5 of 5 SOC 1 Jobs in the South East

environments highly desirable. Responsibilities/Skills Own the day-to-day execution of Dexory's ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes, including evidence collection, control testing, policy maintenance, and auditor liaison Maintain our GRC platform - keeping controls, evidence, and risk registers … with ISO 27001 as an implementer or internal auditor; genuine ownership, not just process participation Solid working knowledge of SOC 1 and SOC 2 frameworks (AICPA Trust Services Criteria) Familiarity with cloud security principles, particularly AWS Nice to Have Certs (ISO 27001 Lead Implementer, CISM, CISA, CISSP ...

logistics with data intelligence in the UK. We seek an Information Security Lead to own ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes, and to respond to customer security due diligence across engineering, product and operations. You’ll partner with the Head ...

managed accounts. Key Facts: Administering over $900B in assets Servicing nearly every significant investor in the asset class Institutional grade infrastructure and SSAE 18 (SOC-1, Type 2) certification, ensuring confidence in our processes and operating model The most experienced and best performing team in the industry #J ...

team A genuine commitment to security and good infrastructure practices Desirable: Rackspace, VMDK, Intune, Purview, Viva, AI in infrastructure, ISO 27001/SOC 1 and previous audit experience. Benefits 25 days' annual leave Company pension Bonus scheme Day off on your birthday Employer-Supported Volunteering Professional learning and ...

role is delivery-focused, scoped to complete the planned controls testing programme, identify and document deficiencies, and support remediation tracking. You’ll also review SOC1 reports for supplier-managed applications and highlight any control gaps for further action. You’ll operate under the direction of the Group Director- Governance & Portfolio … methodology Documenting completed testing, including sampling approaches and retained audit evidence Identifying and documenting control deficiencies, including agreed remediation actions, owners, and timelines Reviewing SOC1 reports for supplier-managed systems and identifying control gaps Updating control descriptions where processes or technology have changed Reporting control deficiencies to the IT Risk ...