3 of 3 Remote/Hybrid ISO/IEC 27002 (supersedes ISO/IEC 17799) Jobs in Reading

including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and customer compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide senior oversight of third … party / vendor security risk and critical supplier assurance. Support security assurance for customer contracts and external stakeholder requirements. Develop security reporting, KPIs and dashboards for senior management. Work with security operations and engineering teams to identify vulnerabilities, manage remediation and improve security controls. Provide security input into ...

policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks … years' experience in an Information Security, GRC, compliance or security consultancy role. Practical experience implementing and managing ISO 27001 / ISMS rather than purely theoretical knowledge. Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO ...

Lead security risk identification, assessment, treatment and acceptance activities. Conduct threat modelling, security assessments and architectural risk reviews. Apply recognised frameworks including ISO 27001, NIST RMF and NIST 800-53. Support security accreditation, governance and assurance processes. Provide recommendations to reduce risk while enabling business … conducting threat modelling, risk assessments and security assurance activities. Working knowledge of ISO 27001, ISO 27002, NIST RMF and NIST 800-53 frameworks. Experience designing secure cloud, infrastructure and network solutions. Strong stakeholder engagement, communication and documentation skills. Ability ...