1 to 25 of 53 ISO/IEC 27001 Jobs in Scotland

operational security positions. Knowledge across relevant information security and privacy management frameworks and legislation, such as NIST, the NIS Regulations 2018, ISO / IEC 27001, ITIL, COBIT, Data Protection Act 2018 (GDPR). Proven experience of working with strategic vendors and partners … positions. (Lead Criteria) Knowledge across relevant information security and privacy management frameworks and legislation, such as NIST, the NIS Regulations 2018, ISO / IEC 27001, ITIL, COBIT, Data Protection Act 2018 (GDPR). Proven experience of working with strategic vendors and partners ...

stakeholders and support wider security awareness activity. Key Skills & Background: ** Strong experience within Information Security, with a particular focus on GRC, risk management and / or security compliance. ** Practical experience working with ISO 27001, including the ISMS lifecycle, risk assessment, treatment and security controls. ** Experience … across both internal security risk assessments and third-party / vendor risk management. ** Good technical understanding across areas such as cloud / SaaS, identity, networks, endpoints and security operations. ** Experience using an enterprise GRC platform, ideally ServiceNow GRC, although experience with other platforms such as OneTrust will also ...

What else would help Understanding of Secure by Design principles and their application in product lifecycle development. Familiarity with security and information assurance frameworks (ISO27001 / 27004 / 27005 and NIST Risk Management Framework). The ability to keep abreast of current trends and events relating to security. … could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: https: / / careers.uk.leonardo.com / gb / en / security-and-vetting Why join us Time to Recharge: Enjoy generous leave with ...

What else would help** * Understanding of Secure by Design principles and their application in product lifecycle development.* Familiarity with security and information assurance frameworks (ISO27001 / 27004 / 27005 and NIST Risk Management Framework).* The ability to keep abreast of current trends and events relating to security. … could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: https: / / careers.uk.leonardo.com / gb / en / security-and-vetting **Why join us** At Leonardo, our people ...

organisations that have OT networks and standards used in the energy sector, such as the Cyber Assessment Framework and IEC ISA 99 / 62443. You’ll be helping multiple clients with different aspects of their security. The role is interesting and varied and a great opportunity … Practical experience applying recognised cyber security frameworks and standards, including IEC 62443, NIST Cybersecurity Framework, NIST SP 800-82, ISO / IEC 27001 and the NCSC Cyber Assessment Framework. Experience planning, managing and delivering consultancy engagements, including managing client expectations, budgets ...

approaches for complex OT systems and programmes. Support security reviews, risk assessments and assurance activities using relevant frameworks such as NCSC CAF, IEC 62443, ISO 27001 and NIST CSF. Support accreditation, regulatory and compliance activities where required. Produce clear, client-ready deliverables, including assessments … operational safety, resilience and availability considerations. Practical knowledge of cyber risk and threat assessment approaches. Familiarity with relevant standards and frameworks, such as IEC 62443, NCSC CAF, ISO 27001, NIST CSF and the NIS Regulations. Awareness of common OT and IT security technologies, networks ...

Experience ITIL v4 qualification or equivalent experience. Experience supporting customers in the Energy, Oil & Gas or other regulated environments. Understanding of ISO / IEC 20000, ISO 27001 or equivalent service and information security standards. Experience mentoring colleagues or providing technical leadership … Experience contributing to Problem Management, Continual Service Improvement, service transition or operational readiness. Relevant Microsoft technical certifications or equivalent practical experience. Key Personal Attributes / Behaviours Takes ownership and remains accountable for the outcome, not simply the activity. Takes pride in the quality, accuracy and completeness of their work. ...

reviews. Conducting OT and ICs risk assessments. Contributing to security architecture and secure-by-design reviews. Delivering assessments against frameworks such as IEC 62443, NIST CSF, NIST SP 800-82 and the NCSC CAF. Producing high-quality reports and client deliverables. Supporting workshops, interviews and stakeholder meetings. Working … fundamental cyber security certificate. Experience with the Cyber Assessment Framework, NIST CSF, NIST SP 800-82, IEC ISA 99 / 62443 and CIS Controls. ISO 27001 lead auditor / implementer qualifications. A basic understanding of IT and OT security risks. Knowledge ...

senior technical advisor to strategic customers and IT leadership Provide technical input to bids, proposals and service design Maintain forward view of skills / capability needs across the practice Skills / Must Have Proven technical leadership within an IT consultancy, MSP or customer-facing environment Experience coaching / developing senior technical professionals Broad knowledge across cloud, infrastructure, M365, identity, digital workplace, cyber security, managed services Strong Azure, M365 and Entra ID / AD knowledge Strong grounding in Zero Trust, Defender / Sentinel, NCSC, NIST, ISO 27001 ITIL v4 Foundation; senior ...

Full time (34.5 hours)], we are open to a conversation about how you work these hours Hybrid Split between home and our London Office / Shipley Office / Glasgow office: Our Hybrid model for this role will mean 1 day per month in the office. Salary … assure security into projects and technology changes from the outset. Support the network and infrastructure teams with firewall configuration, network boundary protection, IDS / IPS and other security controls. Monitor and help configure our security technology landscape, including SIEM, endpoint protection, privileged access management and multi-factor authentication. Carry ...

Offshore Electrical & Control Systems Engineer - Control & Instrumentation and Cyber Security (Band 3 / SEO) Health and Safety Executive Apply before Midday on Monday 2nd November 2026 Details Reference number (phone number removed) Salary £73,335 - £77,003 Non Standard B Civil Service Pension with an employer contribution of 28.97 … incidents or complaints as part of a multi-discipline team dealing with enforcement or supporting others as necessary on technical aspects. * Inspections (on / offshore) as part of a multi-discipline team, completing reports and issuing different levels of enforcement depending on the risk present. * Electrical, Control & Instrumentation based ...

organisations that have OT networks and standards used in the energy sector, such as the Cyber Assessment Framework and IEC ISA 99 / 62443. You’ll be helping multiple clients with different aspects of their security. The role is interesting and varied and a great opportunity … Security Council - Chartered Cyber Security Professional (ChCSP) IEC ISA 62443 expert cyber security certificate. Experience with the Cyber Assessment Framework, NIST CSF, ISO27001, NIST SP 800-82, IEC ISA 99 / 62443 and CIS Controls. Strong understanding of IT and OT security risks. Knowledge ...

through the assessment, design or implementation of effective and secure architectural patterns that align with industry standards (e.g. CIS L1 / 2, NIST, ISO27001, COBIT, etc.).* **Generative AI** – Enabling the secure design and adoption of Gen AI for business, IT and / or security functions in alignment … teams, OT Security, Security Architecture, Security Op Model Transformation projects and Cybersecurity Assessments.* Familiarity with core Cybersecurity frameworks and industry frameworks (e.g., NIST CSF, ISO27001, CIS Critical Controls), regulations (e.g., NIS2) and financial regulations (e.g., DORA, FCA, Bank of England, etc.).* Have experience (or knowledge) in securing ...

Apply specialist OT engineering knowledge to support and advise on projects to the required technical specifications and standards* Awareness of standards such as ISA99 / IEC-62443, NIST CSF, ISO 27001 desirable* Co-ordinate and liaise with multiple internal / external resources ...

Apply specialist OT engineering knowledge to support and advise on projects to the required technical specifications and standards Awareness of standards such as ISA99 / IEC-62443, NIST CSF, ISO 27001 desirable Co-ordinate and liaise with multiple internal / external resources ...

adding friction to their day. Technical Compliance and Assurance - Own the technical controls behind our certifications and assurance activity, including Cyber Essentials Plus, ISO 27001, evidence gathering, and remediation. Technical Risk Assessment - Lead technical security risk assessment across projects, suppliers, and internal services, identify where … data protection, email security, cloud security posture, and system hardening. Frameworks and standards. Applying security frameworks, standards, and regulatory drivers such as NIST, ISO 27001, GDPR, and NIS2 through practical technical controls. Cyber Essentials Plus. Technical control implementation, evidence collection, remediation tracking, and preparation for assessment. ...

actively participating in training, protecting data and systems, actively identifying and mitigating vulnerabilities, and promptly reporting any suspicious activity or potential security incidents. Education / Experience Qualifications: Bachelor's Degree with 8 or more years of related experience is preferred. An equivalent combination of education and / … organization. Experience building an IT Third-Party Risk function within a global organization. Industry recognised certifications such as the CRISC, CISA, CISSP, CISM, and / or CGEIT are preferred. Experience in the use and administrative setup of GRC software platforms (e.g., Vanta, ServiceNow GRC). Physical Requirements: Professional office ...

within Diageo's Global Engineering Digital & Automation Team. You will support CAPEX projects, act as OT SME, coach teams, and ensure compliance with ISA99 / IEC-62443, NIST CSF, ISO 27001 standards. You will coordinate internal and external resources and manage risk across ...

Principal Accountabilities Information Security Develop, implement, and maintain information and cyber security policies, standards, and procedures Ensure alignment with recognized frameworks (ISO 27001, NIST CSF, CIS Controls) Conduct risk assessments across IT, cloud, and Operational Technology (OT) environments Support incident response planning and continuous improvement … improvement in user behaviour Governance & Advisory Act as subject matter expert and advisor on security, governance, and compliance matters Administer and support third-party / vendor risk management programme Provide reporting and insights to leadership on security posture, regulatory changes, and risk exposure Contribute to the continuous improvement ...

supporting BAU security operations Collaborate with IT and infrastructure teams to strengthen security practices and organisational resilience Maintain security documentation in line with ISO 27001 and monitor performance against KPIs and SLAs Key Experience Required of the Senior Cyber Security Analyst: Proven experience in a Senior … vulnerability management tools Demonstrable experience investigating complex security incidents and implementing remediation measures Strong understanding of security frameworks, risk management, and ISO 27001 Previous experience acting as a technical SME, mentoring analysts, and supporting BAU security operations Familiarity with ITSM and delivery tools such as ServiceNow ...

manufacturing environment. Key Responsibilities Define and lead the Group’s cyber security strategy, managing security risks and ensuring compliance with relevant standards, including ISO 27001 and NIST CSF. Lead consolidation onto the Microsoft security stack, including Sentinel, Conditional Access and Purview, and the transition away from … communicate risk to senior stakeholders and create a secure, effective workplace experience. You will bring: Strong knowledge of security frameworks and standards, including ISO 27001 and NIST CSF, alongside hands-on experience with Microsoft security tools such as Sentinel, Conditional Access, Purview and Intune. Experience leading ...

seeking a Lead GRC Consultant in Edinburgh to shape and enhance the organisation’s security framework across a global environment. You will own ISO 27001 ISMS, risk assessments, and third‐party risk management while addressing AI governance and new AI tool controls. You’ll work with ...

security controls, and maintaining the documentation and assurance evidence required to demonstrate compliance and long-term cyber resilience. Working closely with operational teams, OT / ICS engineers, cybersecurity specialists, IT, Technical Authorities, and third-party suppliers, you will help strengthen the security and resilience of critical operational systems. … assurance activities. Essential Skills and Experience Experience within oil and gas, energy, manufacturing, utilities, or other critical infrastructure sectors. Strong experience in OT / ICS / PCD cybersecurity within industrial, operational, or critical infrastructure environments. Proven experience delivering cybersecurity assessments, risk remediation, and security control improvement programmes. Practical ...

providing outstanding client experience and delivering exceptional results that are aligned with business priorities. Our commitment to security and quality is reinforced by our ISO27001 and ISO9001 certifications (UKAS), as well as our CREST approved penetration testing and SOC capabilities. Additionally, we are an IASME Cyber Essentials Certification Body … Cyber Essentials Plus certified. Find out more about our accolades here: https: / / fsp.co / about-fsp / Why work for FSP? At FSP, we are committed to providing: A collaborative and supportive environment in which you can grow and develop your career The tools ...

Senior Cyber Security Engineer (CyberArk & PAM) Edinburgh, United Kingdom | Posted on 16 / 07 / 2026 SysGroup ishiring a Senior Cyber Security Engineer specialising in privileged accessmanagement, with CyberArk as the core platform. This is the senior tooling andidentity specialist role in the Cyber Security team under … managed clients, with PAM as your deepest expertise. BeyondCyberArk, the role carries breadth across the modern security stack: hands-onexperience with Zscaler (ZIA / ZPA) and working capability across EDR, SIEM, vulnerability management and the wider cyber product set we operate forclients. You will reportto the Cyber Operations Lead ...