25 of 25 Remote/Hybrid ISO/IEC 27001 Jobs in the Midlands

aligned with cyber security, compliance, and business objectives Oversee and manage the information and data process for the organisation Drive a programme of change / training that embeds secure information practices throughout the organisation’s culture, technology, and operations Manage and own the development of the company IMS data … / information related processes Champion the value of information as a corporate asset and support digital transformation programmes with strong data governance principles. Oversee and support the management of information between the company and its core partner and customer organisation. Maintain a holistic view of all information-related activity ...

Cyber and Information Assurance Consultant Job Title Cyber and Information Assurance Consultant Hours Per Week 37 Reporting to Reporting to Principal Cyber Consultant / Head of Services Location Location Remote-first, with attendance at Nexor’s Nottingham office and customer locations as required. Regular UK travel may form part … lifecycle principles. Residual risk and risk acceptance. Assurance evidence and traceability. Frameworks and Standards Working knowledge of some of the following: ISO / IEC 27001. ISO / IEC 27005. NCSC Cyber Assessment Framework. NIST Cybersecurity Framework. MOD Defence Standard ...

Controls & Oversight Lead Location:Warwick Hybrid 50 / 50 Duration: 21 / 03 / 2027 MUST BE PAYE THROUGH UMBRELLA Description: We are seeking an experienced GRC Controls & Oversight Lead to support the governance, assurance, and control environment across IT and Operational Technology (OT) domains. This role … Experience working within Governance, Risk & Compliance (GRC), assurance, audit, controls, or oversight functions. Strong understanding of security and technology control environments across IT and / or OT domains. Experience conducting or supporting control testing, assurance reviews, compliance assessments, or audit activities. Ability to analyse complex processes and identify control ...

Role Title: GRC Controls & Oversight Lead Location: Warwick - Hybrid 50 / 50 Duration: 21 / 03 / 2027 Rate: £(Apply online only) per day - Umbrella only Candidates must hold active SC clearance Description: We are seeking an experienced GRC Controls & Oversight Lead to support the governance, assurance … Experience working within Governance, Risk & Compliance (GRC), assurance, audit, controls, or oversight functions. Strong understanding of security and technology control environments across IT and / or OT domains. Experience conducting or supporting control testing, assurance reviews, compliance assessments, or audit activities. Ability to analyse complex processes and identify control ...

Core Competencies Infrastructure & Systems Management Active Directory & Windows Server: Administer servers, user accounts, group permissions, firewalls, and performance monitoring. Hardware & Domain Services: Maintainon-premisehardware / servers; manage DNS updates, domain renewals, and SSL / TLS certificates. User Support: Supported internal IT operations, including Office applications, secure email … Network Security: Implementfirewallcontrols and email security standards (SMTP, TLS) to safeguard business data. Compliance & Testing: Contributeto ISO 27001 compliance (policy / documentation); review penetration testing and vulnerability scans to proactively mitigate risk. Business Continuity,Operational Reliability Disaster Recovery:Monitorbackup systems, conduct regular restore testing ...

operational reality supports the security claims we make to customers, partners and auditors. Lead our assurance and certification activity, including Cyber Essentials Plus, ISO 27001 and other relevant standards. Bring together the security expertise that already exists across the business into one coherent, prioritised programme … similar role, ideally where systems are delivered into and operated within customer environments. A track record of achieving and maintaining certifications such as ISO 27001 and Cyber Essentials Plus, including managing audits. Practical understanding of securing deployed infrastructure, including firewalls, patching, secure configuration and equipment lifecycle ...

safeguard the current and future technology estate, respond to security incidents, drive continuous improvements in security services and standards, and ensure compliance with ISO and Cyber Essentials Plus. Working closely with the CISO, you'll provide valuable security insights, metrics, and reporting that shape the security strategy, helping … protection controls, including Data Loss Prevention (DLP) , Sensitivity Labels , and encryption . Manage security awareness training and phishing simulation programmes. Support and maintain ISO 27001 , Cyber Essentials , and Cyber Essentials Plus certifications. Produce security metrics , dashboards , and security reports to inform security strategy . Lead ...

Full-time | Remote / Hybrid Help shape trust, security and compliance in healthcare technology BC Platforms is a global data and technology company helping transform healthcare through secure data platforms, real-world data, analytics and scientific expertise. As we continue to grow our Technology & Platform organization, we expect … trust and compliance initiatives across cloud-based and regulated environments Driving audit readiness, compliance programs and evidence-based assurance across frameworks such as ISO 27001, GDPR, SOC 2 and GxP Providing leadership on risk management, governance and security strategy Partnering with customers, auditors and key stakeholders ...

security in design, code and backlog decisions. Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI / CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security … Contribute to security standards, metrics and ways of working that improve product security maturity over time. Support wider assurance and certification activity, including ISO 27001 or other relevant standards, with evidence of how our softwareis securely built. Requirements - Product Security Engineer - not exhaustive: A strong software ...

with the ability to work effectively in cross‐functional teams. In‐depth understanding of the Microsoft ecosystem, including hands‐on experience with Firewalls, IDS / IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL. Familiarity with scripting toolsets and automation with Microsoft ARM, BICEP, PowerShell, Python. Track record … have a range of support to help you keep yourself well. We have the thrive mental health app, our colleague assistance programme available 24 / 7, our own in‐house mental health first aiders, support groups and a dedicated team to make sure we are covering your needs. There ...

solutions. Understanding of the regulatory and professional environment within property, surveying or professional services organisations. Knowledge of RICS standards and guidance. Familiarity with ISO 42001, ISO 27001 and AI governance frameworks. Relevant Microsoft, AI, Business Analysis or Project Management certifications. Strategic thinking Leadership ...

Defender security assessment tools, vulnerability scanning tools, and SIEM platforms.* In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS / IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL.* Expertise in utilizing Azure DevOps to drive efficient and collaborative development processes, including the development … have a range of support to help you keep yourself well. We have the thrive mental health app, our colleague assistance programme available 24 / 7, our own, in-house mental health first aiders, support groups and a dedicated team to make sure we are covering your needs**There ...

risks are accurately recorded and managed. Help maintain the Cyber Risk Management Framework and assess risks against recognised standards, including SPF, NCSC guidance, ISO 27001 and NIST-aligned approaches. Produce cyber risk reports, analysis and briefings for senior leaders and assurance forums. Support cyber assurance activities ...

maximise your potential. A focus on your well-being offering 1 day of paid well-being leave and free access to the 24 / 7 Employee Assistance Programme Generous pension scheme (with us contributing 12% when you contribute 6%) Access to our Flexible Benefits Scheme, where you can choose … Ability to challenge constructively and drive accountability. Strong organisational and prioritisation skills. Desirable qualifications: CISSP, CISM, CRISC, GIAC certification, ITIL Foundation, SIAM Foundation, ISO 27001 Lead Auditor or Lead Implementer, Cyber Assessment Framework (CAF) knowledge Our Inclusive Commitment At NHS Supply Chain, we are committed ...

both technical and non-technical colleagues. Experience working with external security providers, vulnerability management platforms, and SaaS security. Knowledge of frameworks such as ISO 27001 or NIST CSF, along with relevant professional certifications As a Cyber Security Engineer, you will be responsible for maintaining and enhancing ...

business stakeholders. Support governance, reporting, audit readiness and continuous improvement. Implement automation and operational best practices where applicable. Technical Skills : CVSS, NIST, DORA, ISO 27001, Cyber Defence Preferred Skills : Enterprise-scale operations experience, stakeholder management, automation mindset, strong analytical and problem-solving capabilities. ...

reporting, audit readiness and continuous improvement. Implement automation and operational best practices where applicable. Required Experience - 9+ years Technical Skills - CVSS, NIST, DORA, ISO 27001, Cyber Defence Preferred Skills Enterprise-scale operations experience, stakeholder management, automation mindset, strong analytical and problem-solving capabilities. Benefits A supportive ...

testing engagements, third-party providers and remediation work. You will manage scoping, execution, reporting and remediation, align activities with security standards (OWASP, NIST, ISO 27001, PCI-DSS, GDPR), and communicate #J-18808-Ljbffr ...

Digital Resilience and Business Continuity (BCDR) include: Advanced Azure Site Recovery implementation experience Azure Recovery Services and backup platform expertise CISSP certification Extensive ISO 27001 experience Knowledge of government business continuity audit requirements Experience working within central government or highly regulated environments In return ...

work across engineering, operations and stakeholders to ensure audit readiness. The role requires 9+ years of experience and expertise in CVSS, NIST, DORA, ISO 27001 and cyber defence, with a focus on automation and process improvement. #J-18808-Ljbffr ...

work closely with the Administration business and cross-functional stakeholders, lead in development and configuration of admin platforms, and mentor junior colleagues while supporting ISO27001 governance. #J-18808-Ljbffr ...

understanding Participate in the training and development of the Calculations & Benefits Team as well as mentoring less experienced colleagues Ensure processes support Isio’s ISO27001 What we’re looking for Proven record of delivering calculation solutions across pensions admin systems Excellent knowledge of DB / DC pension schemes … their calculation requirements Management of key stakeholders at all levels in a typical corporate environment Experience of relational databases Demonstrable programming experience (e.g. SQL / .NET / VBA) Experience of management responsibilities such as, work prioritisation, holding others to account, risk management Experience of managing a small team ...

compliance with the regulatory requirements of the Solicitors Regulation Authority and ICO, whilst developing and maintaining the firm’s accreditations: ISO9001 (quality assurance) and ISO27001 (information security). You will work on short-term queries and several long-term projects at the same time, which means you will need effective … advice on all compliance and regulatory queries and Capsticks’ policies and processes. Queries will be focused on (but are not limited to) conflicts, AML / CDD, SRA compliance, and data protection. Interpreting regulations and policies to make informed, risk-based decisions and escalating complex issues where appropriate. Researching ...

Threat Management specialists to run realistic security simulations. Drive the continuous improvement of technical security controls, procedures and regular performance reporting packs. Support 24 / 7 environment monitoring through out-of-hours escalation cover and assist with seasonal budget management. What You'll Bring: Proven Information Technology experience, ideally … planning. Demonstrable comprehension of information security concepts, including malware, attack vectors and emerging threats. Familiarity with industry security standards such as PCI-DSS or ISO27001, backed by relevant security certifications. Strong communication skills, acting as a calm, clear bridge between technical teams and senior management under pressure. Experience creating operating ...

within a similar role Contracts background within healthcare or with exposure to the NHS or private medical world would be advantageous Qualifications within procurement / contract management would be advantageous Must have excellent … negotiation skills as well as strong communication skills Excellent English Language skills Previous experience with Salesforce Any exposure to regulations & standards such as ISO9001, ISO27001, Cyber Essentials Scheme, UK / EU GDPR would be fantastic Based relatively close to Lincoln and comfortable going into the office for x2 days ...