21 of 21 ISO/IEC 27001 Jobs in Oxfordshire

Title: Cyber Security Assurance Specialist Location: Culham, UK (23 days / week on site) Type & Duration: Contract |6+ Months Contract with InsideIR35 Job Description: Role Overview: A cross-functional role combining advisory and hands-on responsibilities. Focus areas include security assurance, risk management, architecture review, vulnerability management, cyber defence … compliance (Gov Assure, CAF, ISO 27001, Cyber Essentials), and drive secure-by-design practices. Essential Skills: Designing & implementing secure cloud / infrastructure architectures Risk assessment & maintaining risk registers (ISO 31000, FAIR, OWASP) Knowledge of Gov Assure, CAF, ISO 27001 ...

cyber defence posture, and embedding risk-aligned, secure-by-design controls across cloud, infrastructure, and applications. Key Responsibilities: Conduct technical risk assessments across IT / OT / cloud systems Provide secure-by-design guidance for cloud, infrastructure, and application projects Maintain and update the security risk register Perform … activities and audits Experience conducting security audits and implementing remediation plans Proficiency in securing platforms such as Entra ID, Microsoft 365 E5, Azure IaaS / PaaS, and Windows / Linux / Unix systems Strong knowledge of security operations tooling including SIEM, EDR / XDR, SOC operations ...

advising on security architecture & design patterns Owning and maintaining enterprise risk registers Leading technical assurance reviews aligned to GovAssure / CAF / ISO27001 Supporting audit, compliance, and remediation activities Embedding security controls across platforms (Azure, M365, infrastructure) Working closely with engineering, architecture, and delivery teams Key experience: Strong … secure cloud or infrastructure design (Azure / M365) Experience with risk frameworks (ISO 31000, NIST, OWASP etc.) Knowledge of GovAssure, CAF, ISO27001, Cyber Essentials Entra ID / Azure / M365 SIEM / EDR / vulnerability management tools Access control models (RBAC / ...

27001, NIST, CAF, Cyber Essentials, and GovAssure. Assess and secure platforms including Entra ID (Azure AD), Microsoft 365 E5, Azure IaaS / PaaS, and Windows / Linux / Unix systems. Utilise security tooling such as SIEM, EDR / XDR, and vulnerability management platforms … models (RBAC, ABAC), and logging standards. Support incident management, vulnerability assessments, and SOC-related activities. Contribute to secure software supply chain practices, including CI / CD security reviews. Interpret threat intelligence, CVEs, and CVSS scores to inform risk-based decision making. Collaborate with stakeholders across technical and non-technical ...

diligence, contractual security commitments and third‐party risk management Help define how security responsibilities and capabilities are allocated across Aurora’s technology, legal / compliance and business functions, ensuring clear accountability, effective challenge and strong delivery Drive security by design across Aurora’s products, platforms, systems and infrastructure, working … sufficient depth to guide strategy, challenge decisions and work effectively with specialist software engineering and IT teams Broad experience across areas such as product / application security, cloud / infrastructure security, identity and access management, incident response, vulnerability management and security governance Proven experience developing and delivering ...

Design and evolve scalable backend services in Python using FastAPI for high-availability, high-throughput workloads. Build well-versioned RESTful APIs aligned to OpenAPI / Swagger, with strong conventions for consistency, idempotency, and backward compatibility. Implement authentication and authorization using OAuth2 / OIDC, session management, and fine-grained … meet performance budgets and latency goals. Integrate with AI pipelines and model-serving endpoints, including streaming responses, async inference jobs, and robust error / retry semantics. Palantir Foundry Integration Work with Palantir Foundry to build and maintain data pipelines, ontologies, and integrations that connect backend services to Foundry-based ...

Specialist (Privileged Access Management) Culham (2-3 days onsite) Contract until 30 / 09 / 2026 (extension possible) £55 / hour Umbrella Inside IR35 Overview We're looking for an experienced Privileged Access Management (PAM) Specialist to support the implementation, optimisation, and ongoing management of PAM controls … Experience Proven hands-on experience with PAM toolsets Strong knowledge of privileged access controls and security best practice Experience with: Windows Server and Linux / Unix environments Network device onboarding into PAM Credential vaulting and session management Understanding of ISO 27001 and / ...

Specialist - £400 P / D (Inside IR35) – 5 Month Contract – Hybrid 2 / 3 Days in Oxford – BPSS Required Overview We are seeking an experienced Privileged Access Management (PAM) Specialist to join a major UK government research organisation on a long-term programme of work. This … Responsibilities Implement, configure, and manage enterprise PAM toolkits. Configure and support Privileged Remote Access solutions. Manage credential vaulting, automated password rotation, and check-in / check-out workflows. Configure and maintain session monitoring and recording. Support discovery, onboarding, and lifecycle management for service accounts. Onboard Windows, Linux / ...

Cyber Security Assurance Specialist Culham (2 / 3 days onsite) £55 / hour Umbrella. £440 / day. Contract until 18 / 12 / 2026 SC Clearance required (active or lapsed within 24 months) IR35: In Scope We're supporting a major UK public sector organisation … design patterns Support vulnerability management and remediation planning Embed security controls aligned to organisational risk appetite Support internal audits and external compliance (eg ISO 27001, CAF, Cyber Essentials) Collaborate with technical and non-technical stakeholders to communicate risk effectively ...

etc. As the Cyber Security Engineer, you will have strong technical expertise across Cyber Security including working with technologies and standards such as ISO 27001, SOC2 and NIST. This role will require a heavy hands on technical expertise with a wide range technologies that they … Balancers & Endpoint Security - Knowledge of cloud security within Azure & AWS environments - Knowledge of cyber security principles, methods, technologies, and standards like NIST, SOC2, ISO 27001 Location: Hybrid - 1 - 2 days per week in Oxford Salary: £60,000 - £75,000 per annum plus benefits Apply ...

etc. As the Cyber Security Engineer, you will have strong technical expertise across Cyber Security including working with technologies and standards such as ISO 27001, SOC2 and NIST. This role will require a heavy hands on technical expertise with a wide range technologies that they … Balancers & Endpoint Security - Knowledge of cloud security within Azure & AWS environments - Knowledge of cyber security principles, methods, technologies, and standards like NIST, SOC2, ISO 27001 Location: Hybrid - 1 - 2 days per week in Oxford Salary: £60,000 - £75,000 per annum plus benefits Apply ...

Details Role: PAM Specialist Location: Culham - typically 2-3 days per week on site Duration: Until 30 / 09 / 2026 , with possible extension IR35: In scope Rate: Up to £50-55 / hour Environment: Cyber / Public Sector, security-focused What you would be doing … Implementing and managing PAM toolkits end-to-end Configuring and managing Privileged Remote Access Designing and operating credential vaulting , password rotation , and check-in / check-out workflows Setting up and optimising privileged session recording and monitoring Driving service account discovery and lifecycle management Onboarding Windows Server, Linux / ...

Title: PAM Specialist (Privileged Access Management) Location: Culham, Oxfordshire (Hybrid - 2-3 days onsite) Contract: Until September 2026 (extension likely) Rate: £55 / hour Umbrella OR £40.08 / hour PAYE Overview We are seeking an experienced PAM Specialist to join a high-profile programme within a secure … password rotation, and access workflows Configure privileged session monitoring and recording Manage service account discovery and life cycle processes Onboard systems including Windows, Linux / Unix, and network devices into PAM platforms Support Active Directory privileged account management Integrate PAM solutions with SIEM tools for logging and alerting Troubleshoot ...

Specialist - £410 P / D (Inside IR35) – 8 Month Contract - Hybrid 2 / 3 Days in Oxford – BPSS Required Role Overview Our longstanding enterprise corporation that is backed by central government is hiring a IAM specialist with IGA platform,Azure AD and identity lifecycle management and JML automation. … Essential Skills & Experience Hands-on experience implementing IGA platforms (SailPoint, Saviynt, Omada, One Identity, or equivalent) Proven experience integrating IGA with Microsoft Entra ID / Azure AD Strong understanding of identity lifecycle management and JML automation Experience integrating HR systems and other authoritative data sources Solid knowledge of authentication ...

including policies and standards Establish governance processes aligned to enterprise security frameworks Conduct OT risk assessments and gap analyses against recognised standards (e.g. IEC 62443, NIST CSF, CAF) Identify and oversee implementation of security controls across OT environments Provide technical oversight when working with managed service providers … oversee third-party vendors and managed security services Strong documentation and stakeholder communication skills Desirable Experience Experience in solution architecture Familiarity with SIEM / SOC integration in OT environments Experience with OT asset discovery and monitoring tools Knowledge of regulatory frameworks within critical infrastructure (e.g. NIS) Experience contributing ...

response, and vulnerability management Maintain and manage the IT risk framework and risk register Ensure alignment with regulatory requirements and industry frameworks (e.g. ISO 27001, NIST, DORA) Partner with senior leadership to embed security and risk awareness across the organisation Provide regular reporting to executive stakeholders ...

agentic AI systems in production Strong Python skills and hands-on experience with LLM frameworks (LangGraph, LangChain, Haystack, or similar) Experience deploying AI / ML systems into production environments Familiarity with Docker, Git, and cloud platforms (AWS preferred) Understanding of secure deployment patterns - air-gapped, on-premises, or sovereign … cloud Preferred Experience with multimodal reasoning Experience with edge or offline AI deployments Familiarity with Kubernetes (EKS / OpenShift) for monitoring and managing deployed applications MLOps experience - model evaluation, monitoring, reproducibility Observability tooling for agentic systems (model drift, agent behaviour, performance monitoring) Experience with agent orchestration patterns and inter ...

operations. The Role You’ll play a key part in strengthening the organisation’s security capability by: Integrating cyber security tools into the CI / CD pipeline Implementing and improving vulnerability monitoring Supporting and coordinating penetration testing activity Embedding recognised cyber security standards and best practice Working with technical … Cyber Security Engineer , DevSecOps Engineer , or in a similar security-focused role. You’ll likely bring experience in: Security tooling within CI / CD or software delivery pipelines Vulnerability management and monitoring Pen testing or remediation support Cyber security standards such as ISO 27001, NIST ...

Delivering platform improvements and transformation projects across compute, storage, networking, and identity. Implementing infrastructure automation and repeatable deployment models using PowerShell, Ansible, and CI / CD pipelines. Acting as a senior technical lead on projects, making key design decisions and ensuring best practice engineering standards. Designing and implementing secure … endpoint security, Zero Trust principles). Leading infrastructure upgrade and lifecycle projects, including major version upgrades, migrations, and re-platforming activities. Contributing to ISO 27001 compliance projects, including control implementation, gap analysis, and audit readiness. Designing and testing disaster recovery and business continuity solutions as part ...

expertise in Microsoft Azure IaaS & PaaS, Active Directory, Group Policy, DNS, DHCP, Windows Server 2019-2022, and SQL Server administration. Deep understanding of LAN / WAN design, VLANs, VPNs, routing, switching, and firewall management. Experience with Microsoft 365, Intune, and Endpoint Manager. Advanced PowerShell scripting and automation skills. Proven … experience managing secure environments aligned with Cyber Essentials Plus or ISO 27001. Ability to work independently, prioritise effectively, and deliver projects to completion with minimal supervision. Degree in Computer Science, Information Technology, or equivalent experience. Desirable certifications include Microsoft Certified: Azure Administrator Associate (AZ-104) or Azure Solutions ...

tools and resources used to support DEKRA’s internal systems and platforms Supporting the security and reliability of applications, following company cyber security and ISO27001 requirements Helping to test applications and ensure quality standards are maintained before systems are released or updated Writing and maintaining technical documentation to support systems … Monday, 18th May 2026 Desired Skills IT skills Attention to detail Number skills Analytical skills Logical Team working Initiative Qualifications English GCSE, grade C / 4 (Essential) Maths GCSE, grade C / 4 (Essential) About the Employer DEKRA AUTOMOTIVE LIMITED DEKRA’s promise is to ensure the safety ...