security domains to facilitate policy and strategy implementation. Lead and direct technical professionals in Information Security. Accountable for the ongoing certification to ISO 27001. Reviewing, rationalising, revising and aligning ISMS policies with business strategy. Accountable for ensuring compliance with HMG Customer and Corporate security requirements in support of current and future contracts. Alignment of local policies with Corporate policy flow More ❯
and delivery of Information Governance support to DHU Healthcare. In this role, you will assist in managing external auditors, stakeholders, and third parties in line with the ISO 27001 ISMSManagement System. Supporting the internal audit team, handling complaints and incidents, and responding to queries will also be part of your responsibilities. Location: Derby What DHU can offer you: Working … as part of the overall Information Governance Management systems and Strategy. Liaising with the nominated Data Protection Officer, Caldicott Guardians and Senior Information Risk Owner in relation to IG & ISMS tasks & issues. Review and dissemination of DHU Information Asset Registers and Record of processing Activities. Deputise for the Information Governance Lead & ISO Business Systems Manager as required. Assist in the More ❯
City of London, England, United Kingdom Hybrid / WFH Options
Bridewell
you will be working with these clients to deliver a range of Cyber Security projects that could range from a single risk assessment to the development of a full ISMS to ensure a multi-national company gains accreditation in accordance with the appropriate international standards. Delivery of client engagements to a high-quality, work would cover ISMS development, assisting companies More ❯
GSEC, or Level 4+ apprenticeship) Strong IT background and hands-on experience with security tools Excellent communication and self-management skills Willingness to travel across the UK Familiarity with ISMS, NIS, GDPR, and ITIL frameworks Experience in engineering, operations, or finance environments This role requires onsite presence in Southampton 3 days per week. If you are an experienced SOC Analyst More ❯
security team is responsible for developing and maintaining Mambu's security policies, standards, risks and controls frameworks, monitoring security control effectiveness, providing security risk posture views to leadership, governing ISMS implementation and leading audit preparations. The team is also responsible for supporting customer security requests, managing vendor security due diligence and delivering security training and awareness programs. What you'll More ❯
London, England, United Kingdom Hybrid / WFH Options
Mambu
security team is responsible for developing and maintaining Mambu's security policies, standards, risks and controls frameworks, monitoring security control effectiveness, providing security risk posture views to leadership, governing ISMS implementation and leading audit preparations. The team is also responsible for supporting customer security requests, managing vendor security due diligence and delivering security training and awareness programs. What you'll More ❯
be familiar with issues related to handling and disseminating sensitive data. We are especially interested in applicants with experience in areas such as ISO27001 certification, InformationSecurityManagement Systems (ISMS), Trusted Research Environments (TRE), Secure Data Environments (SDE), Data Safe Havens (DSH), the Five Safes model, healthcare data processing, NHS Data Security and Protection Toolkit, anonymising personal data, data protection More ❯
London, England, United Kingdom Hybrid / WFH Options
Coalfire
former QSA). One of the following InformationSecurity certifications required: CISSP, CISM or ISO 27001 Lead Implementer. One of the following Audit certifications required: CISA, GSNA, CIA, IRCA ISMS Auditor or higher, or ISO 27001 Lead Auditor. Bachelor's degree (four-year college or university) or equivalent combination of education and work experience. Strong knowledge of the PCI-DSS More ❯
The Role As a 2nd Line Support Engineer you will support our clients by handling escalations from the 1st Line Team and also actively monitoring infrastructure through a variety of products. 2nd Line Support Engineers work both on-site and More ❯
consider former QSA) One of the following InformationSecurity certifications required: CISSP, CISM or ISO 27001 Lead Implementer. One of the following Audit certifications required: CISA, GSNA, CIA, IRCA ISMS Auditor or higher, or ISO 27001 Lead Auditor. Bachelor's degree (four-year college or university) or equivalent combination of education and work experience. Strong knowledge of the PCI-DSS More ❯
Stockport, Lancashire, United Kingdom Hybrid / WFH Options
zyncgroup.io
that align with clients unique goals and requirements. In this role you will be responsible for: Developing and formulatingsecurity concepts Establishment, development and implementation of informationsecuritymanagement systems (ISMS) Coordinatingthe deployment of protective measures Conducting risk analyses This role is remote from anywhere in Germany with travel to client site. Essential: Several years experience workingwithISMS - including developing from scratch More ❯
you're passionate about InformationSecurity and driving a positive security culture, we encourage you to apply! What you'll do: Maintaining and improving our InformationSecurityManagementSystem (ISMS) and associated policies, guidelines, standards and procedures Contributing to the development of our security assurance function Performing security risk assessments and maturity assessments for OE Group Promoting a positive securityMore ❯
security. Lead threat modelling and continuous risk assessments — proactively identify and mitigate vulnerabilities. Own and optimise security configurations across devices, cloud infrastructure, and SaaS tools. Develop and evolve the ISMS with ISO 27001 and Cyber Essentials — and scale beyond. What We’re Looking For: Senior experience in information and cyber security, ideally with a background in security engineering. Someone that More ❯
security. Lead threat modelling and continuous risk assessments — proactively identify and mitigate vulnerabilities. Own and optimise security configurations across devices, cloud infrastructure, and SaaS tools. Develop and evolve the ISMS with ISO 27001 and Cyber Essentials — and scale beyond. What We’re Looking For: Senior experience in information and cyber security, ideally with a background in security engineering. Someone that More ❯
intelligence and modelling Demonstrated experience of incident management processes and procedures Excellent verbal and written communication skills Willingness to travel, we are a global business, and some elements of ISMSmanagement will need to be conducted onsite Work’s a treat! On top of a competitive salary, you can expect a whole load of perks: 25 days’ holiday + bank More ❯
policies and standards such as HMG policies, CESG IA Portfolio, and MoD JSPs. Assist in gaining certifications like ISO27000, NIST Cyber Security Professional, CISMP. Develop InformationSecurityManagement Systems (ISMS). Hold relevant certifications such as CISMP or equivalent. Be a member of recognized security professional bodies such as IISP, IS2, or BCS. Drive the establishment of a new service More ❯
Fareham, England, United Kingdom Hybrid / WFH Options
Leidos
IaaS/PaaS/SaaS solutions. Understanding of MOD ISN 23/09 Secure by Design Experience in producing security assurance documentation sets (such as SyOPS, SecurityManagement Plan, ISMS, and to support DART submissions) Experience in producing security bid artefacts (such as security responses to PQQ/ITN questions, creation of Project SecurityManagement Plan, SystemSecurity Architecture Design More ❯
Whiteley, England, United Kingdom Hybrid / WFH Options
00139 LEIDOS INNOVATIONS UK LTD
IaaS/PaaS/SaaS solutions. Understanding of MOD ISN 23/09 Secure by Design Experience in producing security assurance documentation sets (such as SyOPS, SecurityManagement Plan, ISMS, and to support DART submissions) Experience in producing security bid artefacts (such as security responses to PQQ/ITN questions, creation of Project SecurityManagement Plan, SystemSecurity Architecture Design More ❯
London, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
Act as the primary InfoSec lead, partnering with senior stakeholders across the business Drive cyber risk awareness, governance, and strategic security improvements Lead the design and maintenance of the ISMS in alignment with ISO27001 Support compliance with regulatory frameworks, including NIST and NIS2 Embed security into enterprise and cloud architecture (AWS/Azure) Maintain security policies, resilience plans, and data More ❯
Slough, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
Act as the primary InfoSec lead, partnering with senior stakeholders across the business Drive cyber risk awareness, governance, and strategic security improvements Lead the design and maintenance of the ISMS in alignment with ISO27001 Support compliance with regulatory frameworks, including NIST and NIS2 Embed security into enterprise and cloud architecture (AWS/Azure) Maintain security policies, resilience plans, and data More ❯
City of London, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
Act as the primary InfoSec lead, partnering with senior stakeholders across the business Drive cyber risk awareness, governance, and strategic security improvements Lead the design and maintenance of the ISMS in alignment with ISO27001 Support compliance with regulatory frameworks, including NIST and NIS2 Embed security into enterprise and cloud architecture (AWS/Azure) Maintain security policies, resilience plans, and data More ❯
Selby, North Yorkshire, Yorkshire, United Kingdom Hybrid / WFH Options
Drax
Operational Technology (OT) Cyber Security Analyst Drax Power Station, Selby Hybrid working Permanent, full time Closing date: Monday 14th July 2025 Who we are Were not just talking about making a difference, were making it happen. We generate dispatchable, renewable More ❯
Operational Technology (OT) Cyber Security Analyst Drax Power Station, Selby Hybrid working Permanent, full time Closing date: Monday 14th July 2025 Who we are Were not just talking about making a difference, were making it happen. We generate dispatchable, renewable More ❯
the Role This is a senior individual contributor QA role in the company, responsible for owning, operating, and evolving our Quality ManagementSystem (QMS) and InformationSecurityManagementSystem (ISMS). You will work cross-functionally across all departments, lead audit readiness, drive continuous improvement, and serve as the company’s InformationSecurity Officer and Management Representative. This role is … potential for a professional looking to expand their strategic and leadership footprint. Main Duties and Responsibilities: Strategic and Functional Responsibilities · Own and continuously improve the company’s QMS and ISMS to ensure compliance with ISO 13485, ISO 27001, and global medical device regulations. · Act as the company’s InformationSecurity Officer, driving a proactive security culture and maintaining regulatory readiness. … Lead and coordinate all internal, external, and customer audit activities, including those with Notified and Certification Bodies. · Plan and estimate QA and ISMS activities and represent QA in company-level planning, resourcing, and budgeting decisions. · Provide quality oversight across all business functions, including product development, post-market activities, and supplier management. · Champion a quality-first mindset throughout the organisation, coordinating More ❯
across the organization, ensuring compliance and cost-effectiveness. Actively participate in the implementation and maintenance of IT systems and solutions. To comply with the company’s Business ManagementSystem (ISMS) and all relevant policies. Ensure that informationsecurity is maintained at all times. Qualifications, Knowledge and Experience: Proven experience as an IT Manager or in a similar role. Strong knowledge More ❯