51 to 75 of 186 SOC 2 Jobs in London

deploying applications into K8 and Docker environmentsData Loss Prevention (DLP) and SaaS security governance.Advanced detection engineering or SOAR playbook development.Experience supporting ISO 27001 or SOC 2 audits.Relevant certifications (e.g. CISSP, CISM, GIAC).Workplace & BenefitsAt Deliveroo we know that people are the heart of the business and we prioritise ...

and reusable content that turn every review into an opportunity to move faster next time. Compliance across frameworks relevant to our customers and jurisdictions: SOC 2, ISO 27001, ISO 42001, EU AI Act, UK Cyber Essentials, and GDPR, including evidence collection and audit coordination. Trust documentation: security whitepapers ...

centres and cloud.o Executing and concluding security controls maturity assessments against industry standards such as the NIST Cyber Security Framework, ISO27001/2, SOC2, etco Working closely with stakeholders to review all projects and initiatives, assessing them for appropriate/correct levels of security design and controls.o Identification ...

Github Actions, Concourse, CircleCI)Familiarity with maintaining HIDS systems (Wazuh preferred).NICE TO HAVEKnowledge of security standards and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them.Hands-on experience with building and maintaining a SIEM comprised of open-source and hosted componentsExperience securing ...

DevOps and DevSecOps practices and how these can be integrated into managed cyber offerings.• Knowledge of global cyber frameworks including NIST CSF, ISO 27001, SOC 2, PCI DSS, CIS, MITRE ATT and CK, and regulatory requirements across multiple jurisdictions.• Excellent written and verbal communication skills with experience presenting ...

pipelines (e.g. GitLab CI, GitHub Actions) with mandatory security checks built in. Desirable: Experience working within FinTech-related certifications or frameworks such as SOC2, ISO 27001, PCI DSS, DORA, or similar regulated environments. Relevant certifications such as Google Cloud Professional Security Engineer, CKS (Certified Kubernetes Security Specialist), or CISSP. Early ...

Security, Zero Trust & ComplianceEmbed Zero Trust principles across hybrid cloud—identity, segmentation, encryption, and posture control.Align infrastructure with regulatory and compliance frameworks (ISO 27001, SOC2, CIS, NIST).Define security integration patterns across cloud and on‐prem: IAM, PAM, KMS, certificates, secrets management.Partner with security architects to ensure platform designs meet ...

enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us!Location: Remote, within UKAbout … engineering teams, and embed them into CI/CD and GitOps workflows.Work with compliance teams to ensure adherence to frameworks such as ISO 27001, SOC 2, and GDPR, translating requirements into practical technical controls.Conduct architecture reviews, threat modeling, and code reviews to identify security risks, collaborating closely with ...

policies, standards, procedures and security roadmaps. Experience managing security programs aligned to recognized frameworks such as PCI DSS, ISO 27001, NIST CSF, CIS Controls, SOC 2, DORA, PSD2 and SWIFT CSCF (where applicable). Experience leading regulatory, customer and certification audits, including managing relationships with regulators, external auditors ...

quality. Competent in working with a range of clients, from SMEs to large enterprise environments.Experience preparing, supporting, or auditing certification audits (e.g., ISO 27001, SOC 2, Cyber Essentials)DesirableIndustry-recognised certifications such as ISO 27001 Lead Auditor/Implementer, CISSP, CISA, CISM, or similar.Exposure to penetration testing ...

security scanning Experience conducting threat modeling, secure design reviews, and engineering‐focused risk assessments Familiarity with industry standards and frameworks such as ISO 27001, SOC 2, OWASP, and NIST CSF Experience supporting digital product teams or client‐facing technology delivery units; knowledge of privacy and data protection regulations ...

native firewalls, and web application firewalls.Encryption at rest and in transit, and key management across multi-cloud environments.Working knowledge of relevant compliance frameworks (e.g. SOC 2, ISO 27001, and sector-specific regimes) as applied to cloud architecture.FinOps & Cost OptimisationPractical experience with cost visibility and management tooling (Cost Explorer ...

management tools and SIEM platforms (e.g., Splunk,Sentinel) Scriptingknowledge (Python, Bash, PowerShell) Desired Skills Cloudsecurity certifications (e.g., AWS Certified Security, Azure SecurityEngineer Associate) Familiaritywith SOC2, ISO 27001, CIS Benchmarks Experiencewith zero trust architecture and SASE models Understandingof DevSecOps tooling (e.g., GitHub Actions, Jenkins, Checkov) Competitivebase salary with bonus Privatehealthcare & wellness ...

CNAPP tools such as Wiz, including custom configuration rules and graph queries.Direct experience mapping cloud-native controls to frameworks like NIST CSF, ISO 27001, SOC2, or CIS Benchmarks.Deep operational knowledge of AWS and GCP native security suites.Proficiency in applying the Security Pillar from AWS and Google Cloud Architecture Frameworks.Ability ...

mandatory security checks. Impress Us More By Having (Desirable) Proven experience working with and adhering to FinTech-related certifications, standards, or frameworks such as SOC2, ISO 27001, PCI DSS, DORA or similar regulated environments. Relevant certifications such as Google Cloud Professional Security Engineer, CKS (Certified Kubernetes Security Specialist), or CISSP. ...

integrate mandatory security checks.Impress Us More By Having (Desirable)Proven experience working with and adhering to FinTech-related certifications, standards, or frameworks such as SOC2, ISO 27001, PCI DSS, DORA or similar regulated environments.Relevant certifications such as Google Cloud Professional Security Engineer, CKS (Certified Kubernetes Security Specialist), or CISSP.BenefitsWhy ...

and resolve production issues. Security & compliance aware engineering Work closely with Security and GRC teams to ensure services meet security and compliance requirements (e.g. SOC 2, ISO 27001). Implement secure coding practices, strong authentication and authorization patterns, and data protection controls. Contribute to internal documentation and standards … Opportunity to travel (if applicable) Flexible vacation policy Private Healthcare Employee stock ownership (ESOP) Flexible working and autonomy Pay it forward days - we offer 2 annual pay it forward days where you can take time to volunteer for a charitable cause that is important to you. Wellness days ...

Bachelor’s degree in Computer Science, Engineering, or a related field. Familiarity with security and compliance standards relevant to financial services (e.g., GDPR, DORA, SOC 2). Proficiency in Spanish or Portuguese is a plus. #J-18808-Ljbffr ...

industry.A Bachelor’s degree in Computer Science, Engineering, or a related field.Familiarity with security and compliance standards relevant to financial services (e.g., GDPR, DORA, SOC 2).Proficiency in Spanish or Portuguese is a plus.About usEbury delivers sophisticated, integrated solutions — business accounts, hedging, and financing — on a single platform ...

Bachelor’s degree in Computer Science, Engineering, or a related field. Familiarity with security and compliance standards relevant to financial services (e.g., GDPR, DORA, SOC 2). Proficiency in Spanish or Portuguese is a plus. About us Ebury delivers sophisticated, integrated solutions—business accounts, hedging, and financing ...

systems, and cloud environments (AWS, Azure, GCP).Enterprise readiness. Ensure the platform is configured, secured, and monitored to meet enterprise security and compliance requirements (SOC 2, ISO 27001, data residency, etc.).Bridge field back to product. Push field learnings into the core platform so the next deployment ...

haves:Experience with ElasticSearch/ELK stack in production.Familiarity with AWS, GCP, Snowflake, Datadog, Okta.Knowledge of security standards and frameworks (ISO 27001, OWASP, SOC 2, PCI-DSS).Experience in a regulated fintech or payments environment.Reverse engineering and analysis of minified/obfuscated code.Not ticking every ...

newly created senior leadership position, reporting directly to the CTO. With Cyber Essentials Plus already achieved and a 24/7 outsourced SOC in place, the organisation is now focused on achieving ISO 27001 certification, strengthening its governance and compliance framework, and ensuring the secure adoption of a rapidly … continuity, AI security and governance, and information security - acting as the authoritative voice on cyber and security matters across the organisation. Location: London, hybrid (2-3 days onsite) Package: £ + excellent benefits Key Responsibilities: Own security monitoring, incident response and security tooling, working closely with the outsourced SOC ...

with guardrails you trust and help secure and monitor the (code/application/device) fleet. Support compliance work where it intersects security engineering: SOC 2, ISO 27001, customer security reviews, and pen test responses. What we’re looking for 3+ years in security engineering with hands … Google, Microsoft, Oracle, Coinbase, JP Morgan and more Health, fitness and gift card discounts Cycle2Work and Electric Cars scheme Hybrid working friendly - typically 2 days/week in our London office. We’re open to discussing flexible arrangements—please share any preferences in your application We believe diversity drives ...

encryption standards (at rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute ...