51 to 75 of 83 SOC 2 Jobs in London

with the business to, supporting risk assessments, mitigation strategies, and reporting. Information Security: Lead the legal and compliance aspects of Prolific's information security programme, including ISO 27001 and SOC2 standards. Maintain Prolific's information security certifications. Closely collaborate with the tech team to ensure robust information and cyber security. Corporate Governance: Manage corporate governance, including board and shareholders approvals More ❯

counsel and manage legal spend; Support on customer contracts, sales processes, and commercial compliance; Monitor evolving international regulatory and privacy environments and support with our audit processes (GDPR, ISO, SOC2, etc.). Business operations Build internal operational processes to improve speed, clarity, and accountability; Own planning processes (e.g. annual planning, KPIs, hiring plan, budgets); Partner with the CEO and functional More ❯

inspired by a vision to restore trust in internet businesses by enabling companies to improve and prove their security.From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous-not just a More ❯

with ambiguity and shifting priorities. Nice to Have Experience with tools like CharlieHR, Vanta, or Remote. Exposure to finance, legal, or IT admin workstreams. Familiarity with security frameworks like SOC 2, ISO 27001, or HIPAA. A spreadsheet wizard - you love building smart, user-friendly sheets that automate tasks and surface insights. More ❯

inspired by a vision to restore trust in internet businesses by enabling companies to improve and prove their security.From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous-not just a More ❯

third country, outside of the EEA, when it is processed by Greenhouse. Greenhouse meet the technical and organisational data security measures outlined in the GDPR Article 32, and are SOC2 Type II certified. We do not envisage that any decision will be taken about your application using automated means. More ❯

environment Worked on teams self-hosting Next.js on their Kubernetes (k8s) cluster Earned Cloud Solutions Architect Certifications Engaged with platform security & privacy regulatory standards like PCI DSS, HIPAA, and SOC-2 Attained an Undergraduate degree in Computer Science, Engineering or related fields Competitive compensation package, including equity. Learn and Grow - we provide mentorship and send you to events that More ❯

it. We are seeking an experienced Director of Sales Development (NA EAST/EMEA) to drive pipeline generation and new business acquisition across Velocity (20-200 employees) - Upmarket East (2,000+) segments in New York & all of EMEA. This leader will be responsible for a significant portion of our quarterly new business. You'll lead, develop, and scale a … by a vision to restore trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous-not just a More ❯

by a vision to restore trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous-not just a More ❯

by a vision to restore trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous-not just a More ❯

inspired by a vision to restore trust in internet businesses by enabling companies to improve and prove their security.From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous-not just a More ❯

existing technology stack, including PostgreSQL, NestJS, PostgREST, and an AngularJS frontend. Define security policies, standards, procedures, and guidelines to align with industry best practices and regulatory requirements (e.g., GDPR, SOC2). Manage security incidents and breaches: Lead incident response efforts, conduct thorough investigations, and implement corrective actions. What we are looking for: 7+ years experience in a Senior/Team More ❯

existing technology stack, including PostgreSQL, NestJS, PostgREST, and an AngularJS frontend. Define security policies, standards, procedures, and guidelines to align with industry best practices and regulatory requirements (e.g., GDPR, SOC2). Manage security incidents and breaches: Lead incident response efforts, conduct thorough investigations, and implement corrective actions. What we are looking for: 7+ years experience in a Senior/Team More ❯

fighting the good fight against cyber-attacks.Are you ready to join us on the journey to elevate Everywhere Work? Job Summary: We are seeking a Database Administrator (DBA) with 2-5 years of hands-on experience, specializing in PostgreSQL and SQL Server including AWS and Azure environments. The ideal candidate will be proficient in managing cloud-native database deployments … perform root cause analysis, and contribute to ongoing operational improvements. Security & Compliance Support: o Enforce access controls, encryption, and secure connections. o Contribute to audits and compliance efforts (e.g., SOC2, ISO 27001, and FedRAMP, if applicable). Required Qualifications: US citizenship and must be located domestically in the U.S. Work Monday through Friday US Day hours. 2-5 years More ❯

working in a rapidly evolving fluid company is vital. The successful applicant must have experience in a firm that has delivered product to external customers. Knowledge and Experience Required: 2-3 years + experience as a hands-on Technical Support Engineer/Application Support Analyst Hands on experience administering Linux and Windows estates Excellent problem-solving and communication skills … Beneficial Experience: Hands-on experience with Amazon Web Services Hands-on experience with Kubernetes/containerised environments Experience with No-Code tools such as Retool or Appsmith Experience with SOC2/ISO 27001 Certifications. Other required Skillsets/Traits: Experienced in taking ownership, responsibility and accountability of projects end to end. Excellent project management skills Strong written and verbal communication More ❯

Represent security on audits and assessments, ensuring compliance with internal and external requirements. Provide assurance to stakeholders through detailed reporting and metrics. What we are looking for: Minimum of 2 years' experience in Information and Cyber Security, with a desire to work within a security risk team. Highly organised with experience of planning and reporting data, information and updates. … MSc Information Security, CICA, CRISC, CISM and/or Data analysis beneficial but not essential if experience validates skills. Knowledge of security frameworks (e.g., NIST CSF, ISO 27001, SOC1,2). Prince 2, MSP, APMQ advantageous. A desire to continue learning and developing security skills and qualifications If the above role is of interest please apply to this More ❯

detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. • Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). • Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. • Oversee endpoint security, cloud network and API security for robust protection across all assets • Define … Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. • Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. • Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). • Threat Management & Incident Response More ❯

Information Security GRC Manager | ISO27001, SOC2, Azure Security | Global Trading Platform £70–80k base + 10% bonus Hybrid in Coventry with monthly travel to London Training budget for certifications + conference attendance Strong emphasis on professional autonomy and ethical leadership A newly created opportunity to lead and shape the GRC function of a global financial group at a pivotal time … supporting the secure rollout of U.S. banking operations, driving ISO27001 and SOC2 maturity, and mentoring an evolving InfoSec team. This is a hands-on manager-level role with real scope: oversight of policy, third-party risk, architectural reviews, and cloud compliance. You'll work closely with the Head of InfoSec to maintain audit readiness, improve security posture, and influence business … accountability. What you’ll bring: 5+ years in InfoSec, IT Security or Ops within a regulated environment Certification required: CISSP, CISM, CRISC, or equivalent Strong knowledge of ISO27001:2022, SOC2 Type II, NIST CSF, PCI DSS, GDPR, DORA Confident with security risk assessments, audit responses, and policy governance Hands-on cloud security experience: ideally with Azure and the Shared Responsibility More ❯

Information Security GRC Manager | ISO27001, SOC2, Azure Security | Global Trading Platform £70–80k base + 10% bonus Hybrid in Coventry with monthly travel to London Training budget for certifications + conference attendance Strong emphasis on professional autonomy and ethical leadership A newly created opportunity to lead and shape the GRC function of a global financial group at a pivotal time … supporting the secure rollout of U.S. banking operations, driving ISO27001 and SOC2 maturity, and mentoring an evolving InfoSec team. This is a hands-on manager-level role with real scope: oversight of policy, third-party risk, architectural reviews, and cloud compliance. You'll work closely with the Head of InfoSec to maintain audit readiness, improve security posture, and influence business … accountability. What you’ll bring: 5+ years in InfoSec, IT Security or Ops within a regulated environment Certification required: CISSP, CISM, CRISC, or equivalent Strong knowledge of ISO27001:2022, SOC2 Type II, NIST CSF, PCI DSS, GDPR, DORA Confident with security risk assessments, audit responses, and policy governance Hands-on cloud security experience: ideally with Azure and the Shared Responsibility More ❯

detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust protection across all assets Define … Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response More ❯

detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust protection across all assets Define … Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response More ❯

detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust protection across all assets Define … Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response More ❯

Senior Enterprise Architect - Cloud City of London Hybrid (3/2 split) Contract £950 per day via umbrella cer Financial are working alongside an international bank who are based in the City of London. They are seeking a Senior Enterprise Architect to work with them on a contract who will play a pivotal role in designing, implementing, and managing … of TOGAF and Zachman methodologies Knowledge of Infrastructure as Code tools (e.g. Terraform, ARM/Bicep, etc.) Knowledge of cloud security best practices and compliance standards (e.g. ISO 27001, SOC2, GDPR) Experience with containerisation and orchestration technologies (e.g. Docker, OpenShift, Kubernetes) Strong understanding of networking concepts and technologies Relevant cloud certifications (e.g. Azure Solutions Expert, Google Cloud Professional Architect) are More ❯

of TOGAF and Zachman methodologies Knowledge of Infrastructure as Code tools (e.g. Terraform, ARM/Bicep, etc.) Knowledge of cloud security best practices and compliance standards (e.g. ISO 27001, SOC2, GDPR) Experience with containerisation and orchestration technologies (e.g. Docker, OpenShift, Kubernetes) Knowledge of ECB/DORA standards applicable to financial institutions. Daily Rate: 1150 per day inside IR35 via an … umbrella company Tenure: Up to 30/05/2026, extendable Hybrid: 3 days a week onsite in City of London; 2 days remote More ❯

of TOGAF and Zachman methodologies Knowledge of Infrastructure as Code tools (e.g. Terraform, ARM/Bicep, etc.) Knowledge of cloud security best practices and compliance standards (e.g. ISO 27001, SOC2, GDPR) Experience with containerisation and orchestration technologies (e.g. Docker, OpenShift, Kubernetes) Knowledge of ECB/DORA standards applicable to financial institutions. Daily Rate: £1150 per day inside IR35 via an … umbrella company Tenure: Up to 30/05/2026, extendable Hybrid: 3 days a week onsite in City of London; 2 days remote Keywords: Enterprise Architect, Azure, TOGAF, DORA, ECB, Zachman, cloud, Google Cloud platform, GCP, IaaS, PaaS, SaaS More ❯