151 to 175 of 636 ISO/IEC 27001 Jobs in London

Secret Manager, including cryptographic key ceremonies Experience designing hybrid connectivity from GCP to co-located Payment HSMs using NCC, Cloud VPN and Dedicated / Partner Interconnect Experience with Workload Identity and Workload Identity Federation for keyless workload and CI / CD authentication Experience with observability tooling including Cloud … Monitoring, Cloud Logging, Cloud Trace, Managed Service for Prometheus, OpenTelemetry and Grafana Experience setting up Google Workspace / Google Cloud Identity Experience with automation using Python or Go Experience implementing CI / CD pipelines Understanding of RESTful API and event-driven concepts Comfortable writing RFCs and ADRs through ...

full-stack experience Strong product instincts — you think about the why as much as the how Frontend excellence: React, TypeScript Backend proficiency: Node.js / NestJS or Python / FastAPI Solid understanding of distributed systems patterns and when to apply them Experience working alongside design functions and translating designs … visible in how clinicians work every day. Our stack GCP · GKE · Terraform · GitOps & ArgoCD · PostgreSQL + Redis · TypeScript across the stack (React, NestJS) · Python / FastAPI for ML workloads · Pub / Sub for events · Self-hosted ML models What we offer 28 days holiday + bank holidays Latest ...

Platform Architecture & Engineering responsibilities: Design and implement scalable Databricks Lakehouse platforms on AWS and / or Azure aligned to client requirements Architect end-to-end data platforms including ingestion, storage (Delta Lake), processing, and consumption layers Build and configure cloud infrastructure using infrastructure-as-code (e.g. Terraform & Declarative Automation … Bundles(DAB's)) Establish secure, compliant environments including networking (VNet / VPC, Private Link), identity (IAM / Entra ID), data governance (Unity Catalog), and access controls Define environment strategies (dev / test / prod), CI / CD pipelines, and release processes for Databricks deployments Implement ...

Information Security Management System (ISMS). Conduct security risk assessments and maintain risk registers. Assist with internal and external audits, including ISO 27001, Cyber Essentials, and client assurance reviews. Ensure security policies, standards, and procedures are reviewed and updated. AI Security & Governance Support the secure adoption … controls and reducing risk. WHAT YOU'LL BRING: Strong experience in a cyber security, information security, or security operations role. Good understanding of: ISO 27001 NIST Cyber Security Framework Cyber Essentials Plus Risk Management Methodologies Experience investigating security incidents. Knowledge of Microsoft 365 security technologies. Understanding ...

Information Security Management System (ISMS). Conduct security risk assessments and maintain risk registers. Assist with internal and external audits, including ISO 27001, Cyber Essentials, and client assurance reviews. Ensure security policies, standards, and procedures are reviewed and updated. AI Security & Governance Support the secure adoption … controls and reducing risk. WHAT YOU'LL BRING: Strong experience in a cyber security, information security, or security operations role. Good understanding of: ISO 27001 NIST Cyber Security Framework Cyber Essentials Plus Risk Management Methodologies Experience investigating security incidents. Knowledge of Microsoft 365 security technologies. Understanding ...

NCSC’s Cyber Assessment Framework (CAF) and the Network and Information Systems (NIS) landscape. Extensive experience conducting or supporting Information Security audits , including ISO 27001 certification audits. Strong technical knowledge of domestic and international Information Security standards and associated processes, with expert knowledge in relevant specialist … regulators, industry and technical communities. Proficiency in Microsoft Office and an openness to learning and adopting new programmes, tools and methodologies. Relevant academic and / or professional experience. ISO 27001 Lead Implementer and CISSP qualifications. SC Clearance , or willingness to attain SC Clearance following ...

perspective, to identify and mitigate security risks. Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify / evidence appropriate compliance and security KPIs. Be a trusted advisor to senior clients on security topics. Conduct risk assessments and assurance reviews to validate … preferably in the Health, Central Government or Public Safety domains. Minimum of 5 years' security consulting experience in a multi-tiered IT enterprise environment / Governance, Risk and Compliance roleMinimum of 5 years' experience in a Governance, Risk and Compliance roleA track record of delivering security solutions for large ...

Training & Awareness deliverables, performing risk assessments, tracking of security risks of the Information Security Office and organisation as well as maintaining and managing the ISO27001 certification and ensuring there is appropriate governance & reporting on outputs and risk posture to stakeholder groups. Primary Responsibilities Execute the UK and EU GRC Strategy … compromises that meet multiple, sometimes conflicting, stakeholder needs. Ability to work independently and influence cross-functional teams. Required Qualifications Bachelors level degree Desirable Qualifications ISO27001 Lead Implementer or Lead Auditor Certified Information Systems Audtior (CISA) - ISACA Certified Information Security Manager (CISM) - ISACA CompTIA Security+ ITIL, COBIT or similar governance frameworks ...

Training & Awareness deliverables, performing risk assessments, tracking of security risks of the Information Security Office and organisation as well as maintaining and managing the ISO27001 certification and ensuring there is appropriate governance & reporting on outputs and risk posture to stakeholder groups. Primary Responsibilities Execute the UK and EU GRC Strategy … compromises that meet multiple, sometimes conflicting, stakeholder needs. Ability to work independently and influence cross-functional teams. Required qualifications Bachelors level degree Desirable qualifications ISO27001 Lead Implementer or Lead Auditor Certified Information Systems Audtior (CISA) - ISACA Certified Information Security Manager (CISM) - ISACA CompTIA Security+ ITIL, COBIT or similar governance frameworks ...

Cyber Security Consultant Location: City of London (hybrid, 1 / 2 days per-week on-site) Salary: £65-70k On behalf of our client, a multidisciplinary advisory firm that is currently growing their Cybersecurity offering, Talentedge Technology is seeking an experienced Operational Technology (OT) Cyber Security Consultant … documentation Support internal capability growth through the development of OT security frameworks, methodologies, and training materials Skills & Experience Around 5 years’ experience in OT / ICS cyber security, C&I engineering, or a closely related discipline, with a focus on security risk management Strong understanding of industrial control system ...

remediation processes. Use testing outcomes, lessons learned and emerging threats to improve security controls and testing methodologies. Essential Experience Significant experience in penetration testing / offensive security, with the ability to lead complex testing engagements. Strong hands-on understanding of penetration testing across applications, infrastructure and technology environments. Proven … understanding of security risk assessment, vulnerability prioritisation and risk acceptance. Knowledge of recognised penetration testing methodologies and security frameworks. Desirable Experience Relevant penetration testing / offensive security certifications such as CREST, OSCP, OSWE, GPEN or equivalent. Experience operating within large, complex or highly regulated organisations. Experience across cloud environments ...

novel Agentic AI workflows. Drive the end-to-end delivery of security projects by working hand-in-hand with engineers, navigating the complex Alphabet / Google Ecosystem, and ensuring high-quality execution. Educate and advocate for InfoSec across the business, acting as a "product manager" regarding InfoSec's capabilities … have: Domain expertise in highly regulated, data-intensive industries (Life Sciences, Pharma, Deep Tech).Hands-on experience navigating GCP and the internal Alphabet / Google ecosystem (on-corp)Engineering background with hands-on skill regarding Cloud Architecture, Zero Trust, IAM, and security observability. Familiarity with InfoSec and AI Management ...

Azure, AWS, and Oracle Cloud. Apply Service-Oriented Architecture (SOA) and Domain-Driven Design (DDD) principles. Design event-driven systems using Kafka and Pub / Sub. Lead API design, integration strategies, and legacy modernization to microservices. Contribute to Disaster Recovery planning and platform resilience. Implement Identity and Access Management … cataloging, and lineage. Ensure compliance with ISO 27001, GDPR, PCI DSS, and other security standards. Embed DevSecOps principles into CI / CD pipelines and platform delivery. Produce High-Level and Low-Level Designs (HLD / LLD) and Solution Architecture Documents (SAD). Competitive Salary ...

bring the wider team along with you. Key Responsibilities Strategy & Governance Lead cyber security strategy and governance, aligning policy with best practice (e.g., ISO 27001, GDPR) Document and maintain security processes and IT policies, supporting business continuity and audit requirements Security Operations Maintain and enforce … infrastructure oversight Knowledge of security frameworks and regulatory requirements (ISO 27001, Cyber Essentials, GDPR) Hands-on technical capability across endpoint / device management, identity and access management, and SaaS security controls Strong stakeholder management, with the ability to train, influence and embed governance processes Desirable ...

will partner closely with Engineering, Platform, Cloud Infrastructure, and Security teams to shape secure coding practices, application security tooling, vulnerability remediation, and CI / CD security, ensuring security is embedded into how we design, build, deploy, and operate our products. This is an exciting opportunity for someone who wants … code-review tools. Champion SDLC to promote secure application development and infrastructure deployment and facilitate secure coding remediation activities. Automate security testing in CI / CD pipelines to detect vulnerabilities early, including building and maintaining the pipeline integrations themselves. Administer and drive adoption of GitHub Advanced Security (GHAS) : code ...

aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director / Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time Salary: £50,000 – £70,000 (dependent on experience and sponsorship thresholds) Key Responsibilities … testing and application security assessments (OWASP Top 10). Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA, NIST CSF, COBIT, SANS, and related frameworks. Develop security policies, SOPs, and governance documentation. Conduct ...

guidance for Cyber Assessment Framework and DSPT toolkit. Develop, communicate and implement the security architecture framework (based on ISO 27001 / 27002 and NIST 800-53). Embed Rackspace’s information security policies, standards and procedures into IT services methodologies. Proactively work with the Rackspace … requirements within the Rackspace information security governance framework. Design and integrate security baseline standards for security devices within the technology environment (IDS / IPS, firewalls, VPN, operating systems, BYOD, etc.). Advise in the development of the security product strategy and roadmaps for the various internal and customer facing ...

secrets, autoscaling, workload troubleshooting and cluster reliability Strong cloud operations experience across AWS, Azure or GCP Hands-on experience with Infrastructure as Code, CI / CD, GitOps or similar automation approaches Experience reducing operational toil through automation, workflow redesign, self-service capabilities, standardised runbooks and improved observability Understanding … technical leadership within engineering teams. Highest-signal resume keywords SaaS Operations Leadership Kubernetes Operations Cloud Operations (AWS, Azure, GCP) Infrastructure as Code (CI / CD, GitOps) Agentic AI and Intelligent Automation Hard Skills Kubernetes Management Cloud Operations Infrastructure as Code CI / CD GitOps Automation Observability Incident Management ...

Microsoft Purview Security Consultant - Purview, Security, Location: London / Hybrid Working Salary: £45,000 - £52,000 (Depending on Experience) + Benefits + potential bonus ________________________________________ About the Company Our client is a forward-thinking and entrepreneurial cloud consultancy that partners with major organisations across the UK. They help businesses maximise … solutions. * Willingness to travel to client sites as required. * Microsoft Security, Compliance or Azure certifications. * Experience with Microsoft Defender technologies. * Understanding of GDPR, ISO 27001 and other compliance frameworks. * Knowledge of Zero Trust security principles. * Experience delivering Microsoft 365 transformation or migration projects. Pre-Sales Experience ...

Cyber Security Architect & Engineering Lead Hybrid / Remote: Just 1 day per month in the London office Leading UK Professional Services Firm Ready to take the technical lead on security? We're working with a leading UK professional services firm that is making a significant investment in its internal … Plus and NIST CSF The ability to communicate technical security risk clearly to senior stakeholders Experience within professional services, financial services or another regulated / client-confidential environment would be particularly useful. One of the most interesting parts of this role is the firm's investment in AI. ...

product innovation and business objectives. Nice to HaveExperience securing AI-enabled products, platforms or digital services. Familiarity with recognised security frameworks such as ISO 27001, ISO 42001, SOC2, NIST AI RMF or OWASP AI Top 10.Experience working with cloud environments including Azure ...

Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning and tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years … information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security Command Center) CISSP, OSCP, or equivalent certification Nice ...

commit to this. The Information Security Officer is a senior level professional position responsible for driving efforts to prevent, monitor and respond to information / data breaches and cyber-attacks. The overall purpose of this role is to ensure the execution of Information Security (IS) directives and activities … risk frameworks (NIST, ISO 27001, CSA STAR) Experience in business engagement for Information Security, Risk or Control & Compliance, IT Analysis / Design or Program / Project Management. Perform Information Security risk assessments and familiarity with Information Security Risk Governance. At least 2 years' experience ...

deliver the Target operating Model and Cyber Security Strategy Governance, Regulatory & Compliance Oversee cyber security policies, standards, and control frameworks aligned with ISO 27001, SOC, DORA, NIST, and other related standard and frameworks and financial services best practices Ensure compliance with global regulatory requirements (e.g., GDPR … regulated financial institutions Proven experience leading cyber advisory, risk, and service delivery functions Managing a P\L and building a cyber security business practice / service Deep understanding of financial services regulations, operational resilience, and client assurance Experience operating in global, multi-entity, and acquisition-driven environments Strong executive ...

providing operational leadership alongside the COCO Review security reports from our IT provider and act on issues with urgency, escalating appropriately Own the ISO audit process for CF, ensuring we continue to meet the requirements of ISO 27001 and other relevant standards, that … permissions Demonstrable, hands-on ownership of information security Experience of owning or leading an information security or quality accreditation process, such as ISO 27001, including preparing for and running audits Ability to build automation and integrations, using scripting, workflow or low-code tools and APIs ...