76 to 100 of 292 ISO/IEC 27001 Jobs in London

vendors on security matters Stay current with emerging threats, vulnerabilities, and industry best practice Essential Skills & Experience 2-4 years' experience in a cyber / information security role Working knowledge of SIEM platforms and security monitoring tools Understanding of network security fundamentals and common attack vectors Familiarity with … communication skills, with the ability to explain technical risk to non-technical stakeholders Desirable Relevant certifications (e.g. CompTIA Security+, CEH, Cyber Essentials Practitioner) Scripting / automation experience (Python, PowerShell) Exposure to incident response or digital forensics What's on Offer Competitive salary + benefits package Hybrid working Structured career ...

Application Risk Assessment & AI Security Identify and assess application risks across Cognism’s SaaS platform, data processing pipelines, including emerging risks associated with AI / ML capabilities. Contribute to AI feature reviews and participate in AI risk assessments to ensure responsible and secure use of models … embed security guardrails into our software development lifecycle and agile engineering workflows. Partner with engineering teams to integrate and optimize security tooling into CI / CD pipelines (SAST, SCA, DAST, container scanning, IaC scanning). Drive automation and developer-friendly security processes that minimize friction and support rapid delivery. ...

Develop and report meaningful security metrics to inform leadership decisions and continuous improvement.**Requirements:*** Several years’ experience in a BISO or senior security leadership / advisory role.* Strong cloud and application security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR / XDR, CSPM, SAST / DAST).* Experience embedding security into CI / CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat modeling, and control gap analysis.* Experience collaborating with SOC and Incident Response teams during security events.* Working knowledge of security frameworks and regulations (NIST ...

model, while providing hands-on technical leadership to engineering teams. Key Responsibilities Own the end to end architecture of the SailPoint platform (IdentityIQ and / or Identity Security Cloud / IdentityNow) across the enterprise Define technical designs, integration patterns and architectural standards for identity governance Lead the design … identity lifecycle processes, including joiner / mover / leaver automation, provisioning and deprovisioning Architect connector integrations with enterprise applications, directories (AD, LDAP, Entra ID), HR systems (Workday, SAP SuccessFactors) and cloud platforms Design role models, RBAC frameworks, access request workflows and certification campaigns Define Segregation of Duties ...

model, while providing hands-on technical leadership to engineering teams. Key Responsibilities Own the end to end architecture of the SailPoint platform (IdentityIQ and / or Identity Security Cloud / IdentityNow) across the enterprise Define technical designs, integration patterns and architectural standards for identity governance Lead the design … identity lifecycle processes, including joiner / mover / leaver automation, provisioning and deprovisioning Architect connector integrations with enterprise applications, directories (AD, LDAP, Entra ID), HR systems (Workday, SAP SuccessFactors) and cloud platforms Design role models, RBAC frameworks, access request workflows and certification campaigns Define Segregation of Duties ...

vulnerabilities and recommending mitigations. Supporting security assurance and governance activities throughout the project lifecycle. Advising clients on security frameworks and regulatory standards including ISO 27001, NIST and GDPR. Producing security documentation, architecture artefacts and risk assessments. Working closely with architects, engineers, delivery teams and senior stakeholders. … following: Cyber Security Consulting or Security Architecture. Security risk management and security assurance. Secure architecture and solution design. Identity & Access Management (IAM / IDAM). Single Sign-On (SSO). Privileged Access Management (PAM). Network Security. Cloud Security. Encryption technologies. Threat modelling. Security frameworks such as ISO ...

good practice. KEY RESPONSIBILITIES Compliance and Risk Management: · Support compliance with applicable regulatory, IT, cyber and control frameworks, which may include DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials. · Support the evaluation and management of IT, cyber, compliance and security risks across systems, processes … Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent experience. · Relevant certifications such as CRISC, CISA, CISM, ISO 27001 or CISSP, or a willingness to undertake similar, are desirable. · Minimum of 5 years' experience in IT governance, risk management, cyber ...

good practice. Key Responsibilities Compliance and Risk Management: Support compliance with applicable regulatory, IT, cyber and control frameworks, which may include DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials. Support the evaluation and management of IT, cyber, compliance and security risks across systems, processes … Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent experience. Relevant certifications such as CRISC, CISA, CISM, ISO 27001 or CISSP, or a willingness to undertake similar, are desirable. Minimum of 5 years’ experience in IT governance, risk management, cyber ...

Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning and tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years … information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security Command Center) CISSP, OSCP, or equivalent certification Nice ...

setting objectives, coaching delivery excellence, and building a high‐performing practice. Systems & integrations: Oversee configuration and integrations between WPS platforms and client / supplier systems (APIs, file exchanges), ensuring data quality, security and performance. Stakeholder engagement: Build trusted relationships with clients, suppliers and internal teams; chair design reviews, readiness … tenders: Review tender packs, shape robust IT responses, and represent IT in client demos and interviews. Governance & risk: Enforce mobilisation standards, provide risk / issue updates, and ensure accurate reporting to programme and senior forums. Continuously improve: Maintain and evolve the IT mobilisation process—playbooks, templates and document libraries ...

DevOps (or similar tools) to deploy Infrastructure As Code into Azure – experience with ARM or Bicep templates and YAML pipelines. Experience of cloud native / serverless components hosted in Microsoft Azure including containerisation and App Service Plans Strong system monitoring tooling experience to identify and troubleshoot problems with performance … ONDmarc Experience working in a regulated industry, e.g. telecoms, financial services, utilities. Experience of Jira & Confluence for work management & documentation Networking experience – LAN / WAN / SDWAN / Azure networking such as routing, firewalls, network peering etc. Microsoft certifications relating to Infrastructure within Azure. Experience of configuration ...

CISO to deliver the Target operating Model and Cyber Security StrategyGovernance, Regulatory & Compliance* Oversee cyber security policies, standards, and control frameworks aligned with ISO 27001, SOC, DORA, NIST, and other related standard and frameworks and financial services best practices* Ensure compliance with global regulatory requirements (e.g. … regulated financial institutions* Proven experience leading cyber advisory, risk, and service delivery functions* Managing a P\L and building a cyber security business practice / service* Deep understanding of financial services regulations, operational resilience, and client assurance* Experience operating in global, multi-entity, and acquisition-driven environments* Strong executive ...

Contribute to the continuous improvement of assurance practices, maintaining awareness of emerging threats, vulnerabilities and industry best practice. Experience & Capabilities Proven experience in cyber / information security risk management and control assurance roles. Strong analytical skills with the ability to evaluate technical, procedural and design evidence. Excellent written … Working: Remote-first with travel as needed. Career Development: Continuous learning and professional growth. Benefits Package: Includes Private Health Care, Cash Back Plan, Buy / Sell Holiday Options, Life Assurance, and more. Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality ...

business grows Embed secure-by-design practices into the development lifecycle — from secure coding and threat modelling to design reviews and CI / CD hardening Monitor systems for irregular behaviour and proactively design detection and prevention mechanisms Ensure infrastructure and applications align with accepted industry standards (e.g. OWASP … Well-Architected Framework ) Conduct and lead risk assessments , including third-party / vendor reviews and internal evaluations Document and maintain security policies, procedures, and controls as part of our ISO 27001-certified ISMS Partner with GTM and leadership to demonstrate our security posture and compliance ...

Head of Cybersecurity, Information Security to implement vulnerability remediation, secure configuration and access controls. Support compliance with relevant frameworks and standards, including ISO 27001, NIST 800‐53, NIST 800‐171, CmmC, Essential Eight and Cyber Essentials Plus. Maintain effective patching, hardening, privileged‐access and configuration‐management … competitive salary and benefits package that includes 27 days holiday per year, pension contributions, private healthcare, discounted dental insurance, enhanced maternity / parental leave, plus a whole host of others including: Cultural stimulation allowance - £250 per person per year Half days off before bank holidays Emergency care days ...

conducting proactive control evaluations, identifying gaps, monitoring remediation progress, and ongoing oversight.* Partner with customer-facing teams to support regulatory reviews, customer audits, RFP / RFQ responses, and compliance due diligence activities.* Promote uniformity and harmonisation of audit procedures and control frameworks across several jurisdictions and operational models.* Serve … meet our global compliance obligations, you will be required to provide the disclosure of relevant personal and background information to government agencies, sovereign nations / tribal regulators, and other applicable gaming regulatory bodies. This is a condition of Aristocrat’s gaming licenses. The specific information required may vary depending ...

conducting proactive control evaluations, identifying gaps, monitoring remediation progress, and ongoing oversight. Partner with customer-facing teams to support regulatory reviews, customer audits, RFP / RFQ responses, and compliance due diligence activities. Promote uniformity and harmonisation of audit procedures and control frameworks across several jurisdictions and operational models. Serve … meet our global compliance obligations, you will be required to provide the disclosure of relevant personal and background information to government agencies, sovereign nations / tribal regulators, and other applicable gaming regulatory bodies. This is a condition of Aristocrat’s gaming licenses. The specific information required may vary depending ...

across cloud, WAF, IAM, and logging, keeping us aligned with best practice and our regulatory obligations Support compliance across UK GDPR, PCI DSS, ISO 27001, NIST CSF, and Cyber Essentials Plus, contributing to risk assessments and implementing technical mitigations Champion security best practice across our engineering … e.g. monthly Light’s Up and annual Shine awards Relaxed dress code and modern office space (games area, chill‐out areas, bookclub, free drinks / snacks) Onsite gym at HQ (including access to free HIIT & stretch classes) Strong learning and development culture and personal growth fund #J-18808-Ljbffr ...

across cloud, WAF, IAM, and logging, keeping us aligned with best practice and our regulatory obligations Support compliance across UK GDPR, PCI DSS, ISO 27001, NIST CSF, and Cyber Essentials Plus, contributing to risk assessments and implementing technical mitigations Champion security best practice across our engineering … monthly Light’s Up and annual Shine awards Relaxed dress code and modern office space (games area, chill‐out areas, book club, free drinks / snacks) Onsite gym at HQ (including access to free HIIT & stretch classes) Strong learning and development culture and personal growth fund #J-18808-Ljbffr ...

feet. Today, we're Europe's leading intelligent kerbside platform, helping cities and drivers optimise operations and transition to net zero by uniting parking / loading maps, occupancy data, and cashless payments. Our impressive client roster includes local authorities such as Edinburgh, Southwark, Lambeth, Haringey, Harrogate, Cambridgeshire, Cornwall, Dorset … infrastructure and contributing to platform migrations and technology upgrades. Designing and supporting cloud-native services hosted within Microsoft Azure. Implementing Infrastructure as Code, CI / CD pipelines and engineering automation to improve reliability and developer productivity. Contributing to AI-powered workflows including document processing, data extraction and intelligent automation. ...

assurance and executive reporting within a complex technology environment. Key Responsibilities Governance & Compliance Maintain Information Security policies, standards and procedures Support compliance with ISO 27001, GDPR, NIS2 and related frameworks Coordinate audit evidence and compliance activities Maintain governance documentation and control frameworks Risk Management Maintain … Disaster Recovery activities About You You'll have previous experience within a Cyber Security Governance, Risk & Compliance function together with knowledge of: ISO 27001 GDPR NIS2 Risk Management Security Policies & Standards Audit & Compliance Supplier Assurance Microsoft 365 Relevant cyber security certifications would be advantageous ...

enterprise, solution or technical architecture within a large or complex organisation. You hold a professional certification or formal training in TOGAF, ITIL or ISO 27001, or you possess equivalent deep technical experience. Navigating complex landscapes is second nature to you, and you have a strong track … ensuring that our recruitment and selection process is inclusive and accessible. Job Info Job Identification 663 Job Category Lead Workers Posting Date 07 / 21 / 2026, 02:13 PM Apply Before 08 / 11 / 2026, 10:55 PM Job Schedule Full time Locations Kensington ...

Operations & Governance Lead to keep the IT environment secure, well-governed, documented, auditable and resilient. You will own governance processes, support ISO 27001 activities, maintain runbooks and architecture records, and ensure projects transition to BAU with clear ownership. The role emphasizes Microsoft 365, Azure governance, risk ...

Information Security Officer (Cloud Security) London, United Kingdom | Posted on 08 / 07 / 2026 Contract Role: Information Security Officer (Cloud Security) Contract Location: London / Belfast (Hybrid) Contract Duration: 6 months initially (with potential extension) Contract Start Date: Immediate Contract Classification: Inside IR35 Daily Rate breakdown … architectural decisions. Provide technical leadership across complex cloud security initiatives. Qualifications Minimum 6 years’ IT experience, including at least 4 years in Cyber Security / Information Security across cloud and on-premises environments. Minimum 2 years securing AWS and / or GCP cloud environments. Experience conducting Information Security ...

experience in process design and improvement, ideally within a cyber security or ICT environment Familiarity with process frameworks such as ITIL, COBIT, or ISO 27001 Understanding of cyber security principles and regulatory requirements (e.g., CAF, NISR, ONR SyAPs) Experience with process mapping tools and techniques (e.g. … stakeholder engagement skills Degree or equivalent in cyber security, business process management, or a related field Relevant certifications (e.g., ITIL, Lean Six Sigma, ISO 27001 Implementer) Desirable: Experience in the nuclear or CNI sector familiarity with CAF maturity assessments and process audit readiness experience with process ...