126 to 150 of 336 ISO/IEC 27001 Jobs in the UK

much more than this. We look after communities, protect the environment, and plan to look after Yorkshires water, today, tomorrow 24 / 7, 365 days a year. We provide essential water and wastewater services to every corner of the Yorkshire region, and play a key role in the regions … ability to adapt to evolving technologies, risks and regulatory requirements. You will also benefit from having: Experience operating in a strategic and / or operational leadership role within a commercial and / or highly regulated environment, with the ability to balance business objectives and regulatory obligations. Demonstrable experience ...

Expertise building microservices and distributed systems. Proven technical leadership experience. Strong architecture and systems design skills. Experience with Docker, PostgreSQL, MongoDB and secure CI / CD. A security-first mindset. Confidence mentoring engineers and influencing technical direction. Experience using AI to accelerate software delivery. Bonus Points For Cyber security … regulated industry experience. Kubernetes and cloud-native technologies. OWASP, ISO 27001 or IEC 62443. Open-source contributions. ...

Expertise building microservices and distributed systems. Proven technical leadership experience. Strong architecture and systems design skills. Experience with Docker, PostgreSQL, MongoDB and secure CI / CD. A security-first mindset. Confidence mentoring engineers and influencing technical direction. Experience using AI to accelerate software delivery. Bonus Points For Cyber security … regulated industry experience. Kubernetes and cloud-native technologies. OWASP, ISO 27001 or IEC 62443. Open-source contributions. ...

Fortinet Network Security Engineer Permanent Remote / UK Travel Are you an experienced Fortinet Network Security Engineer looking to join a rapidly growing consultancy delivering complex infrastructure and security projects? This is an exciting opportunity to work alongside highly experienced engineers, leading the design, implementation and support of enterprise … IPSec and SSL), SD-WAN and High Availability (HA) solutions. Manage and support the wider Fortinet ecosystem, including FortiAnalyzer, FortiManager, FortiClient EMS and FortiSwitch / FortiAP where required. Perform Firewall reviews, optimisation and security hardening following best practice. Monitor security events, investigate incidents and support root cause analysis. Produce ...

Technology Risk / Compliance Analyst (GRC) Up to £66,000 + benefits Edinburgh or Glasgow | Hybrid - 2 days office / 3 days home Our client is a fast-growing, well-established software business providing regulatory and compliance solutions to financial services organisations. They are looking for a Technology … Risk / Compliance Analyst to join their Governance, Risk & Compliance function, reporting directly to the VP of GRC. This role can be based out of either the Edinburgh or Glasgow office, working a hybrid pattern of 2 days in the office and 3 days from home. This ...

Server environments • Strong knowledge of Microsoft 365 and Azure Active Directory (Microsoft Purview beneficial) • Scripting experience using PowerShell • Understanding of frameworks such as NIST, ISO27001 and GDPR • Strong communication skills, able to engage with both technical and non-technical stakeholders • Professional approach with a high level of integrity and confidentiality ...

Offering up to 58,000 Do you have experience in software quality assurance? Are you a qualified Lead Auditor in AS9100, ISO9001, ISO2000, or ISO27001? Do you want to work with an industry-leading company? If your answer to these is yes, then this could be the role … Computers, Cyber-Defense, and Combat Systems) Software Quality Assurance oversight of helicopter mission system equipment and other aviation platforms Inspection and acceptance of modifications / upgrades carried out across Training Logistic Systems Software Quality Assurance oversight of Integrated Warfare Systems and Sensors Software Quality Assurance across the CADMID cycle ...

creates trusted insight into effort, progress, and capacity (without bureaucracy). Provide technical leadership and escalation support: guide architecture and implementation choices, review designs / code when needed, and unblock high‐severity issues in production environments. Create scalable field engineering practices: build reusable patterns, playbooks, and standards that improve … reliability, maintainability, and speed across deployments. Shape the product via field learnings: translate recurring customer needs into clear productization proposals and partner with Product / Core Engineering to reduce one‐offs over time. Partner with customer engineering and enterprise stakeholders: collaborate directly with customer teams (architecture, security, platform ...

Work with delivery teams to ensure security is embedded throughout Experience Required This role is aligned to a technically credible and delivery focused consultant / cyber risk practioner; with an emphasis on real world risk assessment, not theory. Success will come from strong judgement, hands-on experience … impact work in high trust environments Direct engagement with senior client stakeholders Opportunity to shape risk led security decisions Ongoing professional development Flexible working / Remote first Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality are core values to us. ...

experienced cyber security leader with: Previous experience as a Chief Information Security Officer (CISO) , Deputy CISO , or senior Head of Information Security / Cyber Security . A proven track record of leading enterprise-wide cyber security programmes. Strong knowledge of cyber governance, risk management and compliance. Experience operating within … large, complex and highly regulated environments. Excellent stakeholder management skills, with the ability to influence at executive level. Knowledge of frameworks such as ISO 27001 , NIST , Cyber Essentials and recognised security best practice. Professional certifications such as CISSP , CISM or equivalent are desirable. Contract Details Duration ...

Provide enterprise-wide oversight of network security technologies, controls, and architectures. Ensure the effective management and optimisation of firewalls, network access controls, intrusion detection / prevention systems, secure remote access solutions, and related security platforms. Lead investigations into security breaches, suspicious activity, and emerging threats. Drive continuous improvement across … Strong knowledge of cyber incident response, digital investigations, and security event management. Experience operating and managing security technologies such as SIEM, EDR, firewalls, IDS / IPS, web security gateways, and network access controls. Strong understanding of enterprise network security principles and architectures. Experience managing security incidents across complex technology ...

Combat Systems). Software Quality Assurance oversight of Merlin Mk2 helicopter mission system equipment and other aviation platforms. Inspection and acceptance of modification / up-grades carried out across Training Logistic Systems (TLS) in support the ongoing training of military personnel using a variety of simulator and classroom equipment … collaboration with other functions, will also be required. Required skills, qualifications and experience: Qualification in software design, engineering, or computer science (NVQ Level4 / ONC or above). Qualified AS9100 Lead auditor (preferred) or Qualified Lead Auditor in one of the following ISO9001, 2000 or 27001. An understanding ...

threat analysis and risk assessment, you'll have a solid working knowledge of security frameworks and standards such as Cyber Essentials, NIST or ISO 27001, alongside an understanding of UK GDPR and data protection requirements. Our values Our values are important ...

management skills are key, as is experience in regulated industries and knowledge of compliance standards such as GDPR, NIS CAF, NIST CSF, and ISO 27001. Benefits: 10% Company Contribution Pension rising with service Company bonus scheme 25 days Holiday, increasing with service Private Medical Insurance Additional Flex Benefits ...

interests and aptitude, a typical progression looks like: Level 2 (Infrastructure & Systems): supporting servers, network hardware, on-site data centre equipment, and Microsoft 365 / Windows Server administration Level 3 (Platform & Development): gaining exposure to the Magnex platform - Node.js applications, SQL, Git - assisting with testing, bug fixes and documentation … under guidance Level 4 (Security & Integration): involvement in the company's ISO 27001 security programme, EDI / data integration work (e.g. Tradacoms, EDIFACT), and vendor-facing projects Where your progress and the needs of the business align, this role can develop into a permanent ...

obtain UK Security Clearance Desirable: Experience as an IT Security Officer (ITSO) Familiarity with Cyber Security Model V4 in accordance with ISN 25 / 07 Knowledge of ISO 27001 or similar frameworks Security-related qualifications or certifications Background in a regulated, technical, engineering, or defence ...

Senior Security & Compliance Architect London / Hybrid (1-2 days onsite per week) Salary: Up to £140,000 + Package We are seeking a Senior Security & Compliance Architect to lead the design, governance, and assurance of secure cloud and SaaS platforms across large-scale enterprise transformation programmes. The successful … access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS / vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience, backup, and disaster recovery architecture patterns and standards Collaborate with ...

environments. Knowledge of ISO 27001 and Cyber Essentials. Excellent communication and stakeholder management skills. Desirable Skills CISSP and / or Microsoft Security certifications (SC-200, SC-300 or SC-400). Experience working within an MSP or MSSP environment. Security Analyst ...

InternalLocation: UKGlobal Grade: D1 / C2About the job you’re consideringOrganisations are facing a sustained increase in cyber risk, regulatory pressure and operational complexity as they modernise their technology landscapes. Cybersecurity is no longer a standalone technical function; it is central to business resilience, digital transformation and customer trust. … client engagementCybersecurity capability (strong experience across some of these areas):Cybersecurity strategy and operating model designCyber risk management, governance and compliance (e.g. ISO 27001, NIST, NIS2, GDPR)Security architecture and secure‐by‐design principles in cloud and hybrid environmentsIdentity and access management, security operations or cyber ...

model. Leading the ongoing development of Moneybox’s Information Security Programme, using NIST CSF as the practical risk‐management framework while aligning with ISO 27001 for governance, control maturity and assurance. Reducing real security risk across Moneybox’s technology estate, people processes, suppliers and products. Building … transfers to servers and databases outside the country where you provided us with your personal data. Such transfers may include for example transfers and / or disclosures outside the European Economic Area and in the United States of America. If you are unsuccessful in your application, we may keep ...

shape cloud architecture, modernise a legacy platform into a cloud-native environment, and provide senior oversight across platform engineering, security, SRE, CI / CD. Key Responsibilities: Own the AWS platform architecture and modernisation roadmap, including migration from a Java monolith to microservices on EKS. Define standards for containers, runtime … environments, observability, tenancy, security, and infrastructure automation. Lead SRE practices including SLI / SLOs, incident management, DR / BCP planning, post-mortems, and operational resilience. Own platform security, secure SDLC, CI / CD pipelines, IaC, and software supply chain governance. Drive developer productivity through automation, self-service ...

performance, conducting audits on processes, assessing compliance, and executing triage processes. Ensuring regulatory compliance across the service desk, adhering to OFGEM licence conditions, SEC / REC requirements and cybersecurity standards (ISO 27001, NIST-aligned controls), and preparing for and managing audits, including Independent Compliance Officer … Affairs; certifications in QA (e.g., ISO Lead Auditor), L&D (e.g., CIPD), or compliance (e.g., CQA) are preferred. 7+ years in service / operations management within regulated industries such as energy or telecoms, ideally with hands-on experience in smart metering, user interfaces ...

hiring, onboarding, and development within the security team. What you’ll bring: Proven Information Security experience in a regulated or complex environment (financial services / FCA exposure a strong plus). A track record of leading, coaching, and developing analysts. Strong leadership presence and the ability to influence across … defined and operationalised risk and control frameworks for the secure, responsible adoption of AI. Deep knowledge of security frameworks and security best practice (ISO 27001, NIST, OWASP, CIS). Strong command of security risk management, governance, and incident response. Cloud security expertise (Azure preferred), network security ...

internal standards. Work closely with our Managed Service Provider to maintain a secure, reliable and high-performing IT environment. Provide 2nd / 3rd line technical support, managing incidents, changes and problems while carrying out root cause analysis to prevent recurring issues. Monitor and respond to cyber security incidents, manage … relevant parties are informed about key updates Experience supporting, implementing, and maintaining Business Applications Able to manage their time effectively Ability to translate Business / operational requirements into effective solutions Windows Server 2016 through to 2022, and experience of Intune, Active directory, SQL, SharePoint, Power Platform, Entra ID, Azure ...

Party Security 8. Continuous Improvement & Awareness Experience: Holder of relevant CyberSecurity Certifications e.g. CISM, CCSP or CISSP Strong knowledge of security frameworks (e.g., ISO 27001, NIST, CIS Controls) Understanding of cloud security principles (Azure, AWS, or GCP) Familiarity with the concepts, standards and tools involved ...