22 of 22 Remote/Hybrid ISO/IEC 27001 Jobs in Scotland

data governance and software development, including input to research protocols, contracts, patient information sheets, information governance records (e.g. Data Protection Impact Assessments, data controller / processor role assignments, Information Asset Register, Record of Processing Activities) and applications for linkage of data with public datasets.9. Contribute at a senior level … legal, regulatory and contractual responsibilities with regard to data management, information governance and software development (e.g. data protection, intellectual property, good clinical practice, controller / processor roles, computer systems validation) are fully compliant. Production, review and approval of standard operating procedures and guidelines in support of the Information Security ...

Edinburgh, ScotlandGlobal Operations – IT / Full Time / HybridFor over four decades, Cirrus Logic has been propelled by the top engineers in mixed-signal processing. Our rockstar team thrives on solving complex challenges with innovative end-user solutions for the world's top consumer brands. Cirrus Logic … business owners to identify threats, evaluate the design and operating effectiveness of controls, and document and track risk treatment plans. This includes evaluating AI / ML use cases (internal builds and third-party services) for security, data protection, and misuse risks.Third‐Party Risk Management: Plan and execute third‐party ...

best practices.Perform security code reviews and act as a technical SME for engineering and compliance teams.Security Testing & DevSecOpsDeploy and manage automated security tools (SCA / SBOM, SAST, DAST, Secret Scanning) within CI / CD pipelines.Apply manual network / application testing, custom scripting, and unit test cases … incident response, including root cause analysis, mitigation strategies, and creation of technical runbooks.Apply Detection Engineering principles, setting baseline app security parameters and maintaining IDS / IPS rules.Conduct post-incident analysis and lessons learned and refine response strategies.Monitor emerging threats proactively integrate new protections and ensure compliance with standards (OWASP ...

seeking a Senior Identity Security Engineer to design, implement and enhance large‐scale identity environments across Microsoft Active Directory, Entra ID, PKI / ADCS and modern hybrid platforms. This role combines hands‐on engineering with leadership in security design, implementation and assessment, requiring someone who can resolve complex identity … providing outstanding client experience and delivering exceptional results that are aligned with business priorities. Our commitment to security and quality is reinforced by our ISO27001 and ISO9001 certifications (UKAS), as well as our CREST approved penetration testing and SOC capabilities. Additionally, we are an IASME Cyber Essentials Certification Body ...

Year (EMEA)One of the Best Workplaces for Women in the UK & Ireland (2023) With 3,700+ people and revenues exceeding 347m / 302m, Version 1 is a market leader in Oracle, Microsoft, and AWS consulting services – and one of the fastest-growing digital consultancies in Europe. Job DescriptionWe … build, testing, deployment and defect resolution activities. The role also includes exposure to Oracle Fusion extensions and workflow tooling. VBCS, Oracle Process Automation (OPA) / Process Cloud Service (PCS) experience is desirable at junior level. The successful candidate should be willing and able to learn these areas quickly ...

languages: Python, Go, YAML, JSON, etc. Experience with policy as code (e.g., Open Policy Agent and Rego). Git and version control workflows. CI / CD tools: GitHub Actions, GitLab, etc. Container platforms: Docker, Kubernetes. Infrastructure‐as‐code: Terraform, Ansible, Pulumi, CloudFormation. Cloud platforms: AWS, Azure, GCP. A background … market strategies. Excellent written and verbal communication skills, with the ability to translate complex technical topics to both technical and non‐technical stakeholders. AWS / Azure / GCP certifications, CISSP, CISM, or other security certifications are a plus. Perks & Benefits Competitive salary. Generous equity plan. Remote‐first working ...

reflecting how our employees are at the very heart of what we do: UK & Ireland's premier AWS, Microsoft & Oracle partner 3300+ strong, 350 / 300m revenue business 10+ years as a Great Place to Work in Ireland & UK Best Workplace for Women in the UK & Ireland by GPTW … successful outcomes and take clear ownership of the security design decisions that got there.Cloud and application security; experience securing workloads on AWS and / or Azure, including network segmentation, IAM, encryption, secrets management, and security monitoring. You understand AppSec practices including secure SDLC, SAST / DAST tooling ...

Basic information Location Bristol, Edinburgh, Glasgow, London, Manchester Business Line Technology & Transformation Job Type Permanent / FTC Date published 17-Aug-2026 Req # 24465 Job description Connect to your IndustryDo you want to be at the heart of some of the biggest and most ambitious programmes undertaken … NIST, CIS).Experience as a Security Architect or in a similar role, with a strong track record of designing and implementing security controls and / or solutions and leading technical teams.Experience with architecture methodology such as TOGAF or SABSAExperience of threat and risk modellingStrong understanding of network security, encryption ...

Basic information Location Bristol, Edinburgh, Glasgow, London, Manchester Business Line Technology & Transformation Job Type Permanent / FTC Date published 17-Aug-2026 Req # 24465 Job description Connect to your IndustryDo you want to be at the heart of some of the biggest and most ambitious programmes undertaken … NIST, CIS).Experience as a Security Architect or in a similar role, with a strong track record of designing and implementing security controls and / or solutions and leading technical teams.Experience with architecture methodology such as TOGAF or SABSAExperience of threat and risk modellingStrong understanding of network security, encryption ...

area, gained through education, professional work, or equivalent experience. (5+ years exp)Substantial experience in Cyber Security, including practical experience securing AI systems and / or public cloud applications. (5+ years exp)Solid understanding of cyber security principles and controls, including identity & access management (IAM), encryption, network security … secure application design.Hands-on experience in public cloud security engineering and / or in the configuration / operation of security tooling, such as Web Application Firewalls (WAFs). (2+ years exp)Solid knowledge of AI technologies including machine learning concepts, common model architectures, and emerging generative AI capabilities.Experience ...

Strong stakeholder engagement and governance leadership skills Experience presenting risk and compliance information to senior stakeholders Desirable Knowledge of Industry certifications and frameworks, i.e. ISO27001, NIST, NCSC Experience within Defence, Government, Critical National Infrastructure, or regulated industries Experience with GRC platforms such as ServiceNow GRC, Archer, or equivalent ...

priorities Lead the move from legacy data centres to a secure, scalable multi-cloud environment Embed DevOps best practices across engineering, championing automation, CI / CDand cloud-native delivery Oversee infrastructure, cloud, networkarchitectureand platform strategy Embed cyber security, riskmanagementand secure-by-design principles across all services Manage compliance … across IT, DevOps, and Cloud Strong experience leading large-scale cloud migrations and operating multi-cloud environments Deep expertise in DevOps practices including CI / CD, infrastructure automation and cloud-native architectures Proficiency in Azure DevOps with experience migrating to GitHub Strong scripting and automation experience (Python, Bash, Terraform ...

solutions are built and operated in line with security standards. The role aligns to three key areas: supporting safe adoption, understanding attacker use / exploitation of AI, and applying AI to enhance security capability.Why Join us? If you think all banks are the same, you’re wrong. … interest in and understanding of AI technologies, including machine learning concepts and generative AI use cases.Familiarity with security frameworks and regulations such as ISO 27001, NIST, or UK GDPR, and how these apply to AI systems.Experience supporting technical implementation, validation, and testing of security controls within ...

maintain security architecture standards, patterns, blueprints, and reference architectures Ensure solutions align with organisational security policies, regulatory obligations, and industry frameworks including ISO 27001, NIS2, PCI DSS, and Zero Trust principles where applicable. What you’ll bring Hands-on experience conducting architecture risk assessments and creation ...

which will become the search engine of commercial insurance. VISION already powers over 40% of the UK market's placement decisions. We are ISO 27001 certified and ICO registered. Broker Insights Ltd is authorised and regulated by the Financial Conduct Authority. We are growing fast. This ...

Basic information Location Bristol, Edinburgh, London, Manchester Business Line Technology & Transformation Job Type Permanent / FTC Date published 17-Aug-2026 Req # 24166 Job description Connect to your IndustryCyber security is critical to every organisation. We are shaping strategies and transforming the management of cyber risk … maturity, security architecture, cyber transformation and regulatory compliance for cyber.Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2 or equivalent.Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk.Desire ...

large, global business environment, with a hands-on approach to people leadership. Knowledgeable with a deep understanding of security frameworks and proven experience with ISO27001, Cyber Essentials Plus, NIS-2, and SOX compliance and audit standards. Experienced in modern security tooling with hands-on experience with Palo Alto, Cortex … strong technical awareness of Azure / AWS cloud environments. Proficient in identity and access management with strong knowledge of Microsoft 365 capabilities and Entra / Active Directory (AD) Identity platforms. Skilled in advanced vulnerability management, with demonstrated ability in enterprise-level scanning, analysis, and resolution. Here’s What ...

manage cyber risk in line with policies, standards, and regulatory obligations. You’ll lead architecture choices, collaborate with stakeholders, and ensure alignment with ISO 27001, NIS2, PCI DSS and Zero Trust principles where applicable. #J-18808-Ljbffr ...

Basic informationLocationEdinburgh, London, ManchesterBusiness LineTechnology & TransformationJob TypePermanent / FTCDate published17-Aug-2026Req #22241Job descriptionConnect to your IndustryCyber Risk & Security. Everybody’s talking about it. Every major corporation is concerned by it. The Government is investing 1.9 billion in tackling it. We’re shaping strategies and transforming technology to minimise … equivalent experienceRelevant qualifications, for example ITIL, CISSP, CIPP / E, COMPTIA SECURITY+, SANS401, 501 etc. Familiarity with information security frameworks such as ISO27001, NIST etc; Willingness to operate as part of an ‘on-call roster’, travelling to assist our UK and EMEA clients when required in an incident management ...

Basic informationLocationAberdeen, Belfast, Birmingham, Bristol, Cambridge, Cardiff, Edinburgh, Glasgow, Manchester, Milton Keynes, Newcastle, ReadingBusiness LineEnabling FunctionsJob TypePermanent / FTCDate published13-Aug-2026Req #24612Job descriptionConnect to your IndustryDeloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global … managing Business Continuity Management requirements would be an advantage.A good understanding of IT frameworks including ITIL and COBIT frameworks.Knowledge of IT security standards including ISO27001 would be an advantageConnect to your business - Enabling FunctionsCollaboration is central to everything we do at Deloitte. From IT to HR, marketing and more ...

Basic informationLocationAberdeen, Belfast, Birmingham, Bristol, Cambridge, Cardiff, Edinburgh, Glasgow, Manchester, Milton Keynes, Newcastle, ReadingBusiness LineEnabling FunctionsJob TypePermanent / FTCDate published13-Aug-2026Req #24612Job descriptionConnect to your IndustryDeloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global … managing Business Continuity Management requirements would be an advantage.A good understanding of IT frameworks including ITIL and COBIT frameworks.Knowledge of IT security standards including ISO27001 would be an advantageConnect to your business - Enabling FunctionsCollaboration is central to everything we do at Deloitte. From IT to HR, marketing and more ...

Basic informationLocationAberdeen, Belfast, Birmingham, Bristol, Cambridge, Cardiff, Edinburgh, Glasgow, Manchester, Milton Keynes, Newcastle, ReadingBusiness LineEnabling FunctionsJob TypePermanent / FTCDate published13-Aug-2026Req #24612Job descriptionConnect to your IndustryDeloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global … managing Business Continuity Management requirements would be an advantage.A good understanding of IT frameworks including ITIL and COBIT frameworks.Knowledge of IT security standards including ISO27001 would be an advantageConnect to your business - Enabling FunctionsCollaboration is central to everything we do at Deloitte. From IT to HR, marketing and more ...