5 of 5 Remote/Hybrid ISO/IEC 27001 Jobs in Oxford

relevant ISO standards. Oversee internal support and workplace technology services, including service desk performance, device lifecycle, endpoint management and joiner / mover / leaver processes. Strengthen asset and configuration management, including CMDB effectiveness and lifecycle visibility. Own operational risk reporting and ensure risks are clearly assessed … incidents and making clear decisions when services are under pressure. Experience improving operational governance, service measures, escalation routes and reporting. Working knowledge of ISO 27001 and ISO 20000, including supporting controls, audits or improvement activity. Understanding of asset management, configuration management, CMDB principles ...

secure, well-tested code – unit, integration and end-to-end, and raise the bar for others through code review. Implement authentication and authorisation (OAuth2 / OIDC), session management and fine-grained permissions. Build in observability from the start: structured logging, metrics, tracing and alerting for the services you own. … you. Communicate clearly with stakeholders of varying technical background, including non-engineers and customers. Infrastructure (welcome, not required) Contribute to infrastructure as code (Terraform / CloudFormation) and CI / CD (GitHub Actions / Argo CD) alongside the DevOps team. Support cloud operations with sensible defaults, cost awareness ...

Doing: Assess security risks and controls across systems, projects, business areas and suppliers, using relevant standards and guidance such as ISO 27001, NIST, CIS Controls and the NCSC Cyber Assessment Framework. Identify control gaps and track risk treatment plans, exceptions, corrective actions and remediation with their … controls and risks, work with owners on practical actions, and maintain accurate, auditable records. Knowledge of information security standards or guidance, such as ISO 27001, NIST, CIS Controls or NCSC guidance. An understanding of supplier security risk and a broad range of controls, including access management ...

part of an experienced team, build your skills, and grow professionally. Dionach by Nomios holds impressive certifications, including CREST, CHECK, PCI QSA, and ISO 27001. With our focus on enhancing customers' security and fostering team development, you'll be joining a company that prioritizes both your growth ...

effectiveness of our security tools and operational processes, including alert triage, incident response and vulnerability escalation. You’ll manage and challenge our SOC / MSSP provider, working closely with Technology, Engineering, GRC, Threat and Vulnerability colleagues to improve how we detect threats, respond to incidents and reduce risk. … learned. Own and exercise incident response plans and playbooks covering critical services, cloud, identity, endpoints, suppliers and data compromise. Manage and challenge the SOC / MSSP on alert quality, triage, escalation and measurable improvements in detection and response. Improve the effectiveness of security tooling, logging, detection rules and response ...