1 to 25 of 27 ISO 27001 Lead Implementer Jobs in London

services. About the role Our compliance strategy is written. This role makes it happen. First, it takes every company in our group to ISO 9001, ISO 27001, ISO / IEC 42001 and Cyber Essentials Plus, with controls … HaloPSA and Employment Hero for policy acknowledgement and records What you will be doing Group certification programme Gap-assess every group company against ISO 9001, ISO 27001, ISO / IEC 42001 and Cyber Essentials Plus, and agree ...

here is not a paperwork exercise at the edge of the business. It is a condition of doing business. We are working toward ISO 27001 certification and SOC 2 Type II attestation across a company that is scaling quickly, operating multi-tenant infrastructure … control is actually working or only described. What You Will Be Doing Compliance Execution Implement and maintain the control set defined for our ISO 27001 and SOC 2 Type II programs, tracking status, owners, and gaps against the certification timeline. Operate our GRC platform ...

role will lead the design, build and operationalisation of the ISMS in line with ISO / IEC 27001:2022. Key Responsibilities Conduct enterprise-wide ISO 27001:2022 gap assessment Define ISMS scope, context, governance … documentation and KPI dashboard Qualifications: ISO 27001 Lead Implementer and / or Lead Auditor. #J-18808-Ljbffr ...

help you make your moment. Join Team Purple. Join IFS. Job Description We are hiring a Senior Director – Technology GRC to lead governance, risk and compliance across Cloud, Product and Technology within our Trust and Intelligence organization. This senior leadership role will strengthen how we build … Product, Engineering, Cloud Operations, Cybersecurity, Data Protection, Legal and enterprise risk and compliance stakeholders. Role overview As Senior Director – Technology GRC, you will lead the governance, risk and compliance capability for IFS Cloud, Product and Technology. Your remit covers the security, data protection, compliance and responsible ...

hold us to the same standard they hold their own suppliers to. Our own assurance is part of the product promise: we are ISO 27001 certified, hold Cyber Essentials Plus and have achieved SOC 2 Type 1. The team works closely with Engineering, Product … Finance, making security and compliance something that helps the business win and keep customers rather than slowing it down. This role As GRC Lead you'll own Risk Ledger's governance, risk and compliance work day to day: our certifications, our enterprise risk management, our policies ...

payment security environments. Alongside PCI DSS, you’ll have broader cyber security knowledge and experience across areas such as ISO 27001, NIST, NCSC CAF, cyber risk management and security assessments. This broader experience is important in our consulting roles and mirrors the expectations … engagements across merchant and service provider environments, including assessment and non-assessment activities. Delivering wider cyber security consulting engagements across areas such as ISO 27001, NIST, NCSC CAF, risk management and security maturity. Conducting PCI DSS gap assessments, readiness reviews and compliance assessments. Assessing ...

covering identity verification, lettings compliance, e-signing, uptime monitoring and secure document storage — alongside business, technology and Oracle / SAP ERP consulting and ISO 27001-led security audits. Everything we ship is designed around UK data residency and UK GDPR from day one, because … security and auditability are non-negotiable. Twelve months in, you'll have established a steady rhythm of risk and vulnerability assessments, kept our ISO 27001 and Cyber Essentials programmes on track, tightened our incident response plans and made audits uneventful. You'll work closely ...

exciting strategy to serve an even wider section of the market, with innovative products and services. As the Information Security Manager, you will lead Hometrack’s information security framework, ensuring our data, technology, and operational practices meet the rigorous standards expected by our banking and mortgage lending … partners. You will be accountable for the ownership and maintenance of our ISO 27001 and Cyber Essentials certifications, driving continuous improvement in our overall security posture. This is a visible, high-impact role requiring both strategic ownership and hands-on governance to ensure security ...

track gap remediation Cyber Essentials Plus Deliver the annual renewal, including technical testing and remediation Monitor scheme changes and ongoing compliance Framework Alignment (ISO 27001, NIST CSF) Evidence alignment and run gap and maturity assessments Produce alignment statements for clients and auditors No formal … ISO 27001 certification held or sought PCI DSS Maintain scoping, segmentation and the annual assessment cycle Coordinate ASV scans and penetration testing Complete attestations with acquirers and assessors Vulnerability Management and Security Testing Validate scan coverage, track remediation and report metrics Coordinate penetration testing ...

lead the firm's information security assurance activities, maintain the firm's information security certifications by coordinate of certification activities, and provide independent assessment of security control effectiveness. To also assist in the firm's information security risk management framework, working with the enterprise risk team. … enable the firm to meet its regulatory and contractual obligations within it's risk tolerance. Main duties and responsibilities Own and maintain the ISO 27001:2022 Information Security Management System Coordinate internal and external certification audits Manage the lifecycle of policies, standards and supporting ...

auditors, and enterprise partners expect provable, continuously operating security controls — not slide decks or one‐off audits. Compliance requirements (DORA, GDPR, SOC 2, ISO 27001, and region‐specific regulations) are increasing faster than our ability to operationalize them, and this role exists to close … party / ICT vendor oversight, and digital operational resilience testing. GDPR implementation experience is a strong bonus. Experience supporting SOC 2 and / or ISO 27001 audits (strong plus). Ability to translate regulatory requirements into technical controls. Strong working knowledge of AWS security ...

Cyber Security Architect & Engineering Lead Department: IT Infrastructure Employment Type: Permanent - Full Time Location: City, London Reporting To: Head of Information Security Compensation: £75,000 / year Description We are looking for a senior, hands-on Cyber Security Architect & Engineering Lead to help shape … applications and integration platforms. Design and implement modern security controls, with a strong focus on Zero Trust, secure-by-design principles and automation. Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations and emerging technologies. Act as the technical lead ...

assurance frameworks across a diverse technology environment. Key Responsibilities: Own and maintain the technology governance framework, including project portfolios, roadmaps, risks and dependencies. Lead CIS Controls Self Assessment (CIS CSAT) activities and coordinate improvement plans. Coordinate ISO 27001 gap assessments … security advisers and specialist suppliers. What We're Looking For: Strong experience in technology governance, risk, compliance or assurance. Good working knowledge of ISO 27001 and information security frameworks. Experience with cyber security improvement programmes, audits and remediation plans. Understanding of technology project governance ...

plans. Assess the effectiveness of security controls and identify control gaps, weaknesses and opportunities for improvement . Translate security frameworks and requirements, including ISO 27001 and NIST CSF , into practical operational controls. Support audit, assurance and compliance activities , including ISO 27001 … principles . Experience conducting or supporting technology / security risk assessments and maintaining risk registers. Good knowledge of security control frameworks such as ISO 27001 and NIST CSF . Experience assessing control design and effectiveness , identifying gaps and supporting remediation. Understanding ...

monitor their risk over the life of the relationship.* **Assess controls.** Review the design and operation of security controls against recognised frameworks (e.g. ISO 27001, NIST CSF), identify gaps, and track remediation through to closure.* **Maintain the Information Security Risk Register.** Identify, assess … tracking remediation.* **Good technical understanding across core technology domains** such as infrastructure, networks, cloud, identity and applications.* **Working knowledge of security frameworks** (ISO 27001, NIST CSF or similar) and experience applying regulatory requirements such as FCA, DORA and GDPR.* **Relevant certifications** (e.g. CISM, CRISC ...

ISMS-Strukturen und begleitest Zertifizierungen und Akkreditierungen und Assessments. Du führst Risikoanalysen, Audits und Gap-Analysen durch und sorgst dafür, dass Standards wie ISO 27001, NIS2, DORA, BSI Grundschutz und DSGVO eingehalten werden. Du konzipierst sichere Architekturen für Cloud-, On-Premises- und hybride Umgebungen … unsere Kunden. Was Du mitbringst Mehrjährige Erfahrung in der Informationssicherheitsberatung und im Projektmanagement. Du kennst Dich bestens mit gängigen Sicherheits- und Datenschutzstandards wie ISO 27001, NIST CSF, NIS2, DORA und DSGVO aus. Du verfügst über fundierte Kenntnisse in Enterprise Network Architekturen – egal ...

technology change initiatives.Conducting cyber risk assessments, security reviews and control assurance activities.Translating industry standards and frameworks such as NIST CSF, NCSC CAF, ISO 27001 and IEC 62443 into practical, business-focused solutions.Helping clients understand regulatory requirements including NIS and NIS2 and supporting effective … following:Experience delivering cyber security consultancy, assurance or secure-by-design services.Knowledge of recognised frameworks and standards such as NIST CSF, ISO 27001, IEC 62443 or NCSC CAF.Experience completing risk assessments, security reviews and control validation activities.Strong stakeholder management skills with the ability ...

change initiatives. Conducting cyber risk assessments, security reviews and control assurance activities. Translating industry standards and frameworks such as NIST CSF, NCSC CAF, ISO 27001 and IEC 62443 into practical, business-focused solutions. Helping clients understand regulatory requirements including NIS and NIS2 … following: Experience delivering cyber security consultancy, assurance or secure-by-design services. Knowledge of recognised frameworks and standards such as NIST CSF, ISO 27001, IEC 62443 or NCSC CAF. Experience completing risk assessments, security reviews and control validation activities. Strong stakeholder management skills ...

suits a security professional who can provide practical, risk-based advice in a client-facing environment. Key Responsibilities Support GRC activities aligned with ISO 27001, NIST Cybersecurity Framework, Cyber Essentials and GovAssure. Conduct information security risk assessments across business processes, projects, technology platforms … Risk Management. Experience in security risk assessments, control reviews and audit or compliance activities. Strong understanding of security governance, risk management and ISO 27001. Familiarity with NIST Cybersecurity Framework and Cyber Essentials. Strong stakeholder engagement, communication, report writing and presentation skills. Ability to communicate security concepts ...

security and technology risk assessments , working with technical teams to identify appropriate and practical mitigation plans. Support audit, assurance and compliance activities , including ISO 27001, Cyber Essentials and internal control programmes. Translate security frameworks and regulatory requirements into practical, operational standards and controls . … Security Compliance . Experience developing and maintaining security policies, standards, controls and governance documentation . A strong understanding of security frameworks such as ISO 27001 and NIST CSF . Experience producing security compliance reporting, MI or dashboards , ideally using Power BI. Experience managing ...

assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM / SOAR platforms, detection engineering, threat … autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring and rollback mechanisms. Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer / Auditor, cloud security certifications or AI / security-focused training. Please ...

external (standards auditors) including preparation, execution and remediation tracking. Maintain documentation and evidence of certifications and attestations Maintain key standards such as ISO 27001, adding business value. Recruit, Manage, coach and develop the Risk & Compliance team, setting clear goals & objectives, cultivating an inclusive culture … accountability, continuous learning and collaboration. Proactively participate as senior member and leader within the ISO leadership team contributing to overall strategy, engagement, team dynamic and programmes within ISO. Act as a trusted advisor to executive and SME stakeholders, providing actionable insight and guidance to support risk-aware ...

business teams, driving security risk assessments, compliance initiatives, business continuity planning and audit programmes. You will oversee regulatory and certification activities including ISO 27001, PCI DSS and NIS2, while ensuring identified risks are clearly communicated, prioritised and effectively remediated. The role offers significant exposure … ability to translate technical issues into business language and a passion for improving security maturity. Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor / Implementer are desirable, alongside substantial experience operating within complex enterprise ...

business teams, driving security risk assessments, compliance initiatives, business continuity planning and audit programmes. You will oversee regulatory and certification activities including ISO 27001, PCI DSS and NIS2, while ensuring identified risks are clearly communicated, prioritised and effectively remediated. The role offers significant exposure … ability to translate technical issues into business language and a passion for improving security maturity. Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor / Implementer are desirable, alongside substantial experience operating within complex enterprise ...

audits to ensure adherence to regulatory standards and local government frameworks.Ensure that security compliance efforts are aligned with relevant laws and regulations, and lead audits to verify compliance with standards like PSN, PCI-DSS, etc.Develop and manage ongoing assurance processes to evaluate the effectiveness of security controls … Systems Security Professional) or similar cybersecurity certifications (e.g., CISM, CISA, CRISC) are essential. Other relevant certifications, such as CISA (Certified Information Systems Auditor), ISO 27001 Lead Implementer, or SOC 2 knowledge are desirable.Essential requirements Candidates will only ...