276 to 300 of 640 ISO/IEC 27001 Jobs in London

languages: Python, Go, YAML, JSON, etc. Experience with policy as code (e.g., Open Policy Agent and Rego). Git and version control workflows. CI / CD tools: GitHub Actions, GitLab, etc. Container platforms: Docker, Kubernetes. Infrastructure‐as‐code: Terraform, Ansible, Pulumi, CloudFormation. Cloud platforms: AWS, Azure, GCP. A background … market strategies. Excellent written and verbal communication skills, with the ability to translate complex technical topics to both technical and non‐technical stakeholders. AWS / Azure / GCP certifications, CISSP, CISM, or other security certifications are a plus. Perks & Benefits Competitive salary. Generous equity plan. Remote‐first working ...

diversity and inclusion - it’s a place where you can grow, belong and thrive. Your day at NTT DATA The GRC Consultant (Cyber Assurance / Security Operations Manager) is primarily responsible for ensuring the security controls (people, process, technology) are in place and operating as designed. The primary … quantify and lead risk mitigation plans Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify / evidence appropriate compliance and security KPIs Work closely with 1st, 2nd and 3rd lines of defence on all matters relating to cyber security, information assurance ...

breaches (i.e. major incidents, material audit findings)Provide clear, data-driven risk and impact assessments to product owners in business-led risk forums / committees.4. Regulatory, Audit & External EngagementOwn first-line response to audit and regulatory reviews, including: Issue ownership and remediation tracking. Evidence provision and assurance qualityProvide technology … regulators and executive stakeholders. Cloud and third-party risk oversight. Qualifications & Certifications (preferred)CRISC, CISM, CISSP, ISO 27001 Lead Auditor / Implementer, ITIL Expert. Degree in Computer Science / Engineering or equivalent experience. Skills & AttributesCombines deep risk expertise with engineering credibility. Strong decision-making ...

Security Operations, Data Protection, or SOC environments. Strong hands-on experience with Microsoft Purview DLP. Experience managing security incidents and ticketing platforms (ServiceNow / JIRA / Remedy). Understanding of Data Classification, Information Protection, and Compliance concepts. Basic knowledge of PKI, digital certificates, encryption, and key management. Good … Preferred Skills Exposure to Microsoft Information Protection (MIP), Insider Risk Management, or Defender for Cloud Apps. Knowledge of GDPR, UK Data Protection Act, ISO 27001, or similar compliance frameworks. Microsoft SC-400 or related security certifications are desirable. Ideal Candidate A security operations professional with strong ...

Role: Security Architect - Contract Location: UK Wide / Hybrid Rate: Competitive Day Rate Contract Length: Initial 6 Months (Extensions Likely) Why Join This Security Architect Contract? We're partnering with one of the world's largest global security services providers, supporting enterprise clients across a wide range of industries. … Cyber Security Consulting Strong understanding of security governance, risk and compliance frameworks Experience designing and reviewing secure cloud architectures Knowledge of AWS, Azure and / or GCP security services Experience conducting threat modelling and risk assessments Strong stakeholder engagement and communication skills Experience working with enterprise security technologies ...

data platforms. We move quickly and ship often and our infrastructure has to keep up without breaking things. We're looking for a Platform / DevOps Lead: a hands‐on engineer who codes their infrastructure, automates the manual stuff, and sets the standard for shipping trusted changes. … production and a safe, repeatable promotion path between them. This is the headline gap and your first big win. Build and harden CI / CD. GitHub Actions with OIDC, matrix container builds to ECR, plan‐on‐pull‐request with deliberate applies, and multi‐environment staging production promotion. Make deploys ...

breaches (i.e. major incidents, material audit findings)* Provide clear, data-driven risk and impact assessments to product owners in business-led risk forums / committees. 4. Regulatory, Audit & External Engagement* Own first-line response to audit and regulatory reviews, including: + Issue ownership and remediation tracking. + Evidence provision … regulators and executive stakeholders.* Cloud and third-party risk oversight. **Qualifications & Certifications (preferred)*** CRISC, CISM, CISSP, ISO 27001 Lead Auditor / Implementer, ITIL Expert.* Degree in Computer Science / Engineering or equivalent experience. **Skills & Attributes*** Combines deep risk expertise with engineering credibility.* Strong decision ...

reflecting how our employees are at the very heart of what we do: UK & Ireland's premier AWS, Microsoft & Oracle partner 3300+ strong, 350 / 300m revenue business 10+ years as a Great Place to Work in Ireland & UK Best Workplace for Women in the UK & Ireland by GPTW … successful outcomes and take clear ownership of the security design decisions that got there. Cloud and application security; experience securing workloads on AWS and / or Azure, including network segmentation, IAM, encryption, secrets management, and security monitoring. You understand AppSec practices including secure SDLC, SAST / DAST tooling ...

degree in Electrical Engineering, Computer Engineering, Computer Science, or equivalent practical experience. 5+ years of experience building connected embedded products, or strong relevant industry / project experience. Good proficiency in C / C++ for embedded systems, with experience working with RTOS environments such as Zephyr or FreeRTOS. Experience … with Python for testing, tooling, or automation. Solid understanding of device connectivity and networking fundamentals, including IP networking and common transport / application protocols. Experience implementing or supporting secure device communications using TLS, certificates, or device provisioning workflows. Familiarity with firmware update systems, bootloaders, or CI / ...

position focused on SAP Identity Access Governance, SAP Security and Identity & Access Management, covering the implementation and configuration of SAP IAG across S / 4HANA, ECC and cloud environments. The SAP IAG IAM Consultant will work across access governance, SAP authorisations, Segregation of Duties, role management, user provisioning … including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM) and Role Design & Provisioning (RDP).Support SAP IAG deployments across S / 4HANA, ECC and cloud applications. Perform Segregation of Duties (SoD) analysis, identifying access risks and compliance violations. Configure and maintain risk rulesets and mitigation ...

Security Architect Location: UK (Hybrid / Remote as required) Security Clearance: Active SC Clearance Required Contract Length: 6-18 Months Rate: £545-£590 per day (Inside IR35) About the Role We are seeking an experienced Security Architect to join a specialist consultancy supporting the delivery of critical government projects … Security Technologies Microsoft Defender Suite Splunk Microsoft Sentinel CrowdStrike Prisma Cloud Wiz Lacework Tenable Qualys Infrastructure & DevOps Kubernetes Docker Terraform GitHub GitLab Jenkins CI / CD Security Tooling Scripting & Automation Python PowerShell Bash Preferred Certifications CISSP (Certified Information Systems Security Professional) CCSP (Certified Cloud Security Professional) SABSA TOGAF Microsoft ...

degree in Electrical Engineering, Computer Engineering, Computer Science or equivalent practical experience2+ years of experience building connected embedded products, or strong relevant industry / project experienceGood proficiency in C / C++ for embedded systems, with experience of RTOS environments such as Zephyr or FreeRTOSExperience with Python for testing … tooling or automationSolid understanding of device connectivity and networking fundamentals, including IP networking and common transport / application protocolsExperience implementing or supporting secure device communications using TLS, certificates or device provisioning workflowsFamiliarity with firmware update systems, bootloaders or CI / CD workflows for embedded softwarePractical debugging experience using ...

Partner with Trading, Middle Office and Quant (Institutional FinOps) teams to map out inventory trading systems, data flows, third‐party integrations and custody / settlement touchpoints. Conduct deep‐dive assessments mapping critical assets and workflows to identify structural vulnerabilities. You will be responsible for defining the Target State … maintain monitoring for FinOps‐specific security signals such as abnormal order patterns, signature misuse, unusual settlements. You will integrate these signals into our SIEM / SOAR for real‐time response. Support secrets and key‐management hygiene. You will ensure app / service keys are stored in KMS / ...

successful doing what they love. Your Team You’ll join SumUp’s Global Internal Audit team , part of our wider G&A / GRC function , reporting directly to the Global Head of Internal Audit . This team plays a critical role in protecting SumUp’s integrity, supporting regulatory compliance … hands‐on IT auditor who enjoys combining technical depth with clear communication and stakeholder collaboration. Must‐have experience: Minimum 4 years’ experience in IT / Internal Audit within a regulated financial services environment Strong knowledge of audit standards, risk management, and internal controls Experience auditing IT controls and frameworks ...

focus on impact, helping our customers, colleagues, and communities succeed. About the role Sitting in our 2nd Line Function, the Information Security Officer (ISO) plays a pivotal role in helping the bank achieve its growth ambitions in a complaint and secure manner. Working with the Chief Risk Officer … drafting Board and committee papers. Experience of third-party security due diligence and supplier risk assessments Relevant certifications such as CISSP, CISM, CRISC, CIPP / E or ISO 27001 Lead Auditor (desirable). At Recognise Bank , we're building more than a bank ...

WILL DOPartner with Trading, Middle Office and Quant (Institutional FinOps) teams to map out inventory trading systems, data flows, third-party integrations and custody / settlement touchpoints. Conduct deep-dive assessments mapping critical assets and workflows to identify structural vulnerabilities. You will be responsible for defining the Target State … maintain monitoring for FinOps-specific security signals such as abnormal order patterns, signature misuse, unusual settlements. You will integrate these signals into our SIEM / SOAR for real-time response. Support secrets and key-management hygiene. You will ensure app / service keys are stored in KMS / ...

least once per week. Job requirements Strong experience in modern C#, TypeScript, HTML and CSS Strong cloud platform experience, ideally AWS Strong CI / CD experience Strong experience of using infrastructure as code (e.g., CDK, Terraform) Experience developing serverless applications (e.g., Lambda) A strong focus on architecture and code … understanding of security principles and secure coding including OWASP Top 10 Nice to haves: Experience in VOIP (SIP and RTP advantageous) Experience of TDD / BDD / DDD Knowledge of PCI compliance and associated standards such as ISO 27001 Knowledge of accessibility standards ...

assessing and managing IT services, cyber, data, and AI-related risks within complex, global organizations. Knowledge of enterprise risk management frameworks (COSO ERM, ISO 31000), security frameworks (NIST CSF, ISO 27001), AI risk frameworks (NIST AI RMF), and key risk indicators (KRIs). Excellent … Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories ...

Cyber Security GRC Consultant (DV Cleared) Location: Remote / Hybrid - on-site presence as required Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within … culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD / Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce ...

coach users through change, and drive adoption, retention, and expansion across firms and legal teams. You’ll be a trusted advisor to partners, PSLs / knowledge teams, innovation leaders, and fee-earners - and a key internal “Voice of the Customer” to Product, Engineering, Sales, and Marketing. This role … performance). Partner with Marketing on practice-area-specific collateral and thought leadership content that speaks to lawyers (not technologists). Conduct light market / competitor research to inform positioning and sales strategy. Reinforce Orbital’s market presence through activities such as publications, webinars / CPD sessions ...

often hiring for similar roles which your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting / service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry … Skilled in crafting compelling proposals and other business development materials. Proficient in cultivating opportunities within the client base and network. Holds Cyber Security accreditations / qualifications such as [CISSP, CSSLP, CISM], indicating a solid foundation in the field. You thrive in problem‐solving and analytical thinking You enjoy collaborating ...

office at least two days a week. Qualifications Skills, experience and qualifications Proven track record of successfully leading and delivering cyber security programmes and / or large-scale security transformation initiatives Strong understanding of cyber security principles, frameworks, technologies, governance and risk management practices Experience developing and managing programme … teams and suppliers Relevant cyber security qualifications or certifications such as CISSP, CISM, CRISC, CCSP, SABSA, ISO 27001 Lead Implementer / Auditor, SANS, GIAC certifications or equivalent Up-to-date knowledge of emerging technologies, threat landscapes, security regulations and industry best practices Holistic understanding ...

secure coding standards across technologies including Java, C and C++. Embed security throughout the Software Development Lifecycle (SDLC). Design and support secure CI / CD pipeline patterns. Integrate SAST, DAST, SCA and security tooling into development workflows. Support automation of security controls and assurance activities. Security Leadership & Developer … application security principles and secure coding practices. Experience working with SAST, DAST and Software Composition Analysis (SCA) tools. Experience integrating security controls into CI / CD pipelines. Strong understanding of OWASP Top 10 and common vulnerability classes. Experience with API and web application security. Knowledge of threat modelling techniques ...

providing technical input across a range of cybersecurity engagements. Location – London, Manchester or Scotland Key Responsibilities Support the design of enterprise and IT / OT converged security architectures, including secure network segmentation and access models. Help to produce HLD and LLD artefacts, dataflows and threat models for enterprise … / OT converged environments. Contribute to cloud security architecture designs, including secure landing zones, identity integration, connectivity patterns and secrets management. Analyse systems and networks and propose segmentation, secure access methodology and reference designs that engineering teams can implement. Enhance governance and compliance by aligning solutions and controls ...

identify root causes, lessons learned, and recommend measures for prevention or improvement. Conduct periodic threat simulation activities to evaluate the adequacy of deployed detective / preventative controls. About you Proficiency in incident response tooling, including SIEM, EDR, cloud security, threat intelligence and forensic analysis platforms. Demonstrable experience leading … make effective decisions under pressure whilst managing multiple incidents, priorities and stakeholders simultaneously. Experience working with cloud security technologies and environments, particularly Azure and / or AWS. Experience building, tuning and improving security monitoring, detection engineering and threat detection capabilities. Strong stakeholder management and communication skills, with the ability ...