11 of 11 Remote/Hybrid ISO 27001 Lead Implementer Jobs in London

services. About the role Our compliance strategy is written. This role makes it happen. First, it takes every company in our group to ISO 9001, ISO 27001, ISO / IEC 42001 and Cyber Essentials Plus, with controls … HaloPSA and Employment Hero for policy acknowledgement and records What you will be doing Group certification programme Gap-assess every group company against ISO 9001, ISO 27001, ISO / IEC 42001 and Cyber Essentials Plus, and agree ...

help you make your moment. Join Team Purple. Join IFS. Job Description We are hiring a Senior Director – Technology GRC to lead governance, risk and compliance across Cloud, Product and Technology within our Trust and Intelligence organization. This senior leadership role will strengthen how we build … Product, Engineering, Cloud Operations, Cybersecurity, Data Protection, Legal and enterprise risk and compliance stakeholders. Role overview As Senior Director – Technology GRC, you will lead the governance, risk and compliance capability for IFS Cloud, Product and Technology. Your remit covers the security, data protection, compliance and responsible ...

hold us to the same standard they hold their own suppliers to. Our own assurance is part of the product promise: we are ISO 27001 certified, hold Cyber Essentials Plus and have achieved SOC 2 Type 1. The team works closely with Engineering, Product … Finance, making security and compliance something that helps the business win and keep customers rather than slowing it down. This role As GRC Lead you'll own Risk Ledger's governance, risk and compliance work day to day: our certifications, our enterprise risk management, our policies ...

payment security environments. Alongside PCI DSS, you’ll have broader cyber security knowledge and experience across areas such as ISO 27001, NIST, NCSC CAF, cyber risk management and security assessments. This broader experience is important in our consulting roles and mirrors the expectations … engagements across merchant and service provider environments, including assessment and non-assessment activities. Delivering wider cyber security consulting engagements across areas such as ISO 27001, NIST, NCSC CAF, risk management and security maturity. Conducting PCI DSS gap assessments, readiness reviews and compliance assessments. Assessing ...

track gap remediation Cyber Essentials Plus Deliver the annual renewal, including technical testing and remediation Monitor scheme changes and ongoing compliance Framework Alignment (ISO 27001, NIST CSF) Evidence alignment and run gap and maturity assessments Produce alignment statements for clients and auditors No formal … ISO 27001 certification held or sought PCI DSS Maintain scoping, segmentation and the annual assessment cycle Coordinate ASV scans and penetration testing Complete attestations with acquirers and assessors Vulnerability Management and Security Testing Validate scan coverage, track remediation and report metrics Coordinate penetration testing ...

technology change initiatives.Conducting cyber risk assessments, security reviews and control assurance activities.Translating industry standards and frameworks such as NIST CSF, NCSC CAF, ISO 27001 and IEC 62443 into practical, business-focused solutions.Helping clients understand regulatory requirements including NIS and NIS2 and supporting effective … following:Experience delivering cyber security consultancy, assurance or secure-by-design services.Knowledge of recognised frameworks and standards such as NIST CSF, ISO 27001, IEC 62443 or NCSC CAF.Experience completing risk assessments, security reviews and control validation activities.Strong stakeholder management skills with the ability ...

change initiatives. Conducting cyber risk assessments, security reviews and control assurance activities. Translating industry standards and frameworks such as NIST CSF, NCSC CAF, ISO 27001 and IEC 62443 into practical, business-focused solutions. Helping clients understand regulatory requirements including NIS and NIS2 … following: Experience delivering cyber security consultancy, assurance or secure-by-design services. Knowledge of recognised frameworks and standards such as NIST CSF, ISO 27001, IEC 62443 or NCSC CAF. Experience completing risk assessments, security reviews and control validation activities. Strong stakeholder management skills ...

assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM / SOAR platforms, detection engineering, threat … autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring and rollback mechanisms. Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer / Auditor, cloud security certifications or AI / security-focused training. Please ...

audits to ensure adherence to regulatory standards and local government frameworks.Ensure that security compliance efforts are aligned with relevant laws and regulations, and lead audits to verify compliance with standards like PSN, PCI-DSS, etc.Develop and manage ongoing assurance processes to evaluate the effectiveness of security controls … Systems Security Professional) or similar cybersecurity certifications (e.g., CISM, CISA, CRISC) are essential. Other relevant certifications, such as CISA (Certified Information Systems Auditor), ISO 27001 Lead Implementer, or SOC 2 knowledge are desirable.Essential requirements Candidates will only ...

requirements, the cyber threat landscape and business priorities Establish effective programme governance, control, reporting, risk management and assurance to support successful delivery outcomes Lead multi-disciplinary teams across cyber security, technology, risk, operations and business functions to deliver transformational change Deliver cyber maturity assessments, security roadmaps, implementation … management skills, with experience coordinating diverse delivery teams and suppliers Relevant cyber security qualifications or certifications such as CISSP, CISM, CRISC, CCSP, SABSA, ISO 27001 Lead Implementer / Auditor, SANS, GIAC certifications or equivalent Up-to-date knowledge ...

standards and security baselines. Provide governance and assurance over Identity & Access Management (IAM), Privileged Access Management (PAM), cloud security and security configuration standards. Lead security architecture reviews and provide independent assurance over technology solutions, projects and material technology change. Ensure security requirements are embedded within project, change … activities. Experience assessing technology risks in financial services environments. Qualifications: Minimum of one below is required: CISSP CCSP TOGAF Azure Security Engineer ISO27001 Lead Implementer or Lead Auditor Problem Solving and Judgment Customer Focus Planning and Reviewing Performance Focus Communication ...