26 to 50 of 292 ISO/IEC 27001 Jobs in London

Senior Information Security Analyst - Audit & Compliance ISO27001, SOC2, PCI-DSS, NIST, GDPR London (Barbican). Hybrid. 2 days a week onsite. Up to £100k plus 8% bonus, pension, private medical etc We're working with a global technology partner to find a certified Information Security Analyst. This is a fantastic … SOC2, PCI DSS, Cyber Essentials) Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal / external audits and compliance assessments. Relevant security / audit certifications (CISA, CISM, CISSP, ISO 27001 Lead Auditor, Cyber Essentials Assessor ...

enterprise‐grade product Experience working directly with large engineering teams on the roadmap, release planning, dependency mapping, and cross‐team sequencing Current programming / scripting experience and a familiarity with DevSecOps practices in order to drive automation without compromising quality or security Strong stakeholder communication skills when translating between … engineering, product, customer‐facing teams, and leadership Exposure to security and compliance frameworks (e.g. SOC 2 / ISO 9001 / ISO 27001) Ideally, you would also have: This is not an additional list of requirements; this reflects the tech stack currently used ...

Support Assistant / AV Specialist / Unified Communications Analyst A fantastic opportunity has arisen for a AV Support Assistant / AV Specialist / Unified Communications Analyst to join our London based global law firm on permanent basis. AV Support Assistant / AV Specialist / … PowerPoint, and Excel - Knowledge of Remote Access systems and focusing on supporting remotely - Understanding of ITIL (v2 or v3), understanding of ISMS / ISO27001 would be desirable. AV Support Assistant / AV Specialist / Unified Communications Analyst In accordance with the Employment Agencies and Employment Businesses Regulations ...

cyber security systems, solutions and services considerations and enable smooth handovers.Develop and maintain governance and compliance documentation, ensuring adherence to standards such as ISO 27001, NIST, GDPR, NIS2, and UK regulations.Act as a trusted advisor, sharing best practices and emerging technologies, and maintaining up-to-date … environment, for everyone.Your skills and experienceStrong knowledge of cyber security principles and compliance frameworks (ISO 27001, NIST, GDPR, NIS2, ISA / IEC 62443).Experience in solution design for complex IT / security projects, including bid management and cost modelling ...

from gap analysis through audit and maintenance; familiar with GDPR, PCI DSS, and the EU AI Act. Deep experience running Vanta (or Drata / Secureframe) as a continuous compliance backbone, not a point-in-time checklist. Technically hands-on: comfortable scripting against AWS APIs to automate evidence collection, with … translate fluently between compliance and technical teams. Ideal, but not required Experience with customer trust programs (Trust Center, FAQs, security whitepapers). DORA / EU AI Act / fintech regulatory exposure. Has shipped engineering-led automation (not just dashboards). Familiarity with NIST CSF, CIS Controls, or GDPR ...

term roadmap: Endpoint & identity security engineering - contributing to the CrowdStrike AU→UK CID migration (Intune-deployed, scripted), Entra ID configuration for the new EU / UK tenant, and Intune / MDM policy build-out. Network security delivery - hands-on work on Netskope deployment for SaaS / web steering, Tailscale ACL and zero-trust access design, and FortiGate / UniFi security configuration for the Winnersh Triangle site. Site security build - working the physical / technical security side of the Winnersh Triangle stand-up: access control (Paxton), CCTV, structured cabling security, vendor delivery oversight ...

with one or more GRC technology platforms (OneTrust, ServiceNow GRC, Archer, MetricStream, or similar). Familiarity with widely used GRC frameworks and standards (ISO 27001, ISO 27701, SOC 2, NIST CSF, COSO, or similar). Working knowledge of GDPR … Consulting experience, whether at a professional services firm, a Big Four, or a privacy or risk specialist firm. A recognised credential such as CIPP / E, CIPM, CRISC, CISA, ISO 27001 Lead Auditor or Implementer, or equivalent. A relevant degree in a field such ...

teams in London, Singapore, and Australia Define the automation strategy and prioritise cross‐tower automation initiatives for maximum cost and quality impact Establish SLA / KPI frameworks, performance dashboards, and outcome‐based metrics for all towers Lead the offshore migration strategy: define which roles move offshore, governance model … Technical Skills & Expertise Broad and deep technical knowledge across infrastructure, cloud, networking, security, IAM, SRE, and data engineering Expert‐level understanding of IaC, CI / CD, DevSecOps, GitOps, and platform engineering principles Architecture frameworks: TOGAF, cloud‐native architecture patterns, microservices, event‐driven design Cloud platform expertise across AWS, Azure ...

M365 Security Consultant ( M365 security, Defender, Sentinel and Microsoft security stack.) As an M365 Consultant / Senior Consultant, you will help transform clients’ cybersecurity posture by designing and implementing advanced Microsoft Threat Protection technologies. You will work directly with clients in a consulting capacity, supporting medium to large enterprise … environments and contributing to robust Cyber Defence strategies across endpoints, identities, cloud, and collaboration platforms. Key Responsibilities Design and implement AV / EDR solutions (e.g., Microsoft Defender for Endpoint) to detect and respond to cyber threats across major operating systems. Protect email, messaging, and collaboration platforms from phishing, spear ...

financial services regulation, including FCA expectations for systems and controls, operational resilience, outsourcing, third-party risk, incident reporting, UK GDPR and client asset / data protection considerations Technology & Cloud Security: Broad knowledge of Microsoft security platforms, Azure security, endpoint protection, network security, email security, secure configuration, logging, monitoring … Lead Auditor, or equivalent Experience working with external auditors, penetration testers, MSSPs, cyber insurers, regulators, clients or supplier assurance teams would be beneficial Skills / Other relevant information Practical cyber leader who can move between executive discussion, technical detail and operational delivery without losing the thread Clear communicator ...

that turn every review into an opportunity to move faster next time. Compliance across frameworks relevant to our customers and jurisdictions: SOC 2, ISO 27001, ISO 42001, EU AI Act, UK Cyber Essentials, and GDPR, including evidence collection and audit coordination. Trust documentation: security … rather than heroically firefighting every request. Bonus: Experience supporting financial services customers on security, risk, and compliance topics. Exposure to cloud security concepts (GCP / AWS, Kubernetes, IAM). Experience building and implementing trust automation or questionnaire management platforms. Relevant certifications (CISA, CRISC, CISM, CISSP, ISO 27001 ...

advanced threat detection programmes Own the vulnerability management programme Implement enterprise frameworks including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI / ML for predictive security, and set the technology vision Lead the Security Incident Response Programme Governance, risk, and compliance (GRC) Define … programme, including the ISMS, policy framework, risk registers, and audit readiness Implement and maintain compliance with ISO 27001, SOC 1, SOC 2, NIST CSF, GDPR, and relevant financial services regulations Understand the GRC landscape, implement appropriate controls, and adapt as the threat and regulatory environment shifts ...

high-performing. In this senior role, you’ll lead DevOps, observability, and compliance. Tasks include architecting cloud infrastructure for growth, prepping for SOC 2 / ISO 27001 audits, and setting up CI / CD pipelines for all services. You’ll also manage logging, metrics … knowledge. Networking concepts (VPCs, DNS, load balancers, VPNs, firewalls). Database management (PostgreSQL, MySQL, NoSQL) and storage. Python or Bash skills. SOC 2, ISO 27001, or GDPR exposure. Report directly to the founders with a chance to shape their future. Got what it takes? Apply ...

optimized for both performance and cost. Key Responsibilities Architect, implement, and maintain cloud infrastructure to support rapid product growth. Prepare infrastructure for SOC 2 / ISO 27001 audits, aligning with customer expectations. Build and maintain CI / CD pipelines for backend, frontend, and data … Automation : Strong skills in Python or Bash for automation and tooling. Experience 4–7 years of relevant experience, ideally including startup or high‐growth / high‐load environments . Proven track record of owning infrastructure end‐to‐end — from architecture through production support. Experience implementing reliability, security, and compliance ...

will maintain and administer key security platforms, support client-facing security assurance activities, and help strengthen the company's security posture ahead of ISO 27001 certification. Responsibilities: * Implement, manage and actively monitor security controls across email, web, endpoint and cloud environments. * Monitor and respond to security … governance, DLP and compliance tooling are essential for success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and / or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would ...

advisory guidance on how Group standards interact with local legal and regulatory requirements. Knowledge & Skills Familiarity with the security technology estate – including Microsoft E5 / Defender suite, Zscaler, Qualys, Abnormal Security, Claroty, and Axonius – sufficient to provide informed advisory guidance on standards compliance and configuration questions without requiring specialist … platform engineering support for routine queries. Understanding of OT / ICS security considerations relevant to food and beverage manufacturing, distribution, and supply‐chain environments. Knowledge of firewall policy review tooling (e.g. Tufin, AlgoSec, FireMon) and structured approaches to rule base analysis and optimisation. Strong written communication skills; able ...

security assurance while taking ownership of key security initiatives. You'll play a central role in maintaining Cyber Essentials Plus certification, supporting ISO 27001, improving security processes, and helping embed a strong security culture across the business. What you'll be doing … management and maintenance of Cyber Essentials Plus certification. Support ISO 27001 implementation, audits and continual improvement activities. Coordinate security evidence, documentation and compliance activities. Maintain security policies, standards and procedures. Manage security questionnaires, supplier due diligence and audit requests. Track security risks, remediation actions and compliance ...

compliance and secure our scaling global operations. Acting as the authoritative voice on internal information security, you will lead the evolution of our ISO 27001:2022 management system and serve as an essential partner to our business operations. This high-impact, individual contributor position is designed … ambitious professional looking to own our governance roadmap and influence senior stakeholders. What you'll be doing: Owning and continuously improving our ISO 27001:2022 Information Security Management System (ISMS) to ensure robust compliance. Designing and executing comprehensive internal audit schedules to verify adherence to security ...

risk assessments, and advisory outputs. - Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials. Required Skills: - Experience within cyber security consulting, security auditing, or risk advisory roles. - Experience … delivering client-facing cyber risk advisory services. - Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR. - Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. - Experience ...

sales cycle.* Engage with CISOs, security architects, and IT leaders to discuss cybersecurity strategy, industry trends and modern security architectures.* Produce high-quality RFP / RFI responses, security questionnaires and technical documentation.* Collaborate with Product Management and Engineering to ensure successful solution design, implementation and customer success.* Build trusted … occasional evenings or weekends when required.**Required Qualifications*** 5+ years' experience in technical pre-sales or solution engineering across cybersecurity, networking, Cloud or SASE / SSE.* Strong knowledge of SASE, SSE, Zero Trust, SD-WAN, NGFW, NAC, ZTNA, CASB, SWG, DLP and cloud security.* Solid understanding of networking technologies ...

need as an Operational Technology (OT) Cyber Security Consultant 25 years' experience within Operational Technology or Industrial Cyber Security. Experience with OT / ICS environments including SCADA, DCS, PLCs or RTUs . Understanding of Industrial IoT (IIoT) and industrial communications. Knowledge of OT cyber risk, security architecture and monitoring. … Experience within energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum ...

need as an Operational Technology (OT) Cyber Security Consultant 610 years' experience within Operational Technology or Industrial Cyber Security. Strong experience securing OT / ICS environments including SCADA, DCS, PLCs, RTUs and industrial communications . Expertise across Industrial IoT (IIoT), OT cyber risk, security architecture and security monitoring . … projects across energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within ...

first operations to ensure our customers, employees and partners can confidently rely on Geordie as we scale. With SOC 2 Type II and ISO 27001 already in place, your mission is to build an effective AI-native security programme that keeps certifications healthy as a byproduct … enabling rapid development safely. Drive vulnerability management, penetration testing, and remediation across the product. Act as the stakeholder for product security requirements for authn / authz, tenant isolation, and privileged access Immerse yourself in the agent security domain our customers are focused on: prompt injection, agent supply chain ...

with HR, IT, and engineering systems to ensure policy-driven access throughout the user lifecycle. Oversee Conditional Access deployment, risk-based authentication, and device / state signals. Guide the operation and hardening of multi-site Active Directory domains / forests and cloud identity components (Entra / Azure … contract of employment. Qualifications Bachelor’s degree in Computer Science, Information Technology, or related field; equivalent experience considered. Approx. 7–10 years in IAM / identity engineering / architecture within large or enterprise environments; 3+ years leading complex IAM design initiatives. Prior global / large-scale enterprise ...

stakeholdersExperience working in PCI DSS compliance, IT security assurance, audit, GRC, orrisk managementPCI Professional (PCIP) (highly desirable)ISO 27001 foundation / lead implementer / lead auditorCISM, CISSP, CRISC, or similar (beneficial, not always required)SelfridgesSalaryCompetitive plus benefitsAnnuallyJob Referenceselfridges / TP / 278495 / 6839Contract TypePermanentClosing Date31 July, 2026Job CategoryITLocationLondon, United Kingdom16 July, 2026 #J-18808-Ljbffr ...