1 to 25 of 554 Remote/Hybrid ISO/IEC 27001 Jobs in the UK

recruit an ISO 27001 and ISO 27018 Information Security Analyst to strengthen our Information Security and Audit / Compliance functions. Alfa Systems sits at the heart of some of the world's largest asset finance companies, across 26 countries which means information security … compliance with ISO 27001 and ISO 27018 on point. You'll get involved in SSAE 18 / ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and processes, and contribute ...

recruit an ISO 27001 and ISO 27018 Information Security Analyst to strengthen our Information Security and Audit / Compliance functions. Alfa Systems sits at the heart of some of the world’s largest asset finance companies, across 26 countries which means information security … compliance with ISO 27001 and ISO 27018 on point. You’ll get involved in SSAE 18 / ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and processes, and contribute ...

recruit an ISO 27001 and ISO 27018 Information Security Analyst to strengthen our Information Security and Audit / Compliance functions. Alfa Systems sits at the heart of some of the world's largest asset finance companies, across 26 countries which means information security … compliance with ISO 27001 and ISO 27018 on point. You'll get involved in SSAE 18 / ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and processes, and contribute ...

role is for you. Technical Skills & Experience To be considered for this opportunity, you must have at least 5+ years of hands‐on GRC / information security experience in roles such as: GRC Analyst / GRC Manager, Information Security Officer / Manager, ISMS Owner, Compliance Manager … / Security Internal Auditor, or Security & Compliance Consultant Mandatory GRC skills — you must be able to demonstrate: Practical, implementation‐level experience with ISO / IEC 27001 (2022 control set): scoping, risk assessment and treatment, Statement of Applicability, running or facing internal ...

great opportunity for an experienced InfoSec professional who enjoys the governance, risk and assurance side of security , with a particular focus on ISO 27001, ISMS governance, audit, compliance and control assurance . You’ll play an important role in maintaining and developing the organisation’s security … framework, working across the business to manage risk, strengthen controls and support the continued development of its ISO 27001 certification internationally. The Role You’ll take a hands‐on role across information security governance, audit and compliance, helping ensure security controls remain effective, proportionate and aligned ...

Location: UK (Hybrid) with travel to client sites 2 days p / w across Bristol, Portsmouth and Taunton Contract: Permanent, full-time Security clearance: Minimum SC (active & lapsed would be ok) Notice - ideally 1 month notice Briefing notes: Defence experience desirable Sonar work and underwater mapping Hydrographic office experience … provenance, quality, representativeness, bias checks, privacy & IP considerations, synthetic data controls). Model selection support (fit-for-purpose criteria, interpretability needs, security constraints, compute / cost trade-offs). Test & evaluation (appropriate metrics and acceptance thresholds; robustness, fairness, privacy, and safety testing; secure red-teaming where applicable). Operational ...

testing plans. Implement and maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001 / 27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF. Develop and maintain information security policies, standards and procedures, ensuring organisational compliance. Define, coordinate … banking, energy, telecommunications and media, industrial protection, and critical infrastructure protection. Knowledge of SOC operations, digital forensics and fraud management. Experience with GRC / IRM platforms and the automation of security and compliance processes. Additional security certifications such as CGEIT, C CISO, QSA, CDPP, or Security Director certification issued ...

hackajob is partnering directly with Dexory to hire for this role. Information Security Lead / ISO27001 / SOC / GRC / Location: Wallingford - Oxfordshire (Hybrid) onsite circa 3 days minimum per week Permanent At Dexory, we are transforming the warehousing and logistics industry through data intelligence. … Wallingford, Oxford and looking for someone who can do 3 days minimum on site ideally more. Any experience within robotics or start up / scale up environments highly desirable. Please apply for more information. Responsibilities / Skills Own the day-to-day execution of Dexory's ISO ...

starterHigh professional ethics and commitment to improving risk cultureExperience of managing deficiencies and remediation activitiesComfortable giving an opinion and forming conclusionsDesired skillsExperience of IFRS / US GAAP accounting standardsQualification by relevant governing body with 5 years post qualification experience (e.g., ACA, ACCA, CIMA, CPA or equivalent)Previous experience with … policy managementPrevious experience of working with OracleExperience of driving automation / AI in a controls functionStrong data enquiry / analytics / scripting skillsExperience of managing a co-source agreementUnderstanding of other regulatory frameworks e.g. NIST, ISO 27001, EU CRAUK Benefits include: Flexible benefits ...

including vulnerability management, identity and access management, cloud security, security operations and supplier assurance. Support Secure SDLC and broader security transformation initiatives. Provide vCISO / outsourced security management support where required. Design and facilitate client workshops, discovery sessions and stakeholder interviews. Translate technical security issues into clear business risks … consultancy experience. A good understanding of information security governance, risk and technical controls. Practical experience with ISO 27001 and / or other recognised security frameworks. Experience conducting security assessments, gap analyses or risk assessments. The ability to understand a client's business and provide pragmatic ...

overseeing implementation and ongoing maintenance, ensuring controls align with standards like IEC 62443, ISO 27001, NIS2, and CAF / ECAF. With your input shaping real project outcomes, you’ll help strengthen security posture where it matters most. How You’ll Make an Impact … will design, implement, and maintain security controls aligned with IEC 62443, ISO 27001, NIS2, and CAF / ECAF. You will apply your technical expertise in firewalls, IDS / IPS, and secure network architecture to deliver robust solutions. You will collaborate with ...

privacy and AI governance. Their global platform is used by more than 65,000 people and helps organisations manage standards and regulations including ISO 27001, ISO 27701, ISO 42001, NIS2 and other increasingly complex governance requirements. They are now looking … show what simple, practical and commercially valuable governance can actually look like. The Role You will own the company's compliance posture across ISO 27001, ISO 27701, ISO 42001, Cyber Essentials and emerging standards, creating a best-practice implementation using the company ...

accomplished audit professional who can take ownership of developing and delivering a risk-based, multi-year internal audit programme, aligned to ISO / IEC 27001:2022 and ISO 22301:2019. The Role You will be responsible for developing the audit strategy … annual ISMS & BCMS audit model, including methodology, templates, governance, findings tracking and knowledge transfer to support future audit cycles. Key Requirements ISO / IEC 27001:2022 Lead Auditor certification ISO 22301:2019 Lead Auditor certification Demonstrable experience conducting internal audits against ...

successful professional services organisation. This role requires proven IT leadership experience within a professional services environment and hands-on experience operating within an ISO 27001-certified or closely aligned organisation. These are essential requirements. Reporting to the Chief Technology Officer, the PS Head of IT will … service desk operations, incident management and technology support. Drive cyber security operations, including vulnerability management, patching and incident response. Ensure ongoing compliance with ISO 27001 controls, policies and audit requirements. Manage infrastructure, cloud platforms and end-user technology. Own disaster recovery, backup and business continuity arrangements. ...

robust cybersecurity policies, procedures and frameworks. Ensure compliance with relevant data protection laws, including UK GDPR, ISO standards, including ISO / IEC 27001, Cyber Essentials Plus and industry best practice. Lead incident response planning, security audits, risk assessments and remediation efforts. … experience leading digital transformation and systems integration projects. Excellent leadership, communication and stakeholder management skills. Professional certifications such as CISSP, CISM, ISO / IEC 27001 Lead Implementer or Auditor, or similar. Experience working in regulated, public sector or educational environments. Please note ...

AreaBIM Managerto ensure the correct activities are assigned to the supply chains Task Information Managers. Providing Coordination reports of the interfaces between engineering disciplines / design and construction / temporary and permanent works design activities, through the BIM process. Coordination and development of the design to Construction through … processes such as 5D / 4D to ensure consideration and optimisation of the opportunities for sustainability, digital engineering, buildability, carbon, logistics, industrialisation designing for maintenance and health, safety and welfare during construction and in-use. Run Project BIM Clinic’s to enable BIM task team members to deliver their ...

Computerized Systems Quality Assurance & Validation on a permanent full‐time capacity. Purpose of the Role: This role supports the compliant and timely design / development, testing, verification, validation, configuration, and life cycle management of computerized systems (including software) developed, purchased and / or utilised by IXICO. This role … compliance with current GCP, FDA 21 CFR Part 11, EU Annex 11, GAMP, FDA QSR Part 820 (QMSR), EU MDR (Regulation 2017 / 745), IEC 62304, GDPR, ISO 13485, ISO 27001 and ISO 42001 / EN 18286 regulatory ...

business impact analyses, business continuity and IT disaster recovery plans and their testing (including the AWS cloud environment), helping ensure recovery objectives (RTO / RPO) are documented, achievable and evidenced, with lessons learned fed into improvements. Data Protection Governance Support the Data Protection Officer in operating the bank … security awareness and data protection training to foster a strong risk awareness culture across the bank. Requirements EDUCATION & TRAINING Bachelor's degree in Information / Cyber Security, Computer Science or a related discipline; equivalent professional experience may be considered. Relevant professional certifications are strongly preferred, for example CISM, CISSP ...

strengthen and continually improve our information security, governance and compliance environment. A key focus of the role will be supporting and maintaining an ISO 27001-certified Information Security Management System (ISMS), alongside broader compliance, risk and assurance activities. Key Responsibilities Maintain and continually improve the ISO … security incidents, business continuity and disaster recovery activities. Support vulnerability management, penetration testing and remediation. Maintain compliance with ISO 9001, Cyber Essentials / Cyber Essentials Plus and relevant regulatory requirements. Provide practical security guidance to technical and business teams. Drive security awareness, continual improvement and a strong ...

remote contract with occasional travel to London. You will develop and execute a risk-based internal audit programme aligned to ISO / IEC 27001:2022 and ISO 22301:2019. You will plan and deliver audits, assess control effectiveness, interview stakeholders ...

Notified Body audits, with a focus on Design and Development aspects. Champion compliance in software development by translating complex and opaque IEC / ISO standards into clear, actionable processes that engineering teams can follow. What we will look for SaMD Experience : Prior experience working … doing the defining work of your career. We take care of you. We offer comprehensive private medical and dental cover through Bupa 24 / 7 mental health coaching and wellbeing support through Sonder a £100 / month Healthy Heidi's wellness stipend a £500 home office budget ...

security & architecture: Define and enforce the security architecture across our Azure-native, Kubernetes-based platform. Govern security controls across the full stack: Kafka, .NET / C#, Vue.js, Kong API Gateway, Auth0, and Salesforce. Lead threat modelling, penetration testing, and vulnerability management programmes. Own identity and access management strategy, including … crypto-agile migration to NIST-standardised PQC algorithms. Compliance & regulatory: Ensure security controls meet FCA SYSC obligations, SYSC 15A operational risk requirements and ISO27001 standard. Work closely with the Head of Compliance on regulatory horizon scanning, security-related policy obligations, and audit responses. Partner with the DPO on data governance ...

role... You will provide technical consultancy services aligned to client needs and will support WSP's cyber security deliverables through the lifecycle of OT / IT development and Digital Transformation projects. You will contribute to the development of proportionate, risk-based recommendations and help translate strategy into practical delivery. … will be involved in the following activities; Supporting clients on cyber security compliance, including NIS-D, NIST, ISO 27001, ISA / IEC 62443 and other relevant industry standards and best practice Contributing to governance frameworks and supporting the development of Cyber Security ...

Role... You will provide technical consultancy services aligned to client needs and will support WSP’s cyber security deliverables through the lifecycle of OT / IT development and Digital Transformation projects. You will contribute to the development of proportionate, risk-based recommendations and help translate strategy into practical delivery. … will be involved in the following activities; Supporting clients on cyber security compliance, including NIS-D, NIST, ISO 27001, ISA / IEC 62443 and other relevant industry standards and best practice Contributing to governance frameworks and supporting the development of Cyber Security ...

technical consultancy services in close alignment with client needs and will be leading WSP's cyber security deliverables through the lifecycle of an OT / IT development and Digital Transformation projects. You will also be providing strategic advice across our client spectrum as part of your delivery and growth … following activities;Advising the client on Cyber Security compliance especially in regard to NIS-D, NIST, ISO 27001, ISA / IEC 62443 and other relevant industries standards and best practices Developing a framework for governance as well as developing Cyber Security and Information ...