audit or risk activity, or knowledge of frameworks such as ISO 27001 and NIST Desirable: Python, Bash or PowerShell scripting, forensic, threat monitoring or deception tools, ServiceNow, Azure or AWS, CISSP, Security+, CEH Please ...

Cyber Security Engineer Hybrid - 4 days on-site p / w in London Initial Contract to 30 April 2027 Inside IR35 - £544.83pd Umbrella Rate Are you a cyber security engineer who enjoys owning a tool from deployment through to day-to-day operation, and then replacing it with something … defensive security, and what it takes to keep controls effective Experience supporting audit or risk activity, or knowledge of frameworks such as ISO 27001 and NIST Desirable: Python, Bash or PowerShell scripting, forensic, threat monitoring or deception tools, ServiceNow, Azure or AWS, CISSP, Security+, CEH Please ...

security transformation programmes. Strong understanding of Security Operations (SecOps), including service design, operational readiness and implementation. Knowledge of enterprise security technologies, including SIEM, IAM / PAM, vulnerability management, CMDB and security monitoring platforms. Experience working within UK Government, Defence or similarly complex regulated environments. Familiarity with NCSC guidance, NIST … ISO 27001 and security governance frameworks. Strong stakeholder engagement, workshop facilitation and technical documentation skills. ...

Senior Remote DevOps / Site Reliability Engineer (Solo Operator) Location: Fully Remote (Global / Not UK-Restricted) Job Type: Full-Time, Permanent About the Company We are a London-based SaaS platform helping global enterprise brands onboard, manage, and pay their international freelance workforce. We have recently launched … running on Amazon EKS (eu-west-2) , backed by Aurora MySQL 8 (with a read replica) and ElastiCache Redis , fronted by ALB and CloudFront / WAF. Everything is codified using Terraform and Terragrunt across multiple AWS accounts, shipped via CircleCI into AWS CodePipeline / CodeBuild. Observability runs ...

LLDs), and operational runbooks. Define and enforce vaulting strategies, credential lifecycle governance, session monitoring, and least-privilege policies. Integrate PAM solutions with Active Directory / LDAP, enterprise SIEM tools, and ITSM platforms. Conduct security posture and gap assessments aligned with ISO 27001 and NIST frameworks. … Architect or Senior CyberArk SME role. Deep hands-on build and configuration experience with the CyberArk suite. Proven ability to author defence-grade HLD / LLD architecture documentation. Prior delivery experience within Defence, Aerospace, or high-assurance secure environments is highly desirable. CyberArk certifications (CDE, CDP, Sentry) or CISSP ...

Technical CISO Lead - AI & Cyber Transformation Location: London, UK (30 Fenchurch Street) | Open to Birmingham & Sheffield Work Setup: Hybrid (3 days / week in office) Contract: ~6 Months The Opportunity Are you a security leader who thrives at the intersection of cutting-edge AI and enterprise cybersecurity … frameworks, defining guardrails as capabilities evolve. Lead Transformation: Manage strategic cyber initiatives, governance, dependencies, and milestone delivery. Architect Secure Systems: Design hybrid / cloud architectures aligned with NIST and ISO 27001 . Guide & Engineer: Champion automation across IAM, network, endpoint, and data security. Advise Executives ...

architecture and cloud teams to integrate security throughout the software development lifecycle. Microsoft Azure and KQL experience are essential , alongside relevant experience in CI / CD, Kubernetes, API security, security-as-code and security automation . This is a hands-on application security role focused on secure design, application … security testing and supporting development teams to build secure applications. This is a full-time permanent role predominantly remote / hybrid in London offerings benefits and a salary of £80,000 which can be negotiable for right candidate. Please only apply if you have right to work ...

27001, PCI-DSS, GDPR, NIST, COBIT, TOGAF and ITIL Influence stakeholders, drive governance improvements, communicate with senior leaders Strong IT project coordination / project management experience Broad IT infrastructure knowledge - networks, servers, applications, security, Active Directory etc. IT Audit, Due Diligence & Assurance: Experience assessing technology risk, governance … activities. Stakeholder Consulting & Influence - able to challenge, advise and build credibility with senior stakeholders across the Group. ERP implementation / management experience - particularly SAP or Dynamics - would be beneficial Strong stakeholder management and communication skills Salary: £80,000-£120,000 Benefits: Comprehensive benefits package Work setup: 3 days ...

Risk and Compliance (GRC) function and our Senior Product Security Engineer, who is responsible for security across the software development lifecycle (SDLC) and CI / CD pipeline. You will partner closely with our Engineering, Platform and IT teams and report to the Head of Information Security. Key responsibilitiesCloud … CSPM) or Cloud-Native Application Protection Platform (CNAPP) toolingFamiliarity with financial services regulations and standards, such as the Digital Operational Resilience Act (DORA), ISO 27001 and SOC 2Relevant professional certifications, such as AWS Certified Security – Specialty, GCIH, GCIA or GCFAExperience applying threat intelligence to inform detection ...

Security Operations Vulnerability Management Microsoft Defender and Microsoft security technologies SIEM and security monitoring tools Security governance and cyber resilience Frameworks such as ISO27001, Cyber Essentials or NIST Why Apply? This is an opportunity to take ownership of cyber security within an organisation where you'll have genuine influence, direct ...

encryption and vulnerability management.Experience troubleshooting complex infrastructure and availability issues, with knowledge of incident, change and problem management.DesirableExperience integrating Infrastructure as Code into CI / CD pipelines.Knowledge of cloud cost optimisation and FinOps practices.Understanding of Site Reliability Engineering (SRE) principles and practices.Experience working within ITIL, ISO 27001 ...

technical concepts for non-technical audiences. Experience within the legal sector or a regulated professional services environment would be advantageous. Knowledge of GDPR, ISO 27001 or Cyber Essentials Plus would be beneficial. Familiarity with Agile delivery methodologies and tools would be desirable. IT Application Engineer ...

within regulated environments. In-depth understanding of regulatory expectations, particularly DORA and EBA guidance. Familiarity with risk and control frameworks such as NIST, ISO 27001, and COBIT. Proven ability to produce executive management information and risk reporting. Exceptional communication, stakeholder management, and organisational skills. An evidence ...

within regulated environments. In-depth understanding of regulatory expectations, particularly DORA and EBA guidance. Familiarity with risk and control frameworks such as NIST, ISO 27001, and COBIT. Proven ability to produce executive management information and risk reporting. Exceptional communication, stakeholder management, and organisational skills. An evidence ...

security capabilities, operating models, governance frameworks, and transformation roadmaps. Develop security control frameworks aligned to recognised industry standards and regulatory expectations, including NIST, ISO 27001, CIS, NIS2, DORA, PRA, FCA, and other applicable requirements. Produce high-quality client deliverables including maturity assessments, roadmaps, operating models, business ...

implementation challenges. * Security & Compliance Implement security controls including IAM policies, encryption, network segmentation, monitoring, and threat detection. Ensure compliance with regulatory requirements (e.g., GDPR, ISO27001, PCI DSS) through AWS-native tools and architectural controls * Infrastructure as Code (IaC ) Lead the adoption of IaC using tools like Terraform, CloudFormation, or CDK. ...

DevOps Engineer (AWS) London / WFH to 85k+Do you have expertise with AWS You could be progressing your career in a senior, hands-on DevOps Engineer role at a market leading sports technology company that provide a suite of software products including video analytics, scouting and athletic performance … ownership across infrastructure, automation, reliability and security. You'll design and improve cloud infrastructure using tools such as Terraform and Ansible, build robust CI / CD pipelines and develop monitoring and observability frameworks to ensure performance, scalability and resilience.Collaborating with Engineering, Security and IT teams, you'll embed security ...

cloud solutions incorporating legacy workloads, microservices, containers and integration patterns. Cloud & DevOps Knowledge: Strong understanding of cloud technologies, DevOps principles, CI / CD pipelines and deployment automation. Networking Knowledge: Strong understanding of cloud networking, including virtual networks, routing, DNS, gateways, load balancers and connectivity. Security & Compliance: Understanding … security services, including IAM, WAF and KMS, alongside security best practices and compliance frameworks such as ISO 27001 and PCI DSS. Infrastructure as Code & Automation: Experience evaluating Infrastructure as Code approaches using Terraform, CloudFormation or CDK, alongside an understanding of scripting and automation technologies such ...

available, performant, and operating as designed Support the team to operate enterprise - grade backup, recovery, and data protection solutions, ensuring alignment with RPO / RTO requirements Senior Technical Leadership Act as the recognised NSX-T authority within the Hosting team Own NSX-T design standards, reference architectures, patterns … Essential: Proven experience as a senior infrastructure engineer supporting VMware mission - critical environments Deep, hands-on experience designing, implementing and operating VMware NSX-T / NSX 4.x in production, including Tier-0 and Tier-1 gateways, edge nodes and edge clusters, segments and overlay / VLAN transport zones ...

compliance capabilities through Microsoft Purview Modern SOC enablement leveraging Defender and Sentinel telemetry alongside broader tooling The secure adoption of Microsoft Copilot and AI / LLM-driven capabilities, ensuring appropriate governance, data protection and access controls What you will do Act as the design authority for Microsoft Security architecture … deployment and operationalisation of Microsoft security capabilities at scale, across a complex, hybrid estate Ensure alignment with regulatory requirements such as TSA, DORA and ISO27001 Drive adoption of Secure by Design principles across Microsoft-based platforms and solutions Define and implement security and governance controls for Microsoft Copilot ...

stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group's Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials, PCI-DSS, and data protection obligations Manage relationships with auditors, regulators, cyber insurers, and certification bodies Lead security assessments ...