24 of 24 Remote/Hybrid ISO 27001 Lead Implementer Jobs in London

Define, implement and monitor corporate information security strategies, objectives and governance frameworks Design and implement information security management systems and security master plans Lead risk management activities, including risk identification, assessment, treatment and reporting Define cybersecurity action plans and oversee their execution Ensure the protection of services … analyses and defining continuity and testing plans Implement and maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001 / 27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF Develop and maintain information security policies, standards and procedures ...

engagement with regulators and external stakeholders where required. Track regulatory findings, recommendations and actions through to closure. Assist with external certification activities, including ISO 27001 and Cyber Essentials Plus. Knowledge & Skills: Strong understanding of cyber security principles, governance frameworks and compliance management practices. Knowledge … version control processes. Strong stakeholder engagement and communication skills, with the ability to work effectively across technical and business functions. Familiarity with ISO 27001 / 27002, NIST Cyber Security Framework (CSF) 2.0 and the NCSC Cyber Assessment Framework (CAF). Understanding ...

Evaluate the effectiveness of technical, procedural, and physical security controls against documented security requirements and standards. Assess security controls against recognised frameworks including ISO 27001 , NIST CSF , NIST 800-53 , and CIS Controls . Review security documentation, including High-Level Designs (HLDs), Low-Level … Required Skills & Experience Proven experience testing and assessing the effectiveness of security controls within complex enterprise environments. Strong knowledge of security frameworks including: ISO 27001 NIST Cyber Security Framework (CSF) NIST 800-53 CIS Controls Experience reviewing and testing: Network security controls Firewall configurations ...

MAIN DUTIES Information Security & Risk Management Maintain and continuously improve the ISO 27001:2022 ISMS, including the Statement of Applicability, information security policies, standards and procedures, and the supporting documentation register, ensuring they remain current, mapped to control frameworks and audit-ready. Provide proactive … strongly preferred, for example CISM, CISSP, ISO 27001 Lead Implementer / Lead Auditor. Technology‐centric training and certification is an advantage. Experience And Skills 5+ years' experience in information and cyber security implementation, management ...

Programme Maintain and continuously improve the Information Security Management System, firmwide information security programme, security policies, certifications and control framework, aligned to ISO 27001, SOC 2, DORA‐related customer obligations, applicable financial services expectations and Crédit Agricole Group requirements. Partner with Product, Engineering … such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer / Lead Auditor or equivalent experience. Degree in cybersecurity, computer science, risk management or a related discipline, or equivalent practical experience. We believe we offer ...

CTO. With Cyber Essentials Plus already achieved and a 24 / 7 outsourced SOC in place, the organisation is now focused on achieving ISO 27001 certification, strengthening its governance and compliance framework, and ensuring the secure adoption of a rapidly expanding enterprise AI estate. … Responsibilities: Own security monitoring, incident response and security tooling, working closely with the outsourced SOC Line manage the IT Security Engineer and lead the organisation-wide security awareness programme Define identity, access and authentication standards, including RBAC, MFA and SSO Own the IT governance framework and regulatory ...

forums.Support operational resilience and outsourcing requirements relating to 3rd-party cyber security.Governance, Reporting & Continuous ImprovementDevelop and maintain operational cyber security procedures and standards.Support ISO 27001 certification, regulatory compliance activities and audit engagements.Contribute to cyber risk reporting, metrics and management information for senior management … intelligence and vulnerability management.Experience of security incident management and cyber crisis response.Experience of supplier cyber risk assessments and 3rd-party risk management.Understanding of ISO 27001, NIST CSF, FCA / PRA expectations and operational resilience requirements.Strong stakeholder management, communication and reporting skills.Qualifications:Minimum ...

Robert Half are working with a leading payments organisation is looking for an experienced ISO Implementation Consultant to support the development and delivery of its ISO certification programme. This is an initial four-month contract, working approximately 20 hours per week, supporting a Europe … wide programme. The successful candidate will have a strong background in ISO implementation, information security, GRC, technology risk or cyber security, with practical experience advising organisations on ISO requirements and supporting them through certification or audit readiness. The role will combine hands-on ISO ...

Robert Half are working with a leading payments organisation is looking for an experienced ISO Implementation Consultant to support the development and delivery of its ISO certification programme. This is an initial four-month contract, working approximately 20 hours per week, supporting a Europe … wide programme. The successful candidate will have a strong background in ISO implementation, information security, GRC, technology risk or cyber security, with practical experience advising organisations on ISO requirements and supporting them through certification or audit readiness. The role will combine hands-on ISO ...

Security & Compliance Consultant Mandatory GRC skills — you must be able to demonstrate: Practical, implementation‐level experience with ISO / IEC 27001 (2022 control set): scoping, risk assessment and treatment, Statement of Applicability, running or facing internal and certification audits — not just framework literacy … CISA, CRISC, CGRC, ISO / IEC 27001 Lead Implementer / Lead Auditor, CIPP / E are appreciated — practical experience matters more Benefits & Perks 100% Remote – In a fully digital world, work from anywhere ...

business and manage data risk. We are looking for a Governance Risk & Regulatory Compliance (GRRC) Director to join the DBS leadership team and lead our independent second line of defence GRRC function, a key area for Deloitte UK and our clients. This is a new and exciting … behave, our beliefs, and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead ...

Cyber Security Consultant, Information Security Strong client-facing and stakeholder management skills Experience working with recognised security frameworks and standards, including: ISO 27001, NISTCyber Security Framework (CSF), CIS Controls, Cloud Security Controls, Secure by Design principles The ability to balance security best practice with … commercial realities Someone who is naturally curious, proactive and enjoys solving problems Desirable Certifications CISSP CISM CCSP ISO 27001 Lead Implementer or Lead Auditor Please note that applicants must have the right to work ...

assurance.Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks.Experience with SOC operations, SIEM / SOAR platforms, detection engineering, threat intelligence … guardrails for autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring and rollback mechanisms.Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer / Auditor, cloud security certifications or AI / security-focused training.Please ...

assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM / SOAR platforms, detection engineering, threat … autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring and rollback mechanisms. Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer / Auditor, cloud security certifications or AI / security-focused training. Please ...

cyber risk management, operational resilience, business continuity, disaster recovery, and incident response principles. Knowledge of common security and risk frameworks such as NIST, ISO 27001, COBIT, CIS Controls, and FFIEC guidance. Familiarity with financial services regulatory requirements relating to technology risk and resilience. Experience … leverage AI-enabled tools to improve efficiency, insight generation, or risk management outcomes.Preferred Qualifications:Professional certifications such as CISSP, CISM, CRISC, CISA, CBCI, ISO 27001 Lead Implementer / Auditor, or equivalent. Experience supporting regulatory programmes involving ...

cyber risk management, operational resilience, business continuity, disaster recovery, and incident response principles. Knowledge of common security and risk frameworks such as NIST, ISO 27001, COBIT, CIS Controls, and FFIEC guidance. Familiarity with financial services regulatory requirements relating to technology risk and resilience. Experience … enabled tools to improve efficiency, insight generation, or risk management outcomes. Preferred Qualifications Professional certifications such as CISSP, CISM, CRISC, CISA, CBCI, ISO 27001 Lead Implementer / Auditor, or equivalent. Experience supporting regulatory programmes involving PRA, FCA, DORA ...

looking for an experienced SSES Cyber Security Lead (Grade 12) to join our Information Security team and play a pivotal role in shaping the cyber security arrangements underpinning the UK's future energy markets. This is a senior subject matter expert role, providing independent, authoritative technical … Elexon. What you’ll do: Provide independent, authoritative cyber security advice and technical leadership to the Chair of the SSES Security Governance Group. Lead and contribute to the development and maintenance of Threat and Risk Assessments , ensuring cyber risks are identified, assessed and appropriately treated. Monitor ...

requirements, the cyber threat landscape and business priorities Establish effective programme governance, control, reporting, risk management and assurance to support successful delivery outcomes Lead multi-disciplinary teams across cyber security, technology, risk, operations and business functions to deliver transformational change Deliver cyber maturity assessments, security roadmaps, implementation … management skills, with experience coordinating diverse delivery teams and suppliers Relevant cyber security qualifications or certifications such as CISSP, CISM, CRISC, CCSP, SABSA, ISO 27001 Lead Implementer / Auditor, SANS, GIAC certifications or equivalent Up-to-date knowledge ...

range of bespoke services and solutions. Due to several projects, they are keen to appoint a Cyber Security Risk & Assurance SME to lead a number of Data Driven and Cyber Data Assurance projects. Cyber Security Risk & Assurance SME: Duties Provide cyber risk and assurance input across … Testing, GRC, Vulnerability Management Assess control design, Endpoint security, Cloud, Identity, Secure Development, Third-Party risk, Incident Management Desirable: CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor / Implementer or equivalent experience. Knowledge of NIST CSF, ISO ...

range of bespoke services and solutions. Due to several projects, they are keen to appoint a Cyber Security Risk & Assurance SME to lead a number of Data Driven and Cyber Data Assurance projects. Cyber Security Risk & Assurance SME: Duties Provide cyber risk and assurance input across … Testing, GRC, Vulnerability Management Assess control design, Endpoint security, Cloud, Identity, Secure Development, Third-Party risk, Incident Management Desirable: CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor / Implementer or equivalent experience. Knowledge of NIST CSF, ISO ...

bring to the role? Knowledge of IT controls and technical solutions. Preferably have a relevant information security related qualification such as CISA, ISO 27001 lead auditor / implementer. Knowledge of the relevant regulatory requirements around Information Security, Resilience and Third Party ...

standards and security baselines. Provide governance and assurance over Identity & Access Management (IAM), Privileged Access Management (PAM), cloud security and security configuration standards. Lead security architecture reviews and provide independent assurance over technology solutions, projects and material technology change. Ensure security requirements are embedded within project, change … activities. Experience assessing technology risks in financial services environments. Qualifications: Minimum of one below is required: CISSP CCSP TOGAF Azure Security Engineer ISO27001 Lead Implementer or Lead Auditor Problem Solving and Judgment Customer Focus Planning and Reviewing Performance Focus Communication ...

activities. Experience assessing technology risks in financial services environments.Qualifications:Minimum of one below is required:CISSP CCSP TOGAF Azure Security Engineer Desirable: ISO27001 Lead Implementer or Lead AuditorCompetencies: Problem Solving and JudgmentCustomer FocusPlanning and ReviewingPerformance FocusCommunication and ConfidenceAbout UsLife, Work ...

Your level of experience will determine the amount or responsibility given to you, as a result you may also have the opportunity to lead assignments and be responsible for supervising direct reports whilst ensuring the overall success of the engagement. You will be given the opportunity … such as chartered or principal status with the UK Cyber Security Council, or certifications such as CompTIA, NIST, PCiIAA, CISMP, CISSP, CREST, ISO27001 Lead Implementer / Auditor, SABSA, and TOGAF. A Mentor will be on hand to provide support and guidance throughout your journey ...