76 to 100 of 636 ISO/IEC 27001 Jobs in London

Year (EMEA)One of the Best Workplaces for Women in the UK & Ireland (2023) With 3,700+ people and revenues exceeding 347m / 302m, Version 1 is a market leader in Oracle, Microsoft, and AWS consulting services – and one of the fastest-growing digital consultancies in Europe. Job DescriptionWe … build, testing, deployment and defect resolution activities. The role also includes exposure to Oracle Fusion extensions and workflow tooling. VBCS, Oracle Process Automation (OPA) / Process Cloud Service (PCS) experience is desirable at junior level. The successful candidate should be willing and able to learn these areas quickly ...

with: Business Continuity Management (BCM) Disaster Recovery Planning Operational Resilience Risk Management Frameworks Internal Audit Activities Control Assessments Process Improvement Programmes Familiarity with: ISO 27001 ISO 22301 NIST Cybersecurity Framework Cyber Assessment Framework (CAF) ITIL Governance, Risk and Compliance (GRC) tools Preferred Certifications … following certifications would be advantageous but are not essential: ISO 27001 Lead Auditor or Lead Implementer CISSP (Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CRISC (Certified in Risk and Information Systems Control) ISO 22301 Business Continuity Certifications CIA (Certified Internal Auditor ...

continued development of its security capability. This is a broad leadership position covering everything from the outsourced SOC and incident response through to ISO 27001, Cyber Essentials Plus, cloud security, supplier assurance and the secure adoption of AI. What’s on offer: • Hybrid working, 3 days … continuous improvement • Strong experience managing outsourced SOC and specialist security providers • Excellent understanding of incident response, threat detection, vulnerability management and remediation • Strong Microsoft / Azure, cloud, infrastructure and SaaS security knowledge • Experience providing security assurance across technology projects and architecture • Understanding of UK GDPR, data protection and regulatory ...

designed, operational and scalable, particularly for SOC 2 Type 2 and ISO 27001.Maintain a centralised, audit-ready evidence repository and coordinate internal / external audits, client reviews and due diligence. Oversee remediation plans and ensure continuous evidence collection. Develop consistent, lightweight playbooks for vendor intake, audit readiness … deliver risk and compliance training, including competency testing where appropriate. Support global data protection compliance (GDPR, CCPA and equivalents) as a data processor / service provider. Own vendor and third-party risk management, ensuring proportionate due diligence of suppliers, clients and acquisition targets. Reporting & Stakeholder LeadershipDeliver executive reporting ...

first platform leader, defining the entire cloud strategy and building the team from scratch. You'll own the architecture, scale their Azure / AKS environment, and implement the security and compliance measures (SOC 2, ISO 27001, GDPR) that enable a product handling sensitive financial data. … full mandate, significant resources, and no inherited legacy. The work Define and drive the end-to-end cloud strategy, architecting and scaling the Azure / AKS environment for demanding financial-services deployments. Build and lead the platform engineering team from the ground up, setting the technical bar and culture. ...

Reference: SBM / AR / 070319Job Type: PermanentSalary: 60,000 - 80,000Location: Westminster, Central LondonSector: ITPosted: 2026-05-08Join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. We're looking for a Threat Detection Engineer … focus on building high-impact detection capabilities, shaping how security protects sensitive genomic and AI-driven data at scale. This role offers hybrid / remote working options, a salary range of 60,000 - 80,000 and benefits. Why This Role is ExcitingHigh autonomy: Lead projects from idea to deploymentInnovation ...

high-performing. In this senior role, you’ll lead DevOps, observability, and compliance. Tasks include architecting cloud infrastructure for growth, prepping for SOC 2 / ISO 27001 audits, and setting up CI / CD pipelines for all services. You’ll also manage logging, metrics … knowledge. Networking concepts (VPCs, DNS, load balancers, VPNs, firewalls). Database management (PostgreSQL, MySQL, NoSQL) and storage. Python or Bash skills. SOC 2, ISO 27001, or GDPR exposure. Report directly to the founders with a chance to shape their future. Got what it takes? Apply ...

Security Architect & Engineering Lead Department: IT Infrastructure Employment Type: Permanent - Full Time Location: City, London Reporting To: Head of Information Security Compensation: £75,000 / year Description We are looking for a senior, hands-on Cyber Security Architect & Engineering Lead to help shape and strengthen our future security architecture … exposure management, using business risk, exploitability, attack-path context and threat intelligence to prioritise remediation. Support the technical implementation and evidence required for ISO 27001, Cyber Essentials Plus, client assurance and other regulatory or contractual obligations. Provide clear, risk-based technical advice to senior leaders, project ...

technical capability. Skills, Knowledge and ExpertiseEssentialProfessional experience delivering client-facing penetration tests across web applications, APIs, and internal or external network infrastructure, independently and / or as part of a team. Strong manual testing capability and sound judgement in selecting and using automated tools, with practical experience of Kali … script or automate tasks using Python, PowerShell, Bash, or a comparable language. Good knowledge of modern web architecture, common web and API vulnerabilities, TCP / IP, Windows and Linux security, and Active Directory and Microsoft Entra ID attack paths. Experience delivering, or the ability to deliver, wider technical assessments ...

optimized for both performance and cost. Key Responsibilities Architect, implement, and maintain cloud infrastructure to support rapid product growth. Prepare infrastructure for SOC 2 / ISO 27001 audits, aligning with customer expectations. Build and maintain CI / CD pipelines for backend, frontend, and data … Automation : Strong skills in Python or Bash for automation and tooling. Experience 4–7 years of relevant experience, ideally including startup or high‐growth / high‐load environments . Proven track record of owning infrastructure end‐to‐end — from architecture through production support. Experience implementing reliability, security, and compliance ...

available, and optimized for both performance and cost. Responsibilities Architect, implement, and maintain cloud infrastructure to support rapidproduct growth. Prepare infrastructure for SOC 2 / ISO 27001 audits, aligning with customer expectations. Build and maintain CI / CD pipelines for backend, frontend, and data … storage. Scripting & Automation: Strong skills in Python or Bash for automationand tooling. Experience 4–7 years of relevant experience, ideally including startup or highgrowth / high load environments . Proven track record of owning infrastructure end-to-end — fromarchitecture through production support. Experience implementing reliability, security, and compliance measures ...

experience writing and maintaining Terraform for Infrastructure-as-Code. Experience building automation or workflow solutions using Microsoft Power Platform, including environment management and CI / CD pipeline creation and design. Strong scripting ability in Python and PowerShell. Strong hands-on experience configuring and administering Microsoft Intune (policies, compliance … OpenAI and Anthropic, and how they can be applied to infrastructure and operational workflows. Familiarity with Cloudflare, including Zero Trust and related network / security services. Experience in a global or enterprise IT environment operating across multiple regions. Familiarity with compliance frameworks such as ISO 27001 ...

notices, user-impact messaging, and post-incident reviews with measurable corrective actions. Oversee operational stability and administration for IAM platforms and dependencies (examples: SSO / MFA platforms, directories, IGA administration, ITSM workflows, HR source-of-truth, APIs / connectors). Lead audit and compliance execution for access controls … Proven experience operating IAM services at enterprise scale (large user populations, many applications, multi-region environments). Strong ITSM and operational management experience: incident / problem / change / request, SLAs / SLOs, metrics, and service health reporting. Demonstrated ability to manage third-party SI partners ...

SECURITY & COMPLIANCE LEAD Hours Full-time, 9:30am – 5.30pm with flexibility required to support system changes, upgrades and critical incidents where necessary. Department IT / Risk & Compliance The Role The Cyber Security & Compliance Lead is responsible for defining, delivering, and continuously improving the firm’s cyber security, information security … risk roles. Experience operating at a senior or lead level within a professional services or regulated environment. Strong understanding of security frameworks (e.g. ISO 27001, NIST, Cyber Essentials, GDPR). Experience managing cyber risk, audits, and compliance programmes. Experience handling security incidents and leading response activities. ...

security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments Cyber Security Manager Essential Skills Strong background within cyber … information security Experience working within Defence, Government or National Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing ...

security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments Cyber Security Manager Essential Skills Strong background within cyber … information security Experience working within Defence, Government or National Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing ...

have prior experience working with technology in Software QA environments, and have solid knowledge of Information Security practices and methodologies as they apply to ISO27001 and PCI-DSS. What You’ll Be Doing Manage and monitor corporate computing environment including but not limited to: Active Directory Service Network Routers, Switches … Wireless Access Points Office 365 setup and administration Intune (MDM) User Account Administration Data integrity and backup E-mail and Content filtering systems Windows / Apple / Linux Servers and Desktops, mobile devices and game consoles IT Asset Inventory Management of the Office 365 environment including Office, Exchange ...

maintain and administer our key security platforms, support client-facing security assurance activities, and help strengthen Law Debenture's security posture ahead of ISO 27001 certification. Main Responsibilities: Implement, manage and actively monitor security controls across email, web, endpoint and cloud environments. Monitor and respond … Copilot and AI security technologiesCISSP, CISM, CompTIA Security+ or equivalent certificationYour RewardCompetitive salary with performance bonus schemeGenerous pension contributionFull healthcare coverHealth cash planLife assuranceBuy / sell annual leave schemeAdditional InformationPeople who thrive at LawDeb make the most of this foundation to grow themselves, help us improve and have ...

Ability to communicate complex security matters in business terms. Strong organisational, coordination and problem-solving capabilities. Qualifications & Professional MembershipCISSP, CISM, CRISC, ISO / IEC 27001 or equivalent recognised security qualification. Professional registration or accreditation desirable. Membership of a recognised professional body. Evidence ...

love to hear from you. Reporting to the CISO, you'll own the security roadmap for Pigment's product, infrastructure, and CI / CD environment, and you'll build much of it yourself. This is a hands-on role: expect to read code, threat model new services, reproduce … sure an agent acting for a user can never exceed what that user could do themselves. Push least privilege further across production and CI / CD. Better than it was, not where we want it. For a concrete example: here's how we built a sandboxed execution environment ...

into a data-rich business that is still relatively early in its AI journey Third-party technology: managing Salesforce, Azure, M365 and external / offshore development partners, ensuring suppliers deliver against expectations Commercial technology management: maintaining discipline around licensing, contracts, TCO and technology investment, ensuring spend creates genuine business … platforms, data processing, data models and analytics Strong understanding of GDPR, information security, resilience and regulatory governance Some experience with SOC 2 Type 2 / ISO 27001, including implementing controls, preparing for or managing audits and working through compliance requirements Experience navigating risk, compliance, audit ...

levels and influence outcomes in support of enterprise projects. You will be confident working across the major information security frameworks and standards, including ISO 27001, NIST and SOC 2, and able to shape risk, compliance and control decisions in a way that keeps both … across information security governance, risk management, compliance and audit, with a demonstrable track record of delivered outcomes. Practical implementation experience with CIS Controls, ISO 27001 or equivalent frameworks within live operating environments, including the judgement required to apply them proportionately. Sufficient technical understanding to engage credibly ...

seeking an Information Security Analyst to safeguard our SaaS platform across security operations, access reviews and risk management. You will help operate ISO 27001 and SOC 2 controls while learning quickly and delivering practical security improvements across the business. Based in London with hybrid work ...

Asia Information Security Management System (ISMS) across offices in Hong Kong and Beijing. The position will play a key role in maintaining ISO 27001 certification, supporting governance, risk and compliance activities, and ensuring alignment between local regulatory requirements and global security standards Client Details Our client … operation and continual improvement of the Asia ISMS. Maintain information security policies, risk registers, incident registers and exception registers. Coordinate ISO 27001 internal and external audits and oversee remediation activities. Prepare security metrics and management reports for governance meetings. Support information security awareness and training initiatives. ...

regularly assessed through external and internal audits. You will ensure that the organisation is fully compliant with the required Information Security Standards including ISO 27001, Cyber Essentials, Cyber Essentials Plus, NIST and GovAssure. This includes the responsibility for all of the control documentation and audit process … updated in reasonable timeframes to mitigate against new risks. Responsible for making sure that the organisation is compliant with Information Security Standards (e.g. ISO 27001), ensuring all governance and audit requirements are undertaken. Ensure that the organisation is appropriately protected in line with business needs against ...