326 to 350 of 637 ISO/IEC 27001 Jobs in London

either when the business needs it. Our Tech Stack: Google Workspace (we're a Google-first environment); identity via Okta, Entra ID and / or JumpCloud, including Okta Workflows; endpoint security / EDR tooling; FreshService (or similar) for service management; automation and integration via n8n, Zapier, Workato … years in IT operations or IT leadership, including 3+ years as the most senior IT person in a business or leading multiple IT teams / functions at once Proven experience owning IT strategy and service delivery in a scaling organisation with a fully in-house team, including managing ...

experience using major Identity Providers and configuring SSO, SAML and related technologies Experience with the major cloud computing providers such as AWS, Azure, and / or GCP Experience designing and implementing secure network infrastructure using devices such as next generation firewalls and VPNs Strong proficiency in managing and supporting … Windows, Apple and / or Linux systems in a corporate environment Sound understanding of software development lifecycles and modern development practices Excellent communication skills, with the ability to collaborate effectively with technical teams Ideally, you would also have: This is not an additional list of requirements; this reflects ...

Risk, IT Audit or a related discipline.• Practical knowledge of information security controls, cyber risk, data protection and technology risk frameworks such as ISO 27001 or NIST.• Experience operating within a regulated environment, ideally Financial Services.• A solid understanding of risk management, governance and control frameworks ...

Entra ID, conditional access, multifactor authentication and just-in-time access models. Establishing privileged-access standards and providing evidence for client audits, including ISO 27001 and Cyber Essentials Plus. Deploying, configuring and maintaining EDR, SIEM integrations, vulnerability-scanning and email-security solutions. Supporting Zscaler ...

similar technologies. Knowledge of cloud security principles across Azure and ideally AWS or Google Cloud. Familiarity with industry frameworks such as NIST and ISO 27001.Personal AttributesWe are particularly interested in individuals who demonstrate: Calmness under pressureStrong ownership and accountabilityExcellent communication and stakeholder management skillsCommercial awareness alongside technical depthGravitas ...

team you'll be working with: Position Title: Senior Security Analyst - Third-Party Security Assurance (TPSA) – P2 / 3Location: United Kingdom / RemoteEmployment Type: Full-Time, PermanentReporting To: Head of Information Security We are seeking an experienced security and risk professional to join the Third-Party Security Assurance … TPRM, security risk, or GRC- Proven ability to independently deliver third-party assessments end-to-end- Strong understanding of regulatory frameworks (GDPR, ISO 27001, IS0 42001 etc.)- Regular interaction with stakeholders (but limited strategiec ownership)Who we are: At NTT DATA, you have endless opportunities ...

Assurance. Experience conducting security architecture reviews and risk assessments. Experience within regulated environments. Experience with cloud security, identity services and security controls. Knowledge of ISO27001, NIST CSF, Cyber Essentials and security governance frameworks. Experience implementing secure-by-design and SSDLC practices. Experience with cloud security architecture within Azure and SaaS … regulatory assurance activities. Experience assessing technology risks in financial services environments. Qualifications: Minimum of one below is required: CISSP CCSP TOGAF Azure Security Engineer ISO27001 Lead Implementer or Lead Auditor Problem Solving and Judgment Customer Focus Planning and Reviewing Performance Focus Communication and Confidence About Us Life, Work and Benefits ...

level of growth and are leaders in their industry. Responsible for managing externally appointed auditors and for the maintenance of a variety of ISO standards. Responsible for the adherence to and continued certification of the following standards: ISO 9001 Quality Management System ISO 27001 … provide appropriate commercial solutions. Monitor industry, regulatory and corporate developments in order to identify areas of vulnerability and risk. Develop and implement corrective / preventative action plans for the resolution of compliance issues and provide guidance and coaching on how to avoid future incidents. Communicate the compliance programme ...

processes, and technology roadmaps. Required Experience Strong experience within Information Security, Cyber Security, Risk Management, or Security Architecture. Hands-on knowledge of AWS and / or Google Cloud Platform (GCP) security architectures. Experience securing cloud services including networking, compute, storage, IAM, and infrastructure services. Strong understanding of cloud security … frameworks and best practices. Knowledge of security and compliance frameworks such as NIST, ISO 27001, and CSA STAR . Experience conducting security risk assessments and managing remediation activities. Strong stakeholder management and communication skills. Ability to explain complex security concepts to both technical and non-technical ...

processes, and technology roadmaps. Required Experience Strong experience within Information Security, Cyber Security, Risk Management, or Security Architecture. Hands-on knowledge of AWS and / or Google Cloud Platform (GCP) security architectures. Experience securing cloud services including networking, compute, storage, IAM, and infrastructure services. Strong understanding of cloud security … frameworks and best practices. Knowledge of security and compliance frameworks such as NIST, ISO 27001, and CSA STAR . Experience conducting security risk assessments and managing remediation activities. Strong stakeholder management and communication skills. Ability to explain complex security concepts to both technical and non-technical ...

from a single-person operation into a regionally structured team as Nscale's EMEA footprint grows. The role governs the accountability, cadence, and commercial / relationship dimension of vendor management; deep technical facility engineering (M&E design, thermal / cooling engineering, technical audit execution) is provided by Nscale … party DC vendor across EMEA, acting as primary escalation point for vendor performance, site-level disputes, and contractual issues. Establish, track, and enforce SLAs / OLAs covering power availability, environmental tolerances, security, and remote-hands responsiveness — working with Procurement / Legal to ensure contracts specify measurable, enforceable terms. ...

Bonus Onsite WORKING Location: Central London, Greater London - United Kingdom Type: Permanent Chief Security Architect Location: UK - Hybrid / Remote Salary: Up to £110,000 + senior consultancy / leadership package Clearance: Active DV clearance essential Sector: Defence, Government, National Security & Critical National Infrastructure The Opportunity … looking for an exceptional Chief Security Architect / NCSC Head Consultant to take senior technical ownership of Security Architecture across a high-assurance cyber security consultancy. This is a senior, client-facing architecture role where you will act as a technical authority for security architecture , leading complex engagements across ...

triage, threat detection, incident response, business email compromise, suspicious user activity and vulnerability management. Hands-on experience with modern security operations tooling, including SIEM / XDR, endpoint protection, cloud security, email security, data loss prevention, information protection, behavioural analytics and vulnerability management platformsGood understanding of identity, access and cloud … audit trails. Awareness of common attack techniques and frameworks, including MITRE ATT&CK, and relevant security, privacy and assurance frameworks such as ISO 27001, NIST CSF, Cyber Essentials and GDPR.Ability to manage security findings through to remediation, including prioritisation, risk acceptance, progress tracking and clear incident ...

will work closely with our engineering teams, embedding security and operational excellence into every layer of our platform — from Kubernetes workloads to CI / CD pipelines and cloud identity management. Key Responsibilities Infrastructure & Platform Experience with workstation management, including proficiency in related tools such as Microsoft Intune, Microsoft Defender … code using Terraform Implement GitOps workflows using ArgoCD for Kubernetes deployments Create and maintain Helm charts for Kubernetes deployments Build and maintain CI / CD pipelines using GitHub and modern pipeline tooling Implement Dagger-based pipelines and workflow orchestration (e.g., Argo Workflows) Support engineering teams with secure, reliable ...

configure and operate Databricks workspaces, clusters, SQL warehouses and pools across our cloud environment Implement and maintain Unity Catalog: catalogs, schemas, external locations, row / column-level security, lineage and audit Build reusable Terraform modules for Databricks and automate platform changes through CI / CD pipelines Tune Spark … Delta and Photon workloads to improve performance and reduce DBU and cloud spend Manage identity, SSO / SCIM, service principals, secret scopes and network isolation to meet security and compliance needs Operate Databricks Workflows, Delta Live Tables and orchestration integrations used by Data Scientists and Data Support MLflow, model ...

design. Familiarity with one or more of the following domains: Cloud security (Azure, AWS, GCP) Network security Identity and Access Management (IAM) Application security / DevSecOps Infrastructure and platform security Continuous Threat Exposure Management Ability to analyse technical risks and communicate recommendations to both technical and non-technical stakeholders. … certifications such as CISSP, CISM, CCSP, SABSA, TOGAF, Security+, or equivalent. Knowledge of financial services regulations and frameworks, including PRA, FCA, DORA, NIS2, ISO 27001, and NIST. Understanding of emerging technologies such as quantum, agentic progression Understanding of operational resilience, technology resilience, and risk management practices. ...

within Security Architecture, Cyber Security or a closely related technical security role. Experience working within government or highly regulated environments. Good knowledge of ISO 27001, NIST CSF and CIS Controls. Experience with Azure security services, identity management and cloud-native security controls. Exposure to threat modelling ...

security platforms and data sources. Understanding of vulnerability management and security remediation processes. Familiarity with security frameworks and standards such as NIST and ISO 27001. Good understanding of Active Directory, Entra ID or similar enterprise identity environments. Ability to translate technical security issues into clear risks and actions. ...

proven track record of delivering consultancy services in customer-facing roles, demonstrating professionalism and expertise. Displays a strong understanding of technical compliance frameworks, including ISO27001, Cyber Essentials, NIS2, and DORA. Maintains a security-focused mindset and keeps abreast of current market trends and developments in the field. Demonstrates knowledge ...

Operations & Compliance Manager, ensuring significant operational and compliance risks are identified, appropriately managed and escalated. Provide senior challenge and guidance on corporate risk, ISO management systems, organisation-wide information security and data protection compliance, client compliance and accreditation, drawing on external or specialist expertise where required. Provide oversight … development, government contracting or another regulated environment. Experience working with geographically dispersed or international workforces. Direct experience of information security, data protection or ISO management frameworks (e.g. ISO 27001, Cyber Essentials). Experience with reward, benchmarking and organisational design. Experience supporting organisational restructuring, growth ...

identity, endpoint security, cloud security, and governance & risk, with the ability to translate technical concepts into business-friendly language. Certification in PMP, PRINCE2, Agile / Scrum, CISSP, CISM, or similar, along with familiarity with global security frameworks (ISO 27001, NIST CSF, SOC2). Excellent communication ...

control assessment, validating outputs and handling data according to sensitivity and security requirements. Drives reuse-first adoption of AI-assisted security validation within SDLC / toolchain routines, improving control testing, remediation quality, and traceability / auditability in line with resiliency expectations. Required Qualifications, Capabilities, and Skills: Hands … align to security, resiliency, and auditability expectations. Preferred Qualifications, Capabilities, and Skills: Advanced proficiency in Infrastructure as Code and Security-as-Code, including CI / CD security linting and policy enforcement. Relevant certifications: AWS Certified Security – Specialty, GCP Professional Cloud Security Engineer. Experience operating in regulated organizations with ...

control assessment, validating outputs and handling data according to sensitivity and security requirements. Drives reuse-first adoption of AI-assisted security validation within SDLC / toolchain routines, improving control testing, remediation quality, and traceability / auditability in line with resiliency expectations. Required Qualifications, Capabilities, and Skills Hands … align to security, resiliency, and auditability expectations. Preferred Qualifications, Capabilities, and Skills Advanced proficiency in Infrastructure as Code and Security-as-Code, including CI / CD security linting and policy enforcement. Relevant certifications: AWS Certified Security - Specialty, GCP Professional Cloud Security Engineer. Experience operating in regulated organizations with ...

Experience: Extensive experience engaging with stakeholders at all levels, including senior leadership and C-suite executives. Proven experience operating within client-facing and / or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security … Days) Statutory & Contributory Pension EAP with Help@Hand Gym Membership Benefits Cycle to Work and Electric Vehicle schemes Flexible Working Annual Away Days / Company Socials Diversity and Inclusion As an equal opportunities employer, we are committed to creating a work environment that supports, celebrates, encourages and respects ...

design and implementation of new technologies, working within an Azure and Office 365 environment, as well as IT security, cyber security, ISO 27001, and business continuity planning. You will also be responsible … Director for ensuring data security, regulatory compliance, and staff training in relevant areas, making sure the business remains compliant with GDPR and financial / insurance regulations, including KYC / AML, and Consumer Duty. To be successful in this IT Director role, you will need to have previous experience ...