1 to 25 of 93 Remote/Hybrid SOC 2 Jobs in London

suppliers to. Our own assurance is part of the product promise: we are ISO 27001 certified, hold Cyber Essentials Plus and have achieved SOC 2 Type 1. The team works closely with Engineering, Product, Sales, Customer Success, People and Finance, making security and compliance something that helps … work, not delegate it. There's no team to inherit. You'll be the person who keeps ISO 27001 running, takes us from SOC 2 Type 1 to Type 2, and owns the risk framework the leadership team relies on. It's a highly collaborative role: expect ...

security design and architecture reviews, paired with the governance and process work that scales the program. You will partner on customer due‐diligence and SOC 2 evidence and turn security controls into repeatable workflows that fit how the business already works. You will apply that lens across … and DevOps to reduce risk through secure design and simplicity, not just added controls. Governance, Risk & Compliance Partner on customer due‐diligence (DDQ) and SOC 2 Type II evidence gathering, keeping compliance sustainable rather than fire‐drilled. Build repeatable security workflows that embed controls into existing engineering processes ...

and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part of a fast-growing community … effectiveness Identify control gaps, deficiencies, and areas for improvement Compliance & Risk Alignment Assess controls against relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2) Assess control effectiveness across: Design Effectiveness (DE), Operating Effectiveness (OE) and Control Automation (CA) Support regulatory and internal compliance initiatives Ensure ...

classification, data handling, retention, access, cross-border processing and related technology controls. Support compliance obligations relevant to cloud and software services, including GDPR, CCPA, SOC 2, ISO 27001, FedRAMP and NIST-based requirements, where applicable. Monitor remediation of technology-related data-protection and compliance gaps through closure. … establishing technology control frameworks and supporting audits, certifications, customer assurance and remediation programs. Working knowledge of relevant frameworks and requirements, such as ISO 27001, SOC 2, NIST, GDPR, CCPA and FedRAMP, as applicable. Experience integrating security, privacy and compliance controls into product development or technology‐delivery lifecycles. Experience ...

align with a cloud-first strategy. Partner with Security to harden the Microsoft 365 tenant and infrastructure estate against relevant compliance frameworks (ISO 27001, SOC 2, DORA). Technical Leadership Act as a senior technical point of contact for infrastructure design decisions, escalations, and complex troubleshooting. Change Control … Intune and Kandji are compliant, patched, and enrolled to policy. The Microsoft 365 tenant and wider SaaS estate meet relevant compliance frameworks (ISO 27001, SOC 2, DORA). Infrastructure changes are documented, tested, and follow IT change control processes without exception. Technical documentation, runbooks, and architecture records ...

such as the EU AI Act Perform third-party/vendor security and AI risk assessments Contribute to control testing across frameworks such as SOC 2, ISO 27001, CSA Star, NIST CSF, and emerging AI governance standards Track remediation efforts and maintain risk registers and reporting dashboards Support … Foundational understanding of cybersecurity principles (network security, cloud security, IAM, application security, vulnerability management) Familiarity with common frameworks such as NIST CSF, ISO 27001, SOC 2, or similar Understanding of AI/ML concepts and associated risks (data governance, model bias, hallucinations, prompt injection, model misuse, etc. ...

when necessary to support them. You will own the IT strategy and roadmap, service performance, vendor procurement outcomes, and the IT control environment, including SOC 2, Cyber Essentials, and GDPR-related IT controls. You will plan and manage the project portfolio, hold vendors and the team to account … outcome, the Indeed relationship, and vendor performance Security, Risk & Compliance: Own the IT control environment and security posture, including policy, access standards, SOC 2, Cyber Essentials, GDPR-related IT controls, and audit outcomes. Direct the team's evidence gathering and control maintenance, and represent IT on security and ...

and close the coverage gaps where some products are today outside the standard tooling. Governance, risk and compliance and vendor management Own ISO 27001, SOC 1, SOC 2 and PCI DSS compliance, the audit calendar, the compliance automation platform and the relationship with our auditors. Work with … software or SaaS company serving regulated enterprise customers, and of facing those customers on security matters. Working knowledge of ISO 27001 and SOC 2, and experience of being accountable for audits and certifications. PCI DSS experience is an advantage. Practical understanding of cloud security on AWS and Azure ...

Access Transparency, relevant to deploying per-market for different banks' regulators Hands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2 ...

creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning and tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ … years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security Command Center) CISSP, OSCP, or equivalent certification Nice ...

secret rotation and offboarding. Connectors Microsoft 365 and the other sources we read handling tokens, scopes and permissions safely. Compliance The controls behind our SOC 2 and ISO 27001 work in Vanta, with the auditor and pen-test firm you choose and manage. Security answers The security pack … major cloud, GCP ideally, Azure or AWS welcome, and written the infrastructure as code for it. You have been the person who got a SOC 2 or ISO 27001 audit through at a startup or scale-up, and can name the controls you owned and the evidence ...

fake domains and accounts impersonating our brands and leaders. Policy, compliance and trust. Write and enforce policies people actually follow. Prepare the company for SOC 2 or ISO 27001 with Legal & Compliance. Own the public security and trust story, including the trust page on our products. Team leadership. … half your time hands-on while leading a small, fully remote team across many time zones. Nice to have Has prepared a company for SOC 2 or ISO 27001. Has secured or evaluated AI agents and LLM-based tools in production. Has run a third-party risk program ...

demonstrations that showcase how Vanta solves the customer's specific problem, including how Vanta automates and operationalises their GRC programmes across frameworks such as SOC 2, ISO 27001, and HIPAA. Validate the feasibility of standard and semi-complex integrations and confirm alignment with customer environments, workflows, and architectures. … trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making ...

Reporting & Compliance Support by owning operational metrics and performance reporting, communicating risk to stakeholders, and contributing evidence and control monitoring activities supporting ISO 27001, SOC 2 and NIS2 compliance requirements. Key outcomes: Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying … and platforms. Contribute to a high‐performing Security Operations function by mentoring analysts, delivering meaningful operational reporting, and supporting compliance obligations including ISO 27001, SOC 2 and NIS2. Experience required: Proven experience operating within a Security Operations, Cyber Security Analyst, Security Engineer or Incident Response role, with responsibility ...

and procedures sharp and our compliance with ISO 27001 and ISO 27018 on point. You’ll get involved in SSAE 18/ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and … excellent organisational skills. You write clear documentation and reports, and can translate complex requirements for stakeholders at every level You’ll have at least 2 years’ experience in a related role Experience in a regulated industry, familiarity with other information security frameworks and assurance reports, and exposure to Jira ...

and procedures sharp and our compliance with ISO 27001 and ISO 27018 on point. You'll get involved in SSAE 18/ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and … organisational skills.* You write clear documentation and reports, and you can translate complex requirements for stakeholders at every level.* You'll have at least 2 years' experience in a related role.* Experience in a regulated industry, familiarity with other information security frameworks and assurance reports, and exposure to Jira ...

services and modern security practices, you will take ownership of designing, deploying, and maintaining cloud infrastructure while upholding compliance with industry standards such as SOC 2. This is a mid-level role suited for an engineer with proven commercial experience who is ready to independently manage infrastructure operations, implement … Management: Monitor systems for threats, conduct regular vulnerability assessments, apply proactive patches, and support remediation efforts. Compliance & Auditing: Partner with compliance teams to maintain SOC 2 alignment, support security audits, and keep comprehensive compliance documentation and security procedures up to date. SRE Collaboration: Work closely with the Site ...

privacy notices, consent, data retention, and contractual commitments Support audits and compliance programs through evidence collection and remediation tracking Contribute to ISO 27001, SOC 2, and other compliance initiatives Support privacy, security, and third-party risk assessments and maintain risk registers Support privacy incident investigations and remediation activities … Experience with privacy assessments, documentation, supplier reviews, and customer questionnaires Understanding of cloud technology, information security principles, and frameworks such as ISO 27001 and SOC 2 Strong research, critical thinking, and problem-solving skills Clear communication skills with the ability to explain complex topics simply Organised, detail-oriented ...

Risk Ledger is seeking a GRC Lead to own governance, risk and compliance. You will drive ISO 27001, SOC 2 and risk management across the business, partnering with engineers, sales and leadership to ensure evidence, reporting, and controls are effective and scalable. This hands-on role requires ...

certified technology company with offices in the UK and Asia. The work runs from December 2026 to February 2027 at about 2 to 3 days a week, then moves to a lighter monthly review. You will work with our ISMS Manager and Cyber Assurance lead, who check your work … is. Risk rate each supplier as high, medium or low using our method. Send and follow up security questionnaires, and collect evidence such as SOC 2 reports, ISO 27001 certificates and penetration test summaries. Review the evidence, record gaps and agree follow up actions with the supplier owner. ...

product tells customers whether their suppliers are secure, so our own security posture is part of what we sell. We’re ISO 27001 certified, SOC 2 compliant and working towards ISO 42001, and the way we run IT is evidence in those audits. As our Senior IT Engineer … preserving evidence from devices. Own the IT asset register and keep IT and device controls passing in our compliance platform, with evidence ready for SOC 2, ISO 27001 and Cyber Essentials Plus audits. Support security projects, policy updates, audits and reporting. Automate, enable AI and scale Make automation ...

their timelines. Become a product expert on Vanta and how our platform can be used to improve security posture through our compliance offerings (eg SOC 2, ISO 27001, GDPR, HIPAA, ISO 42001 and Custom Frameworks), Trust Reports, and Risk Management solution. Provide insightful technical answers and recommend … trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making ...

EnergySys is seeking a dedicated Compliance & Governance professional to own the SOC 2 Type II and ISO 27001 audits, maintain the ISMS, and drive regulatory compliance across UK, Australia, and US entities. You will configure Drata, map controls, and report to senior leadership while partnering with ...

and pragmatic guidance on regulatory expectations, without ever turning into the documentation team. Contribute to alignment across the QMS, information security (ISO 27001/SOC 2) and HR/handbook frameworks so colleagues see one coherent system. Regulatory innovation and methodology Screen and monitor the relevant regulatory landscape … solutions in drug development and clinical product strategies. Partner with the science and AI teams to (1) map innovations against regulatory opportunities, and (2) package methodological evidence into regulator-ready dossiers for qualification, submission and/or engagement with regulators. Represent the company in industry and regulator-facing forums ...

London area is seeking an Infrastructure Specialist to design, deploy and operate cloud-based infrastructure with a strong emphasis on Google Cloud, security and SOC 2 compliance. You will work with SRE and compliance teams to ensure resilient systems. The role offers flexible home/office options ...