financial services or regulated environment. Excellent communication and stakeholder engagement skills. Ability to assess and manage information security risks effectively. Hold professional qualifications in a related subject for example, CRISC, CISSP, CISM, CISA 7 years + experience in technology or cyber risk management role with a focus on analytics and controls Experience of working within a global financial organization. If More ❯
experience in technology role with proven experience of supplier risk management (for example, in projects, technical SME areas etc.). Hold professional qualifications in a related subject for example, CRISC, CISSP, CISM, CISA Experience of working within a global financial organization. Knowledge and experience of governance, riskand controls framework and related processes. Experience of technology, cyber riskand supply More ❯
experience in technology role with proven experience of supplier risk management (for example, in projects, technical SME areas etc.). Hold professional qualifications in a related subject for example, CRISC, CISSP, CISM, CISA Experience of working within a global financial organization. Knowledge and experience of governance, riskand controls framework and related processes. Experience of technology, cyber riskand supply More ❯
Guildford, Surrey, United Kingdom Hybrid / WFH Options
Allianz Popular SL
process flows, and standard operating procedures. Strong communication and interpersonal skills, with the ability to convey complex security concepts to non-technical stakeholders. Relevant certifications such as CISSP, CCSP, CRISC, CISM, or ISO 27001 Lead Implementer are highly desirable What We Will Offer You Recognised and rewarded for a job well done, we have a range of flexible benefits for More ❯
written and verbal communication skills, with experience presenting to senior leaders. Proficiency inRisk management platforms (e.g., Archer, ServiceNow GRC). Professional certifications such as CTPRP, CISM, CISSP, or CRISC are highly desirable. What do we offer in return? A career that you define. Yes, we offer all the usual rewards and benefits - including great healthcare provision, a wide variety More ❯
ICS), SCADA, and business IT systems. Familiarity with cybersecurity frameworks (e.g., NIST CSF, ISO 27001, IEC 62443). Relevant certificates for proof of competence are an advantage: CISSP, GICSO, CRISC CISM, CISA, ISO 27001 Lead Auditor/Implementer Good knowledge of the ISO 27000 series of standards Very good abstraction skills and pronounced skills in logical-analytical and informatic thinking More ❯
ICS), SCADA, and business IT systems. Familiarity with cybersecurity frameworks (e.g., NIST CSF, ISO 27001, IEC 62443). Relevant certificates for proof of competence are an advantage: CISSP, GICSO, CRISC CISM, CISA, ISO 27001 Lead Auditor/Implementer Good knowledge of the ISO 27000 series of standards Very good abstraction skills and pronounced skills in logical-analytical and informatic thinking More ❯
and business teams. Proven experience in cybersecurity disciplines, ideally 5-7 years in roles covering risk management, architecture, engineering, or vulnerability management. Relevant certifications and tools knowledge, such as CRISC, CISSP, CGEIT, and experience with platforms like UpGuard, AuditBoard, SAP GRC, and ServiceNow. For more details, please reach out to Mary Pearson on - . Reasonable Adjustments: Respect and equality are More ❯
security posture, and influence business-wide awareness and accountability. What you’ll bring: 5+ years in InfoSec, IT Security or Ops within a regulated environment Certification required: CISSP, CISM, CRISC, or equivalent Strong knowledge of ISO27001:2022, SOC2 Type II, NIST CSF, PCI DSS, GDPR, DORA Confident with security risk assessments, audit responses, and policy governance Hands-on cloud security More ❯
security posture, and influence business-wide awareness and accountability. What you’ll bring: 5+ years in InfoSec, IT Security or Ops within a regulated environment Certification required: CISSP, CISM, CRISC, or equivalent Strong knowledge of ISO27001:2022, SOC2 Type II, NIST CSF, PCI DSS, GDPR, DORA Confident with security risk assessments, audit responses, and policy governance Hands-on cloud security More ❯
security posture, and influence business-wide awareness and accountability. What you’ll bring: 5+ years in InfoSec, IT Security or Ops within a regulated environment Certification required: CISSP, CISM, CRISC, or equivalent Strong knowledge of ISO27001:2022, SOC2 Type II, NIST CSF, PCI DSS, GDPR, DORA Confident with security risk assessments, audit responses, and policy governance Hands-on cloud security More ❯
london (city of london), south east england, united kingdom
Prism Digital
security posture, and influence business-wide awareness and accountability. What you’ll bring: 5+ years in InfoSec, IT Security or Ops within a regulated environment Certification required: CISSP, CISM, CRISC, or equivalent Strong knowledge of ISO27001:2022, SOC2 Type II, NIST CSF, PCI DSS, GDPR, DORA Confident with security risk assessments, audit responses, and policy governance Hands-on cloud security More ❯
security posture, and influence business-wide awareness and accountability. What you’ll bring: 5+ years in InfoSec, IT Security or Ops within a regulated environment Certification required: CISSP, CISM, CRISC, or equivalent Strong knowledge of ISO27001:2022, SOC2 Type II, NIST CSF, PCI DSS, GDPR, DORA Confident with security risk assessments, audit responses, and policy governance Hands-on cloud security More ❯
IT audit, or cyber security role within a financial services or regulated environment. Experience: Educated to degree level or equivalent. Hold professional qualifications in a related subject for example, CRISC, CISSP, CISM, CISA 7 years + experience in technology or cyber risk management role with a focus on analytics and controls Experience of working within a global financial organization. Experience More ❯
IT audit, or cyber security role within a financial services or regulated environment. Qualifications: Educated to degree level or equivalent. Hold professional qualifications in a related subject for example, CRISC, CISSP, CISM, CISA 7 years + experience in technology or cyber risk management role with a focus on analytics and controls Experience of working within a global financial organization. Carbon60 More ❯
cyber security frameworks and standards (ISO 27001, SOC2, NIST, GDPR). • Excellent analytical, communication, and stakeholder engagement skills. • Proficient inrisk assessment tools and methodologies. • Professional certifications such as CRISC, CISM or CISSP are desirable. Bright Purple is an equal opportunities employer: we are proud to work with clients who share our values of diversity and inclusion in our industry. More ❯
cyber security frameworks and standards (ISO 27001, SOC2, NIST, GDPR). Excellent analytical, communication, and stakeholder engagement skills. Proficient inrisk assessment tools and methodologies. Professional certifications such as CRISC, CISM, or CISSP are desirable. Bright Purple is an equal opportunities employer: we are proud to work with clients who share our values of diversity and inclusion in our industry. More ❯
cyber security frameworks and standards (ISO 27001, SOC2, NIST, GDPR). Excellent analytical, communication, and stakeholder engagement skills. Proficient inrisk assessment tools and methodologies. Professional certifications such as CRISC, CISM or CISSP are desirable. Bright Purple is an equal opportunities employer: we are proud to work with clients who share our values of diversity and inclusion in our industry. More ❯
Edinburgh, Scotland, United Kingdom Hybrid / WFH Options
Bright Purple
cyber security frameworks and standards (ISO 27001, SOC2, NIST, GDPR). • Excellent analytical, communication, and stakeholder engagement skills. • Proficient inrisk assessment tools and methodologies. • Professional certifications such as CRISC, CISM or CISSP are desirable. Bright Purple is an equal opportunities employer: we are proud to work with clients who share our values of diversity and inclusion in our industry. More ❯
livingston, central scotland, united kingdom Hybrid / WFH Options
Bright Purple
cyber security frameworks and standards (ISO 27001, SOC2, NIST, GDPR). • Excellent analytical, communication, and stakeholder engagement skills. • Proficient inrisk assessment tools and methodologies. • Professional certifications such as CRISC, CISM or CISSP are desirable. Bright Purple is an equal opportunities employer: we are proud to work with clients who share our values of diversity and inclusion in our industry. More ❯
broughton, central scotland, united kingdom Hybrid / WFH Options
Bright Purple
cyber security frameworks and standards (ISO 27001, SOC2, NIST, GDPR). • Excellent analytical, communication, and stakeholder engagement skills. • Proficient inrisk assessment tools and methodologies. • Professional certifications such as CRISC, CISM or CISSP are desirable. Bright Purple is an equal opportunities employer: we are proud to work with clients who share our values of diversity and inclusion in our industry. More ❯
dunfermline, north east scotland, united kingdom Hybrid / WFH Options
Bright Purple
cyber security frameworks and standards (ISO 27001, SOC2, NIST, GDPR). • Excellent analytical, communication, and stakeholder engagement skills. • Proficient inrisk assessment tools and methodologies. • Professional certifications such as CRISC, CISM or CISSP are desirable. Bright Purple is an equal opportunities employer: we are proud to work with clients who share our values of diversity and inclusion in our industry. More ❯
auditing Strong understanding of ISMS frameworks and private sector regulatory requirements Excellent communication and client-facing consultancy skills Relevant certifications such as ISO27001 Lead Auditor/Implementor, CISSP, CISM, CRISC, CISA Experience with additional standards (ISO/IEC27701, ISO/IEC29100, ISO/IEC42001, ISO/IEC22301) is a plus Inclusive Hiring We understand that one size doesn't fit More ❯
compliance. Education & Certifications: Bachelor's degree in Computer Science, Information Security, Law, or a related technical field. Master's degree or relevant industry certifications (e.g., CIPP/E, CISM, CRISC, or specialized IoT/Product Security compliance certifications) are highly preferred. Experience: Minimum of 5 years of progressive experience in cybersecurity compliance, regulatory affairs, or product security, with a strong More ❯
engineering, mathematics or equivalent • 10+ years of security, compliance andrisk management experience • 10+ years of technical specialist, design and architecture experience • Relevant cyber security accreditation including CISSP, CISA, CRISC, etc. and working knowledge of cyber security and technology risk management frameworks including NIST CSP, CIS Benchmarks, ISO27001, etc. PREFERRED QUALIFICATIONS • 7+ years of IT platform implementation in a technical More ❯