51 to 75 of 292 ISO/IEC 27001 Jobs in London

Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting – CCNP Level, Expert Level Preferred High Availability and Disaster Recovery – CCNP Level, Expert Level Preferred Security / Cyber Security Skills Required Cisco Firepower Firewalls (ASA, FTD) – CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer … SIEM use cases for key controls etc. Risk Management in Cyber Security, SSL Blind spots, what causes them and how to mitigate Malware / Ransomware and how to mitigate along with Penetration testing concepts Understanding of White / Black / Grey Box penetration testing. Developing Security policies ...

Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security / Cyber Security Skills Required Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer … SIEM use cases for key controls etc Risk Management in Cyber Security, SSL Blind spots, what causes them and how to mitigate Malware / Ransomware and how to mitigate along with Penetration testing concepts Understanding of White / Black / Grey Box penetration testing. Developing Security policies ...

trusted boardroom advisor to mid-market clients across cyber security, risk, and resilience. Core Frameworks: Lead client assessments and certifications across Cyber Essentials / CE+, ISO 27001, and UK GDPR . Innovation: Build next-generation AI Governance and operational resilience (BC / DR) frameworks. … Strong practical knowledge of Cyber Essentials, UK GDPR, and ISO 27001. Exceptional executive presence—confident presenting risk and strategies to C-suite / board levels. Commercial acumen to partner with sales teams and expand client adoption. Desirable: CISSP, CISM, CRISC, or ISO 27001 ...

mature cyber security controls within this area, and own the implementation of these plans going forward.**Skills and Experience Specification:****Essential:*** Experience in cyber / information security risk roles with a focus on third-party / vendor risk management.* Bachelor’s degree in information security, Technology Risk Management … related field.* Relevant professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer / Lead Auditor.* Experience in regulated industries, implementing relevant regulations and expectations for third-party security risk management.* Proven experience designing, running, and improving vendor security due diligence processes.* Strong knowledge ...

Security Advisory & Client Solutions Associate Manager / Manager (Microsoft Security) The Security Advisory & Client Solutions Manager is a senior, client-facing cyber security professional responsible for leading security advisory engagements, shaping strategic security opportunities, and driving growth across Microsoft-first clients. The role combines deep security consulting experience with … delivery teams to convert opportunities into successful security engagements. The role requires a strong understanding of Microsoft's security ecosystem, including Microsoft 365 E3 / E5 / E7, Entra ID, Defender, Sentinel, Purview, Copilot and emerging technologies such as Agent 365. While primarily advisory and client-focused ...

make informed decisions while supporting commercial success. You'll drive the day‐to‐day operation and continuous improvement of our compliance programs, including ISO 27001, SOC 2, TISAX, and emerging regulatory requirements. You'll serve as the subject matter expert during audits and ensure our control … information security governance, GRC, or technology risk within a SaaS or cloud environment. You've been the subject matter expert in SOC 2 and / or ISO 27001 audits — not just supporting them, but working directly on controls and partnering with auditors. Experience with additional ...

cloud environments and production‐grade infrastructure Lead security initiatives including vulnerability management, threat modelling, penetration testing, and incident response planning Build and evolve CI / CD pipelines, release management processes, and deployment automation Establish observability, monitoring, logging, alerting, and operational runbooks Manage secrets, key custody, access controls, and infrastructure … development through to secure production deployment Strong background in cloud infrastructure, automation, and operational security Experience supporting or leading SOC 2 Type II and / or ISO 27001 programmes Strong documentation and communication skills with the ability to create clear technical and compliance‐focused artefacts ...

GDPR and related data protection frameworks Strong regulatory interpretation and analytical skills Excellent written and verbal communication, especially for reporting Ability to translate legal / regulatory language into technical and operational requirements Strong organizational and stakeholder management skills Proactive mindset with high attention to detail Might haves: Professional certifications … such as: CISM, CISSP, CRISC, CISA ISO 27001 Lead Implementer / Auditor Experience working with regulators or in regulated industries (e.g., telecom, financial services, critical infrastructure) Familiarity with compliance tools (e.g., ServiceNow GRC, Archer, MetricStream) Experience with control frameworks such as ISO 27001 ...

engagements, mentor talented consultants, and play a key role in shaping the growth of an ambitious Cyber Security practice. Role Overview Location: Central London / Hybrid (2 days per week on site) Package: £75,000- £95,000pa & benefits Industry: Cyber Security / Consultancy What You'll Be Doing … working within regulated industries would be highly beneficial. Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer / Auditor are advantageous. Previous experience within a Big Four consultancy would be highly desirable. What's in It for You Competitive salary with performance ...

Define ownership models for SAP roles, business processes, mitigating controls, and approval authorities. Govern access management across Wella's SAP ecosystem including ECC, S / 4HANA, SAP BTP, Datasphere, SAC, Ariba, SuccessFactors, Concur, Emarsys, and future SAP platforms. 2. Segregation of Duties (SoD) & Risk Management Own and maintain … management of privileged and emergency access, including Firefighter access controls and reviews. 3. Audit, Compliance & Controls Own SAP access-related controls supporting SOX, GDPR, ISO27001 and other regulatory requirements. Act as the primary point of contact for internal and external auditors. Lead remediation of audit findings and compliance gaps. Establish ...

focus on building high-impact detection capabilities , shaping how security protects sensitive genomic and AI-driven data at scale. This role offers hybrid / remote working options, a salary range of £60,000 - £80,000 and benefits. Why This Role is Exciting High autonomy : Lead projects from idea … O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable / Nice-to-Have: Experience with Python , Terraform , or CI / CD pipelines Familiarity with Microsoft Purview, Entra ID, DLP, or Insider Risk tools ...

focus on building high-impact detection capabilities , shaping how security protects sensitive genomic and AI-driven data at scale. This role offers hybrid / remote working options, a salary range of £60,000 - £80,000 and benefits. Why This Role is Exciting High autonomy : Lead projects from idea … O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable / Nice-to-Have: Experience with Python , Terraform , or CI / CD pipelines Familiarity with Microsoft Purview, Entra ID, DLP, or Insider Risk tools ...

will ideally have: Experience developing or managing cyber security policies, standards, or governance frameworks. Strong knowledge of recognised cyber security frameworks such as ISO 27001, NIST, or the Cyber Assessment Framework (CAF). Experience supporting compliance, risk management, or information assurance programmes. Excellent stakeholder management … cyber resilience requirements within critical national infrastructure environments. Professional certifications such as CISSP, CISM, or ISO 27001 Lead Implementer / Auditor. What's on Offer Opportunity to influence cyber strategy within a nationally significant organisation. Exposure to complex cyber security and governance challenges. Collaborative ...

Services and Security, the role will act as Nxera’s cybersecurity lead, working closely with internal IT teams, business stakeholders and specialist external partners / vendors. The successful candidate will combine strategic cyber risk leadership with practical technical judgement across Microsoft 365, Microsoft Entra ID, Azure, identity, endpoint, cloud … standards such as NIST CSF, ISO 27001, Cyber Essentials Plus or equivalent. Relevant professional certifications such as CISSP, CISM, CCSP, ISO27001 Lead Implementer / Lead Auditor or equivalent. Conversational Japanese would be advantageous. Personal attributes Strategic and pragmatic, with the ability to balance risk management ...

Title: SC Cleared Field Solutions Engineer Location: Hybrid / London / Bristol as and when required Duration: 6 months with possible extension Rate: Up to £650 per day Outside IR35 Must be willing and eligible to go through the SC Clearance process If you enjoy combining hands … bring: Strong networking and IT infrastructure understanding, with a focus on secure communications and encryption Real-world, hands-on experience with Linux plus scripting / programming (bash and Python) Solid grasp of PKI-what it provides, along with benefits and drawbacks Experience translating client requirements into practical technical solutions ...

Manage the cyber security risk framework and risk register. Lead security governance, assurance and reporting. Support audits and certifications, including Cyber Essentials and ISO 27001. Lead and coordinate responses to cyber security incidents. Oversee security controls and third-party cyber risk. Drive cyber security awareness and organisational security … Security Manager or similar role. Strong cyber governance, risk and assurance experience. Knowledge of ISO 27001, NIST, CIS Controls and / or Cyber Essentials. Experience with security audits, certifications and incident response. Experience working within a complex, multi-site organisation. Strong stakeholder management and communication ...

Digital Identity and Trust Frameworks. Familiarity with standards and frameworks such as: ISO 27001 NIST Cyber Security Framework Cyber Essentials / Cyber Essentials Plus Supplier and Third-Party Assurance frameworks Experience supporting digital identity, authentication or secure digital services programmes. Security-related certifications such … CISSP, CISM, CRISC, ISO 27001 Lead Auditor or equivalent. Key Competencies Security Assurance Governance, Risk & Compliance (GRC) Third-Party Risk Management Security Assessments Risk Analysis Stakeholder Management Information Security Audit & Compliance Trust Framework Compliance Security Governance This is an excellent opportunity for a Security Assurance professional ...

pharmaceutical, biotech, medical device, and market research agencies to deliver trusted, compliant, and decision-ready insights at speed and scale. M3 MR holds ISO 20252, ISO 27001, and ISO 27701 certifications, reflecting the group’s commitment to data quality, respondent integrity, information … Benefits 25 days annual leave Participation in a company bonus scheme linked to personal and company performance Group Life Cover 4x salary Pension 4% / 4% employee / employer contributions Vitality after probation Staff discount scheme Discounted gym membership #LI-LC1 #LI-Remote #J-18808-Ljbffr ...

manage multiple priorities effectively. Desirable Experience within banking, financial services, or another regulated environment. Familiarity with industry standards and frameworks such as ISO 27001, NIST, COBIT, or CIS Controls. Exposure to vulnerability management, penetration testing, incident management, or third-party risk assessments. Relevant security certifications such … Security+, ISO 27001, CISM, CRISC, CISSP, or equivalent. Personal Attributes Proactive and eager to learn. Strong attention to detail and a methodical approach to problem-solving. Able to work independently while collaborating effectively with wider teams. Comfortable operating within a regulated and governance-driven environment. Flexible ...

Senior Network Engineer – Cloud, Security & Infrastructure Location: London (Hybrid) Employment Type: Permanent / Fixed-Term Contract Start Date: ASAP Build, Secure and Transform Enterprise Networks We're seeking a highly skilled Senior Network Engineer to join a growing technology team responsible for designing, securing, and optimizing enterprise and cloud … What We're Looking For: Minimum of 8+ years' experience in Network Engineering, Cloud Networking, and Network Security. Strong expertise across: Cisco Networking & Routing / Switching Palo Alto, Check Point, Cisco ASA, and ForeScout F5 Load Balancing Infoblox DNS / DHCP / IPAM AWS, Azure, and / ...

Role Description Senior Network Engineer – Cloud, Security & Infrastructure Location: London (Hybrid) Employment Type: Permanent / Fixed-Term Contract Start Date: ASAP Build, Secure and Transform Enterprise Networks What You'll Be Doing: Network & Cloud Infrastructure Design, implement, and support enterprise and cloud networking solutions across AWS, Azure, and GCP. … What We're Looking For: Minimum of 8+ years experience in Network Engineering, Cloud Networking, and Network Security. Strong expertise across Cisco networking, routing / switching, F5 load balancing, Infoblox DNS / DHCP / IPAM, and cloud networking in AWS, Azure, and / or GCP. Hands ...

opportunity for someone who enjoys balancing strategic security governance with technical delivery, while also supporting key networking initiatives. This is a 90% Information Security / 10% Network Engineering role, making it ideal for someone whose passion is cyber security but who is comfortable maintaining and supporting enterprise network infrastructure … firewalls and routing technologies. Contribute to disaster recovery planning, network resilience and high availability initiatives. Skills required: Enterprise firewall technologies including Cisco Firepower (ASA / FTD) and Palo Alto. Cisco networking technologies including Catalyst switching, Layer 2 / 3, OSPF and VPNs. Network security controls including Cisco ...

team of security engineers (currently 3) Act as the senior escalation point for security incidents and decision‐making Work across a modern Microsoft / Azure environment, driving improvements in M365 security and identity Influence how security is delivered across our sites, combining internal and client‐facing services … impact. What You’ll Be Doing Security Leadership & Programme Ownership Define and execute the enterprise‐wide security strategy Own capabilities across PAM, SIEM, EDR / XDR, DLP, vulnerability management, identity governance Translate regulatory obligations ( FCA , PRA , ISO 27001 , Lloyd’s ) into practical, measurable controls Hands ...

surfaces, especially for AI-powered features. Own SAST, SCA, DAST, container, and IaC scanning pipelines, using Snyk as the primary platform. Integrate with CI / CD, manage policies, and focus on developer experience and false-positive reduction. Triage and manage vulnerabilities end-to-end: classification, SLAs, fix validation … zero-trust-aligned designs. Guide secure API and microservice patterns, including input validation, rate limiting, secure session handling, and token-based security (OAuth 2.0 / OIDC). Review designs for cloud-native services and edge components, ensuring sensible security trade-offs aligned to product goals. Advise on the security ...

Microsoft security tools (Sentinel, Defender, Entra) Familiarity with frameworks such as ISO 27001, NIST, Cyber Essentials Experience assessing third-party / vendor risk Excellent stakeholder management and communication skills Ability to translate security requirements into practical business outcomes What You'll Be Doing … primary contact for the outsourced SOC and coordinate security alerts, incidents, and remediation. Support governance, risk, and compliance activities, including ISO 27001, Cyber Essentials Plus, NIST, and CIS. Develop and maintain security policies, risk assessments, and compliance documentation. Lead third-party risk management, including vendor assessments ...