51 to 75 of 187 SOC 2 Jobs in London

scale ensuring standardized onboarding patterns and controls.* Establish guardrails and RBAC/ABAC models aligned to Zero Trust and regulatory frameworks (ISO 27001, SOC 2, NIST 800-53/63).* Define and maintain technical roadmaps, standards, and reference architectures; mentor engineers and review develop/runbooks.* Lead ...

information security principles and cybersecurity frameworks relevant to cloud environments: MITRE ATT&CK for Cloud, CIS Benchmarks, AWS Well‐Architected Security Pillar, NIST CSF, SOC 2, ISO 27001. Willingness and ability to participate in an on‐call rotation, including after‐hours response. Ability to produce clear, comprehensive, and ...

tabletop/purple-team exercises and postmortem improvements. A major focus is driving AI security and internal AI governance: integrating LLMs/ML into SOC triage and anomaly detection, defending AI attack surfaces (agent activity, prompt injection, machine identities), hardening against AI-driven threats (phishing-resistant MFA, supply chain … with all three. Nice to have: securing AI product features, OWASP Top 10 for LLM Applications, the NIST AI Risk Management Framework, MITRE ATLAS, SOC 2, or ISO 27001. Education Degree in a STEM field, preferably Information Security or Computer Engineering, or equivalent practical experience. Certifications such ...

manufacturing, or other mission-critical technical teams. Working knowledge of recognized security and compliance frameworks such as CIS Controls and Benchmarks, NIST, ISO 27001, SOC 2, Cyber Essentials, or equivalent local and contractual standards. Experience with security tooling such as SIEM, vulnerability-management platforms, privileged-access management, data ...

Cloud platforms: AWS, Azure, GCP. A background in financial services or similar regulated industries. Familiarity with compliance frameworks and security requirements (e.g., ISO 27001, SOC 2, SOX, PCI DSS, FedRAMP, FFIEC, NYDFS, SEC). A track record in consulting, solutions architecture, or technical coaching. Interest in technical sales ...

detection coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate. Maintain alignment to PCI DSS, SOC2, ISO27001 NIST, and CIS frameworks. Produce documentation and evidence to support audit and assurance activities. AI Security Design and implement guardrails for AI/LLM systems … OWASP LLM Top 10, NIST AI RMF. Scripting proficiency in Python, PowerShell, or Bash for security automation. Strong grasp of PCI DSS, NIST CSF, SOC 2, ISO27001, CIS Benchmarks, and MITRE ATT&CK for Cloud. Nice to have AZ-500, AWS Certified Security – Specialty, or equivalent cloud security ...

Engineering to join our collaborative and inclusive team. Reporting to our Global Head of Platform Engineering, this is a hybrid-working role, typically requiring 2 days per week in the office. The role will also include leadership of our Forward Deployed Engineers, ensuring this team is closely aligned with … Azure AKS or Google GKE. Strong understanding of GitOps tooling such as Argo CD, Flux or equivalent deployment automation approaches. Experience with ISO 27001, SOC 2 or similar assurance frameworks, particularly where operational teams are required to provide evidence for access, change, incident, backup, resilience and monitoring controls. ...

Code" initiatives that empower developers to ship secure code without sacrificing velocity; Governance & Compliance Mastery: Comprehensive understanding of global security frameworks (ISO 27001, SOC2, NIST) and data protection regulations. You have experience demonstrating security controls during audits and aligning technical execution with regulatory requirements. Incident Leadership & Forensics: Demonstrated ability ...

observability and monitoring stacks (e.g., CloudWatch, Prometheus, Grafana, Datadog) Knowledge of data sovereignty, residency requirements and compliance frameworks relevant to AI workloads (e.g., FedRAMP, SOC 2, ISO 27001, NIST 800‐53, HIPPA, PCI, HITRUST, GDPR) Familiarity with data protection regulations and AI Security frameworks (e.g., GDPR, NIST ...

Collaborate with security and engineering teams to understand and articulate technical controls in a customer-facing context. Support compliance initiatives across frameworks such as SOC 2, ISO 27001, ISO 42001, EU AI Act, UK Cyber Essentials, and GDPR, including evidence collection and audit readiness. Identify common themes and ...

reluctant for manual implementation Build systems with security by design as a core foundation Ensure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DS Design and operate key and secret management on GCP — Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager ...

and oral communication skills, and ability to assimilate easily into teams Strong technical skills and a working knowledge of SOX IT General Controls, COSO, SOC 1, and SOC 2 Awareness of ISO 27001, NIST standards, HIPAA, FAIR, and other relevant standards Effective analytical and critical thinking abilities ...

design, data modelling, and integration with internal and external financial systems. Security & Compliance Ensure systems meet regulatory, security, and audit standards (PCI-DSS, SOC2, GDPR). ...

that knowledge into an Azure environment. Experience with high‐availability infrastructure, PostgreSQL or MongoDB, AI/ML infrastructure, ETL/data pipelines, FinOps or SOC 2/ISO 27001 environments would be a bonus. Above all, we’re looking for someone who enjoys automating away problems rather than ...

sales. You'll partner with Account Executives to win complex deals, lead deep technical discovery, and demonstrate how Artemis solves real security problems for SOC analysts, security engineers, and CISOs. You'll architect proofs-of-value, navigate procurement and security reviews, and serve as the trusted technical advisor from … Address technical objections and advise on best-practice deployment, rollout, and detection tuning strategies Lead responses to security questionnaires, RFPs, and vendor risk reviews (SOC 2, ISO 27001, GDPR, HIPAA where relevant) Collaborate with Product, Engineering, Security Research, and customer teams to unblock deals and share field insights ...

regulatory expectations, supports operational resilience, and enables secure business growth.Champion & Ensure delivery against compliance requirements like the Apex Gold standard, NIST, DORA, SOC1 and SOC 2, ISO27001 and all relevant group controls.Liaising with key stakeholders, partners and group entities, internal and external.**Key Responsibilities****Technology Control Framework & Strategy ...

with guardrails you trust and help secure and monitor the (code/application/device) fleet. Support compliance work where it intersects security engineering: SOC 2, ISO 27001, customer security reviews, and pen test responses. What we’re looking for 3+ years in security engineering with hands … Google, Microsoft, Oracle, Coinbase, JP Morgan and more Health, fitness and gift card discounts Cycle2Work and Electric Cars scheme Hybrid working friendly - typically 2 days/week in our London office. We’re open to discussing flexible arrangements—please share any preferences in your application We believe diversity drives ...

Information Databricks Platform Location: UK Role Type: Permanent - Full Time Job Location: Hybrid Working - minimum of 2 days a week in our London office ABOUT SAGACITY Sagacity are the data intelligencepeople. Our proposition isbusinesses increase customerengagement and make moreinto the data businesses alreadyhave, and combine it with our data … and Delta tables (partitioning, Working knowledge of SSO/SCIM, identity providers and secretsmanagement Understanding of data security, encryption, network isolation andframeworks such as SOC 2, ISO 27001 or GDPR Highly numerate with strong attention to detail Solutions orientated with natural problem-solving skills Self-motivated and ...

self‐service. Knowledge of security tooling (SAST/DAST), WAF, and secrets management (e.g. Vault). Cloud certifications (AWS/Azure) and exposure to SOC 2, ISO 27001 or similar frameworks. Package & Location Salary: up to £125,000 (dependent on experience) Location: London, United Kingdom (Hybrid working) Permanent ...

blockchain technology, or curiosity and willingness to learn Experience operating in a security standards-compliant environment such as ISO 27001, NIST 800-171, or SOC 2 Technologies we use: AWS, Kubernetes, Kafka, Terraform, Helm, Ansible, Docker, Jenkins, GitHub Actions, Artifactory, Backstage, Datadog, Prometheus, PostgreSQL, and Python ...

verify compliance with mandatory security controls Develop policies, processes, and risk assessments aligned to top frameworks such as CIS, NIST, ISO 27001, and SOC 2 Crosswalk and harmonize controls across multiple compliance frameworks Document security requirements, support control implementation, and help track remediation progress Build risk registers, support ...

/CD (GitHub Actions or similar), and container orchestration Strong security posture: IAM, network segmentation, secrets, supply chain End-to-end compliance ownership (SOC 2, ISO 27001, or similar): designing the controls, not just answering about them Operational maturity: you've been on-call for systems that mattered ...

and defense-in-depth strategies. Knowledge of Standards: Strong knowledge of relevant security standards and frameworks such as NIST, ISO 27001, MITRE ATT&CK, SOC2 and OWASP. Communication Skills: Ability to articulate technical risks and architectural decisions to both technical and non-technical audiences. Certifications: Architectural qualifications (e.g., SABSA, TOGAF ...

evaluating secure controls for enterprise-level solutions. Strong understanding of industry cybersecurity frameworks and key control domains (e.g., NIST CSF, ISO 27001, FFIEC, SOC 2, GDPR). Thorough design and operational experience across one or more major public cloud providers (AWS, Azure, Google Cloud), with relevant certifications advantageous. … organization that require high assurance of the integrity of staff by virtue of 1) sensitive cybersecurity and technology functions they perform within systems or 2) information they receive regarding sensitive cybersecurity or technology matters. Users in these roles are subject to enhanced pre-hire screening which includes both criminal ...

experience designing, running, and improving vendor security due diligence processes.* Strong knowledge of security assurance certifications and assessments maintained by vendors (e.g., ISO 27001, SOC 2, CSA STAR/CAIQ, vendor security questionnaires)* Deep understanding of and ability to articulate the risk associated with vendor risk posture ...