51 to 75 of 636 ISO/IEC 27001 Jobs in London

This is an excellent opportunity for someone looking to develop their career within Information Security Governance, Risk and Compliance (GRC), with exposure to ISO 27001, risk management, supplier assurance, audits and information security governance within a professional services environment. The RoleAs an Information Security Analyst … reporting and security awareness activities. Key ResponsibilitiesSupport the administration and continual improvement of the firm's Information Security Management System (ISMS).Assist with ISO 27001 certification, surveillance and internal audit activities. Coordinate the collection of audit evidence and support remediation tracking. Support the management and maintenance ...

Databricks. You will work with our managed SOC to investigate alerts, close gaps and provide audit-ready evidence for ISO / IEC 27001:2022 controls. You'll map evidence, support audits, and respond to client security questionnaires while improving detection use cases ...

multi‐cloud, hybrid data center networks at scale while driving network performance &resiliency Deploy and manage cloud constructs such as subnet allocations, routing‐tables / associations, VPCs, VPC‐peering / PrivateLink, Hub‐spoke topologies, gateways, direct connects Develop and maintain IaC (ansible, Terraform) and automation tooling throughout … / CD pipeline (Python, Go) to provision networks at scale, while improving the efficiency and velocity of network deployments Troubleshoot complex production issues and contribute to incident root‐cause analysis Participate in on‐call rotations Implement network solutions meeting regional compliance and data sovereignty requirements (ISO 27001 ...

security. Certification such as Certified Information Systems Security Professional (CISSP) strongly preferred. Deep understanding of cybersecurity principles, frameworks (such as NIST, ISO / IEC 27001), and compliance standards. Experience with financial service regulations and regulations such as FCA, SEC, MAS, DORA. Proficient knowledge … network security principles and controls such as Firewalls, IPS / IPD, TCP / IP, DHCP, and DNS Extensive experience in securing Operating Systems such as Windows, UNIX / Linux and Mac systems. This includes security access rights, implementing configuration best practicesKnowledge of cloud service models (IaaS, PaaS ...

assurance across Microsoft, AWS, and Databricks environments. You will collaborate with our managed SOC, investigate alerts, close monitoring gaps, and ensure ISO / IEC 27001:2022 controls are backed by complete, audit-ready evidence and responses to client security questionnaires. Role involves monitoring ...

vendor, multi-cloud, hybrid data center networks at scale while driving network performance & resiliencyDeploy and manage cloud constructs such as subnet allocations, routing-tables / associations, VPCs, VPC-peering / PrivateLink, Hub-spoke topologies, gateways, direct connectsDevelop and maintain IaC (ansible, Terraform) and automation tooling throughout CI / … network solutions meeting regional compliance and data sovereignty requirements (ISO 27001, Cyber Essentials Plus, UK G-Cloud, EU data residency / GDPR, PCI-DSS)What You Need: Proven track record in driving agile cross-functional projects to completion independently with minimal supervision7+ years expert design ...

multi-cloud, hybrid data center networks at scale while driving network performance & resiliency Deploy and manage cloud constructs such as subnet allocations, routing-tables / associations, VPCs, VPC-peering / PrivateLink, Hub-spoke topologies, gateways, direct connects Develop and maintain IaC (ansible, Terraform) and automation tooling throughout … / CD pipeline (Python, Go) to provision networks at scale, while improving the efficiency and velocity of network deployments Troubleshoot complex production issues and contribute to incident root-cause analysis Participate in on-call rotations Implement network solutions meeting regional compliance and data sovereignty requirements (ISO 27001 ...

career, we’d love to hear from you. Other key info This is a full time, permanent role, UK based, hybrid (2-3 days / week - office / site) aligned to a local Jacobs office, with business travel to support client and business requirements. Full time employment … info re: vetting, here We offer an excellent and wide range of employee benefits including comprehensive Health Cover, Life Assurance, Income Protection, holiday buy / sell scheme, and a variety of wellbeing, family, parental and fertility support offerings, along with an enhanced contribution pension scheme. #LI-SS4 #DigitalUKI More ...

Line Azure Cloud Engineer Location: London (hybrid: typically 2 days on-site; opportunities to work from Croydon / London area and possible moves towards Corsham / Farnborough based on project needs) Duration: 3 month initial + extensions Clearance : SC preffered / eligable candidates UMBRELLA ONLY … with dependable 3rd line support. What you'll be doing: * Build and manage cloud infrastructure in Microsoft Azure (IaaS-first, with exposure to SaaS / PaaS as needed) * Provide 3rd line infrastructure support for cloud and on-premises services and business applications * Support ongoing business projects-configuring and rolling ...

distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling — https: / / enginebystarling.com / careers / engineering / We're looking for a Staff Infrastructure Engineer to help us design, build … including cryptographic key ceremonies Experience designing hybrid connectivity from GCP to co-located Payment HSMs using Network Connectivity Center (NCC), Cloud VPN and Dedicated / Partner Interconnect Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI / CD Experience with observability tooling ...

primarily based across our offices in Kings Cross and Guilford Street, London, with monthly travel to Liverpool. Key responsibilities Maintain compliance with ISO 27001, ISO 9001, ISO 13485 and ISO 15189. Manage UKCA, CE and FDA 510(k) regulatory submissions. … subject. At least three years experience in compliance, QMS or regulatory affairs, ideally within proteomics, IVD or SaMD. An Internal Auditor qualification in ISO 13485, ISO 9001 or ISO 27001. Knowledge of medical device regulations and regulatory approval processes. Experience working with external stakeholders ...

This includes: NCSC NIS Guidance NCSC Cyber Assessment Framework (CAF) ISO 27001 ISO 27005 NERC CIP ISA-99 / IEC 62443 NIST Cybersecurity Framework (NIST CSF) The successful candidate should be comfortable applying security standards and frameworks to real-world … knowledge sharing, coaching and mentoring. Work on projects where cybersecurity has a direct impact on the resilience and security of critical services. Reference: AMC / RHU / OT #ryhu ...

Auditor or Internal Auditor would be highly desirable. Experience carrying out ISO gap assessments, readiness assessments or control reviews. Strong programme management / PMO experience, with the ability to manage actions, risks, dependencies and deliverables. Comfortable working with senior stakeholders in a client-facing environment. Strong communication … European stakeholders or international organisations would be beneficial. Contract: Contract: Initial 4 months Hours: 20 hours per week Location: London - Hybrid Working Industry: Payments / Financial Services Working Pattern: Part-time contract Inside IR35 Robert Half Ltd acts as an employment business for temporary positions and an employment agency ...

Auditor or Internal Auditor would be highly desirable. Experience carrying out ISO gap assessments, readiness assessments or control reviews. Strong programme management / PMO experience, with the ability to manage actions, risks, dependencies and deliverables. Comfortable working with senior stakeholders in a client-facing environment. Strong communication … European stakeholders or international organisations would be beneficial. Contract: Contract: Initial 4 months Hours: 20 hours per week Location: London - Hybrid Working Industry: Payments / Financial Services Working Pattern: Part-time contract Inside IR35 Robert Half Ltd acts as an employment business for temporary positions and an employment agency ...

cutting-edge tools to do their jobs. - Own the security tooling stack and automate security operations. Select, implement, and manage security controls including EDR / MDR, endpoint management, email protection, and identity management. Automate wherever possible: zero-touch deployments, IaC for security tooling, automated provisioning and deprovisioning. - Drive compliance … Experience with compliance frameworks (ISO 27001, SOC 2) Hands-on experience with endpoint management (Kandji, Jamf, or similar) and identity / access management Experience administering Google Workspace or equivalent Interest in Apollo's mission of AI safety NICE TO HAVES Ability to review infrastructure ...

engagements, mentor talented consultants, and play a key role in shaping the growth of an ambitious Cyber Security practice. Role Overview Location: Central London / Hybrid (2 days per week on site) Package: £75,000- £95,000pa & benefits Industry: Cyber Security / Consultancy What You'll Be Doing … working within regulated industries would be highly beneficial. Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer / Auditor are advantageous. Previous experience within a Big Four consultancy would be highly desirable. What's in It for You Competitive salary with performance ...

enterprise‐grade product Experience working directly with large engineering teams on the roadmap, release planning, dependency mapping, and cross‐team sequencing Current programming / scripting experience and a familiarity with DevSecOps practices in order to drive automation without compromising quality or security Strong stakeholder communication skills when translating between … engineering, product, customer‐facing teams, and leadership Exposure to security and compliance frameworks (e.g. SOC 2 / ISO 9001 / ISO 27001) Ideally, you would also have: This is not an additional list of requirements; this reflects the tech stack currently used ...

information security matters to various stakeholders across the organisation. Oversee the day-to-day operation of security systems and tools, including firewalls, intrusion detection / prevention systems (IDS / IPS), antivirus, anti-malware, SIEM (Security Information and Event Management), vulnerability scanners, and data encryption solutions. Manage vulnerability management … maintenance of all IT infrastructure, including cloud environments (e.g., Azure, AWS, GCP), networks, servers, and endpoints. Manage access controls, identity management (e.g., Entra ID / Azure AD), and privileged access management (PAM) systems. Manage access control processes to 3rd party applications, and 3rd party relations. Oversee the patching ...

leadership team and represent security across business and technology workstreams. Manage and direct teams of architects and consultants day‐to‐day. Produce as‐is / to‐be security architecture documentation, risk assessments, and migration artefacts. Identify client opportunities, develop security‐focused points of view, and support account expansion. Understand … enterprise security programme design; and secure SDLC. Working knowledge of at least two cybersecurity frameworks: NIST CSF, NIST SP 800-53, ISO / IEC 27000 series, C2M2, or Cloud Security Alliance CCM. Familiarity with AI platform security, cloud and data security risks, and third‐party ...

stakeholders to ensure controls are practical and aligned to business needs. The role requires extensive experience in tech assurance and governance, knowledge of NIST / COBIT / ISO 27001 / ITIL, and operation within a Three Lines of Defence model; you will design ...

levels of the client organization, generating results that allow our clients to thrive. What You'll Do As a Global Information Security Manager / Global Client Assurance Services Manager within BCG's Client Assurance Services (CAS) team, you will play an important role in supporting BCG's strategic clients … concepts clearly to non-technical audiences. Relevant professional certifications such as CISSP, CISM, CISA, Security+, or ISO 27001 Lead Auditor / Implementer are preferred. Strong communication, organization, and stakeholder management skills, with the ability to collaborate effectively across global and matrixed organizations. Prior experience ...

visit www.hcltech.com Job Title : Senior Vulnerability Management Engineer Location: London, UK ( Hybrid mode at client location ) Experience: 3 – 6 years in vulnerability management / information security ROLE SUMMARY The L2 Senior Vulnerability Management Engineer owns the organisation's end-to-end vulnerability management programme, spanning EUC, Data Center, Network … technology domains (endpoints, servers, network devices, web applications, cloud). Design and maintain scan policies, asset groups, and scanning schedules in Qualys VMDR / Tenable Security Centre / Rapid7 InsightVM to ensure full coverage. Perform risk-based vulnerability prioritisation: correlate CVSS scores with asset criticality, exposure, threat intelligence ...

security governance and risk management frameworksReviewing the effectiveness of security controls and recommending proportionate improvementsAssessing clients against recognised standards and frameworks, including ISO 27001, NIST and similar methodologiesSupporting ISO 27001 implementation, readiness and assurance activitiesDeveloping risk registers, treatment plans, policies, standards … security consultancy, risk management or security assuranceA strong understanding of cyber security governance, risk and compliance principlesPractical experience working with frameworks such as ISO 27001, NIST, Cyber Essentials or similar standardsExperience conducting risk assessments, security assessments or compliance reviewsAn understanding of information security policies, controls, risk ...

teams in London, Singapore, and Australia Define the automation strategy and prioritise cross‐tower automation initiatives for maximum cost and quality impact Establish SLA / KPI frameworks, performance dashboards, and outcome‐based metrics for all towers Lead the offshore migration strategy: define which roles move offshore, governance model … Technical Skills & Expertise Broad and deep technical knowledge across infrastructure, cloud, networking, security, IAM, SRE, and data engineering Expert‐level understanding of IaC, CI / CD, DevSecOps, GitOps, and platform engineering principles Architecture frameworks: TOGAF, cloud‐native architecture patterns, microservices, event‐driven design Cloud platform expertise across AWS, Azure ...

governance and risk management frameworks Reviewing the effectiveness of security controls and recommending proportionate improvements Assessing clients against recognised standards and frameworks, including ISO 27001, NIST and similar methodologies Supporting ISO 27001 implementation, readiness and assurance activities Developing risk registers, treatment plans … risk management or security assurance A strong understanding of cyber security governance, risk and compliance principles Practical experience working with frameworks such as ISO 27001, NIST, Cyber Essentials or similar standards Experience conducting risk assessments, security assessments or compliance reviews An understanding of information security policies ...