51 to 75 of 196 Information Security Jobs in London

We present an exciting opportunity to join a prominent organization in the financial services sector. They actively seek an experienced Cyber Security Engineer to ensure the company's adherence to security standards. Responsibilities: Collaborate with technology and business teams to implement security processes, technologies, and controls, serving … as the authority for security-related inquiries. Define, design, implement, and maintain security solutions tailored to the business's requirements. Support the definition, execution, and continuous improvement of key cybersecurity processes, including vulnerability and patch management, security incident response, monitoring, endpoint security, identity and access management … network security, and cryptography. Assist in developing and maintaining security policies, processes, incident response management plans, and playbooks. Create and document standard operating procedures and protocols. Provide expertise on security requirements for core technology processes, such as asset management, change management, third-party management, technology development and more »

Job title: Information & Cyber Security Analyst Client: Financial Services Salary: £50,000-£70,000 + Bonus Location: London/Hybrid Skills: Information Security, Monitoring, Compliance, Best Practices The role: My client are seeking a knowledgeable Information & Cyber Security Analyst to join their team. This … role is focused on the business side of Security, and is absolutely key in assuring that information is protected and secured at all times. The position is broadly split into 2 main areas: Compliance Security monitoring and compliance Detecting any issues or security breaches across global … infrastructure Monitoring of devices and infrastructure, including reporting Investigating potential threats and issues Risk management and analysis Utilising tooling such as packet inspection and security forensics to resolve and report issues Security & Best Practice Working with various other Security personnel Mitigating Information and Cyber based risks more »

Strong technical and technology skills. Strong analytical skills and financial literacy and understanding of payments data sources and formats (ie, ISO20022, ISO8583). Corporate Security Responsibility Every person working for, or on behalf of, Mastercard is responsible for information security. All activities involving access to Mastercard assets, information … with an inherent risk to the organization and therefore, it is expected that the successful candidate for this position must: • Abide by Mastercard’s security policies and practices; • Ensure the confidentiality and integrity of the information being accessed; • Report any suspected information security violation or breach … and • Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines. Corporate Security Responsibility All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf more »

To ensure our services and applications are fit for the modern market, our team collaborates with every department. We develop, explore and implement the information Security practices helping us to protect the data of our clients in our services of accounting, tax and business consulting. But, just as … importantly, we maintain the functionality of our Information Security Management System (ISMS) and ensure governance of the technology and security processes that keeps us advancing. And you could too. In an Information Security role at BDO, you'll become part of a team that act … deliver the Assurance program and analytical work. The Assurance Manager role is the focal point for effective engagement between the business streams and the Information Security team on Assurance related matters. This role will be a trusted adviser to senior stakeholders and provide broad knowledge of BDO's more »

Help strengthen our team as our Level 2 SOC/Security Analyst - Compliance, Assurance & Continual Improvement. Home based role. A great opportunity to join our operational security team to support our initial and ongoing assessment of Operational Security controls against Cyber Security best practice, Organizational Policies … and recognized Security Frameworks, working with relevant stakeholders to identify areas for improvement, and support development, enhancement and implementation of robust security controls. In addition, this role will identify areas of improvement within the Operational Security function, proactively identifying opportunities to enhance and optimize internal processes, ensuring … that they are both efficient and effective. This role is crucial in ensuring that even the most sophisticated cyber security controls are robustly implemented and enhanced. What You’ll Be Doing: Verification and Compliance: Verify that systems and processes meet specified security requirements. Assess the correctness of cyber more »

The Role: We are looking for a Cloud Security Engineer with experience on AWS, to join our growing team. The successful candidate will have an essential role in ensuring the information security of our business. You will be working in a team that is designing and building … resilient and secure Cloud environments that proactively prevent security threats. The main responsibilities of the position include: Design and build resilient Cloud infrastructures that are protected against security threats Develop and assess Cloud security solutions to secure systems, databases and networks Conduct assessment and make recommendations to … ensure that appropriate controls are in place Gain insight into security incidents and threats by monitoring/analyzing logs and performing vulnerability assessments Participate in efforts that shape the company’s security policies, procedures and standards for use in Cloud environments Create technical and managerial level security more »

Home based role Help strengthen our team as our Level 2 SOC/Security Analyst - Compliance, Assurance & Continual Improvement . Home based role. A great opportunity to join our operational security team to support our initial and ongoing assessment of Operational Security controls against Cyber Security best practice, Organizational Policies, and recognized Security Frameworks, working with relevant stakeholders to identify areas for improvement, and support development, enhancement and implementation of robust security controls. In addition, this role will identify areas of improvement within the Operational Security function, proactively identifying opportunities to enhance … and optimize internal processes, ensuring that they are both efficient and effective. This role is crucial in ensuring that even the most sophisticated cyber security controls are robustly implemented and enhanced. What You'll Be Doing: Verification and Compliance: '€¢Verify that systems and processes meet specified security requirements. more »

INFORMATION SECURITY MANAGER - LONDON CITY 2 DAYS PER WEEK ON SITE - NO SPONSORSHIP AVAILABLE. Must be available within 1 month. We … are looking to speak with experienced ISO27001 IT risk/compliance SME's who can hit the ground running. Taking ownership of the internal Infosec dept & manage external 3rd parties. You will play a big part of creating an ISO framework and embedded internal security within a global insurance … the support of the head of technology. Would you like to create a legacy within their information security infrastructure and implement IT, Infosec, and compliance frameworks. Would you like to assist with the design and roll out of a group wide Cyber Security manual. Would you like more »

Technical Information Security Consultant required for market-leading financial services firm. The role will be centred on ensuring security is delivered into a wide range of projects. There will be a focus on working closely with DevOps teams and embedding security throughout a software development life … cycle. Responsibilities: Act as the main security point of contact & SME for required projects Manage security risk for the whole project life cycle Perform security activities, including but not limited to, security design reviews, risk assessments, threat modelling, and vulnerability management and risk mitigation on internally … externally developed software Embedding security within DevOps (eg CI/CD pipelines), developing security requirements On-demand Security assessment of various components like Web apps, Containers, Platforms etc Reviewing security assessment reports and create a remediation pipeline Experience in web application security assessments like SAST more »

Location: London Hybrid: 2-3 days per week in office Salary: up to £105k dependant on experience InfoSec Manager required by a global Law Firm based in central London in a permanent role paying up to £105k per annum + benefits. The role is hybrid working, with people management responsibilities … communication skills Demonstratable knowledge across all areas of information security, risk management, audit, and compliance Experience growing and motivating a team of InfoSec professionals Experience delivering presentations and engaging with senior leadership Experience collaborating with cross functional teams to identify and implement best practice risk processes Experience working … them Ensure the success of key programmes Manage security technical reviews and attend ARBs, TDAs and CABs An excellent opportunity for an experienced InfoSec Manager with strong interpersonal skills to join a supportive and collaborative team in a newly created role to support the Head of Information Security. more »

our Senior SOC Analyst. Home based role. A great opportunity to join our team as our Senior SOC Analyst to be responsible for handing security incidents received/escalated from the SOC Analyst (Tier 1 or Tier 2) and perform a business impact analysis on the security incident. … You will leverage a deep understanding of information security technologies, you will aid in triaging threat intelligence from multiple sources and add contextual information to the security incident, perform additional analysis and based on the business impact will recommend the response actions and escalation path. You … will be guided by Threat Intelligence which is actionable information (e.g. IOCs/TTPs), conduct threat hunting activities; leveraging and analyzing sources of information as available through the SIEM, in addition identify and investigate potential suspicious activity as well as helping organizations identify, isolate, and contain security more »

We are looking for a Security Consultant with extensive experience in providing end-to-end security assurance for business projects. The ideal candidate will have a strong background in threat assessments, architectural design reviews, third-party risk assessments, RFP security requirements, network security, IDAM projects, ransomware … remediation, pen test scoping, and HLD/LLD reviews. Responsibilities: Perform threat modelling to identify potential security vulnerabilities and risks. Assess high and low-level architectural designs to identify security risks and provide recommendations for mitigation. Provide security requirements for RFPs and score RFPs based on security criteria. Conduct assessments of third-party security posture to ensure compliance with security standards. Create scopes for penetration testing, organize pen tests, review results, and oversee remediation efforts. Collaborate with project teams to agree on specific security controls and gather evidence of implementation. Identify and articulate more »

VP - Information Security London - Hybrid Salary: £110,000-120,000 Gresham Hunt are currently partnered with a leading international bank who are seeking a well-rounded Cyber professional, to work alongside the CISO as a senior member of the team and trusted advisor on a range of cyber … challenges and issues. The successful candidate will have: Strong Security governance, risk and compliance (GRC) with knowledge of information security standards such as Cyber Essentials, ISO 27001, NIST. Experience developing and implementing operational policies and standards. Demonstrable experience in a variety of areas such as cloud security, IAM, 3rd party risk, threat assessments and vulnerability management. Strong knowledge of cyber security architecture. Relevant certifications would be beneficial (e.g. TOGAF, SABSA). Ability to interact with and challenge technical teams and the methodologies they are implementing. Experience working with the Financial Services industry. Strong interpersonal skills more »

Information Security – GRC Consultant £55,000 - £70,000 London, UK My client is looking for someone who has a strong track record in Security GRC leadership to join their growing team. Skills Have an understanding of software development practices and cloud environments, able to understand and build … develop and deliver reporting at an C-level with the confidence to call out deficiencies in a constructive manner. Able implement, and maintain comprehensive security risk management processes to ensure security risks are effectively identified, assessed, and managed. Experience evaluating, monitoring, and driving accountability for security risk … mitigation and control compliance across all the business. Able to analyse emerging threats and trends to proactively identify and adjust security risks and appropriate controls. Requirements Experience overseeing risk and compliance activities, including leading the maintenance and improvement of ISO 27001 certified ISMS. Understand risk management practices and experience more »

delivering across set responsibilities and role requirements.The Head of GRC is responsible for building and leading the GRC team, in line with the Cyber Security Strategy. This role requires a deep understanding of: Information Security Risk Management Risk Management Security Policies Assurance Tools Strong background in … communicate effectively, execute with precision and be process driven, with an eye for capturing the process. The successful candidate will have a passion for security and be able to lead a team of experts in this field. Responsibilities include: Build the Department's GRC team and implement an efficient … operating Model Governing the way the Department identifies, mitigates and manages its Information Security Risks, Departmental Cyber Risks and its Compliance Develop and operate the Cyber Culture and Awareness function - enabling GRC to inform about better cyber behaviour Oversee the day-to-day operations of the information more »

innovate solutions, and deliver findings. Our aim is to become trusted advisors to our clients as we help them to navigate dynamic and evolving security risks. You will join a thriving Advisory Practice in which your skills and career will be carefully developed, and you will contribute towards improvements … in products and services. Responsibilities: Cyber Security Consultancy Support consultants across a broad range of information security disciplines, including: Technical domains and cyber transformation Framework assessments and roadmapping Cyber regulations, governance and compliance Incident Response, Disaster Recovery and Business Continuity Training and Exercising Threat Intelligence Project Management … Business Development Our delivery team is at the heart of our business development activities. You will: Support engagement with clients to understand their cyber security challenges Innovate solutions and support the creation and pitching of cyber security engagements Skills and Experience We think candidates with the following skills more »

Senior IT Security Engineer Remote with 1-2 days in London per quarter as needed. 6-12 months, £500 per day Outside IR35 Experienced IT Security Engineer required to bolster the Info Sec team, specifically to translate risks and threats into clear guidance of what that means to … required action, with a practical and hands on approach to the delivery of the same. This role will make a big impact on improved security posture and maturing the security skills of the team and technical environment. Must be a willing coach, able to share knowledge and expertise … and influence and guide teams, with a desire to get hands dirty to deliver and drive security initiatives. Key responsibility areas: Network Security: Network Access Control (NAC) Implementation: Design, implement, and maintain a NAC solution to prevent unauthorized devices from accessing the corporate network. Firewall Rule Review and more »

work for one of the most advanced trading firms globally? Our client is a leading financial technology company who are currently hiring a Senior Information Security Engineer. The Security team play a crucial role in safeguarding the firm's physical and IT assets, ensuring compliance with global … and staying ahead of emerging cyber threats. Location : London (Hybrid) Compensation Package Up to £250,000 (Depending on Experience) The Role: As a Senior Information Security Engineer, you will be an integral part of the technology team, responsible for architecting, developing, and deploying large-scale security solutions. … You will collaborate closely with software & system engineers to identify and address security vulnerabilities, design defensive controls, and enhance our detection capabilities. Responsibilities: You will engage in requirements gathering, architecting, prototyping, and developing internal tools and infrastructure. You will work across a broad range of security roles and more »

risk management and governance activities. Our aim is to become trusted advisors to our clients as we help them to navigate dynamic and evolving security risks. Our Associates and Senior Associates are project managers and people managers, as well as consultants. You will join a thriving Advisory Practice in … which you will support the development of junior colleagues, drive improvement in products and services and contribute to Practice strategy. Responsibilities: Cyber Security Consultancy Lead consultancy engagements across a broad range of information security disciplines, including: Technical domains and cyber transformation Framework assessments and roadmapping Cyber regulations … Management and Business Development Our consultants are at the heart of our business development activities. You will: Engage with clients to understand their cyber security challenges Innovate solutions, create, propose and pitch cyber security engagements Contribute to the expansion of client accounts and winning new business Identify market more »

Job Summary: Cyber Risk Coordinator Division: Live Nation Corporate Reports To: Senior Cyber Risk Facilitator, Corporate Trust and Security Contract: Full time, 40 hours per week THE TEAM The Cyber Risk Management team partners with various parts of the business to secure system and network resources and protect the … data. To support this mission, the CRM team develops processes, procedures, and policies required for the protection of data. We identify risks to the security of information and systems. Respond to these risks in order to reduce to levels acceptable to the organization. Defining security requirements, establishing … baselines analyzing and reporting risks based on applicable laws, regulations, and best practices. Consult with global tech teams to investigate security issues and evaluate products and processes. Collaborating with teams and third-party regulators to develop the organizational security strategy, architecture, and risk relevance. Responding to and recovering more »

Our client is seeking a dedicated and knowledgeable Security identity access Manager to join their dynamic team. This role sits within the Cyber Security product group, focusing on Identity & Access platforms for Privileged Access Management and Identity Governance and Administration. The successful candidate will have the opportunity to … deliver enterprise security services to the organisation, acting as a subject matter expert in identity and access technologies. This role offers an exciting opportunity to drive forward the Digital Identity function within Cyber Security, creating a community of inter-departmental identity and access teams. Opportunity to be a … subject matter expert in identity and access technologies Drive forward the Digital Identity function within Cyber Security Create a community of inter-departmental identity and access teams What you'll do: As a Security identity acess Manager, you will play a pivotal role in shaping our client's more »

Our client is seeking a dedicated and knowledgeable Security identity access Manager to join their dynamic team. This role sits within the Cyber Security product group, focusing on Identity & Access platforms for Privileged Access Management and Identity Governance and Administration. The successful candidate will have the opportunity to … deliver enterprise security services to the organisation, acting as a subject matter expert in identity and access technologies. This role offers an exciting opportunity to drive forward the Digital Identity function within Cyber Security, creating a community of inter-departmental identity and access teams. Opportunity to be a … subject matter expert in identity and access technologies Drive forward the Digital Identity function within Cyber Security Create a community of inter-departmental identity and access teams What you'll do: As a Security identity acess Manager, you will play a pivotal role in shaping our client's more »

Manager and the direct team in both: 1) the execution/ongoing management of the banks Cyber Resilience activities & also 2) the new Cyber Security and Digital Operational Resilience Act (DORA) related capabilities. This is an opportunity for a motivated self-starter, with a can-do mindset and the … ability to connect information from various sources to help build a connected resilient organisation. The candidate will have the opportunity to strengthen and demonstrate strong knowledge of cyber resilience and the new DORA requirements coming into effect in January 2025. Accountabilities and Duties: This is an overview list of … Support DORA compliance by coordinating the activities required across all six pillars of DORA: ICT Risk Management, ICT related Incident Reporting, Digital Resilience Testing, Information Sharing, ICT Third Party Risk and General Governance Principles. Stay up to date with the changing cyber risk landscape, emerging threats, regulatory requirements and more »

A specialist (re)insurance broker are looking for an experienced Cyber Security Engineer to take responsibility for the development and operation of the vulnerability and security event management programs, within the Information Security function. This is a permanent role with hybrid working arrangements - requiring … per week in their Central London office. Core responsibilities will include: Daily management and maintenance of vulnerability monitoring systems Daily management and maintenance of security event monitoring Support the Information Security Team in performing security assessments for projects and other initiatives Assess cloud applications and provide … assurance that products or services follow the firm's policies Support the maintenance of security in cloud environment (Microsoft 365 and Azure hosted solutions). Whilst experience working with Microsoft products would be ideal, we're predominantly looking for someone who is "security led" in their approach as more »

A specialist (re)insurance broker are looking for an experienced Cyber Security Engineer to take responsibility for the development and operation of the vulnerability and security event management programs, within the Information Security function. This is a permanent role with hybrid working arrangements - requiring … per week in their Central London office. Core responsibilities will include: Daily management and maintenance of vulnerability monitoring systems Daily management and maintenance of security event monitoring Support the Information Security Team in performing security assessments for projects and other initiatives Assess cloud applications and provide … assurance that products or services follow the firm's policies Support the maintenance of security in cloud environment (Microsoft 365 and Azure hosted solutions). Whilst experience working with Microsoft products would be ideal, we're predominantly looking for someone who is "security led" in their approach as more »