26 to 50 of 372 ISO/IEC 27001 Jobs in the UK

vCISO engagements, including governance, policy development, and exec‐level reporting Perform reviews of technical controls, secure development practices, DevOps pipelines, and cloud architectures (AWS / Azure) Scoping & Pre‐Sales Provide expert input during pre‐sales discussions Support the creation of high‐quality, bespoke Statements of Work Engage with clients … Cyber Essentials & Cyber Essentials Plus Desirable: One or more of: PCI QSA, CISA, CISM, CISSP, CRISC, ISO 27001 Lead Auditor / Implementer Technical Competence Experience across a range of technologies including: firewalls, IDS / IPS, anti‐malware, SIEM / logging, patch / ...

Purpose of Position As Information Security GRC Specialist (f / m / d) you will own and drive Awin’s global Information Security Risk Management capability end-to-end, ensuring the business not only understands its risks but takes measurable action to reduce them. You will be accountable … implementing, or improving control frameworks Experience with GRC platforms (e.g. Hyperproof) Confident communicator (with very good English skills) - able to build relationships and challenge / influence senior stakeholders Our Offer Flexi-Week and Work-Life Balance : We prioritise your mental health and well-being, offering you a flexible four ...

Purpose of Position As Information Security Risk Manager (f / m / d) you will own and drive Awin’s global Information Security Risk Management capability end-to-end, ensuring the business not only understands its risks but takes measurable action to reduce them. You will be accountable … implementing, or improving control frameworks Experience with GRC platforms (e.g. Hyperproof) Confident communicator (with very good English skills) - able to build relationships and challenge / influence senior stakeholders Our Offer Flexi-Week and Work-Life Balance : We prioritise your mental health and well-being, offering you a flexible four ...

assurance questionnaires Privacy & Data Protection Support with maintaining Records of Processing Activities, DPIAs and related documentation Route queries to the organisation’s external DPO / privacy partner Maintain strong information governance practices Stakeholder Engagement Act as the internal go to for GRC questions and coordination Work with … Essential Experience Experience in governance, compliance, risk, information security or information governance Exposure to frameworks such as ISO 27001 and / or GDPR Strong organisation and documentation skills Excellent written and verbal communication Ability to translate technical or regulatory topics into practical, easy to understand ...

workload classification and frequent travel to all sites across the UK Security Clearance : British Citizen or a Dual UK national with British citizenship / Restrictions and / or limitations relating to nationality and / or rights to work may apply. As a minimum and after offer stage … network of Asset Owners and formally document the asset registers for their areas of operation. What we're looking for from you: CISSP, InfoSec / Cyber Degree or equivalent (Essential) Experience or relevant certifications in network security or industrial control system hardening (Essential) Knowledge of security surrounding systems enabling ...

alignment while helping to strengthen overall security posture. Key Responsibilities Certification & Compliance Lead the delivery and maintenance of key certifications including ISO / IEC 27001, SOC 2 Type II, SOC 3, Cyber Essentials Plus, and CREST Oversee additional frameworks such … NCSC standards (CIR / CHECK) Ensure certifications are maintained, renewed, and continuously improved Security Assurance Embed security and certification requirements into operational processes Maintain audit readiness through ongoing monitoring and evidence collection Translate compliance requirements into practical procedures for operational team Customer Assurance Act as the main point ...

Energy & Utilities clients. This senior role will be responsible for shaping security strategy, leading technical delivery, influencing senior stakeholders, and mentoring consultants across IT / OT security domains. The ideal candidate brings deep OT / ICS expertise, an understanding of energy and utility sector regulations, strong consulting capability … architectural reviews. · Advise senior client stakeholders on governance, risk, resilience, and regulatory obligations. · Define OT security improvement roadmaps and investment cases. Technical OT / ICS Delivery Leadership · Lead design and validation of secure OT architectures including segmentation, firewalls, DMZs, and remote access. · Oversee OT vulnerability assessments, configuration reviews ...

ROLE OVERVIEW / / We are seeking a technically adept Application Engineer to join our Business Systems team in the Technology department. You will be part of a cross-functional team of engineers who are responsible for the configuration, development, implementation, security and support of the firm … expert for the firm’s Azure integrations. You will work with other applications, such as the Master Data Management system, as needed. KEY RESPONSIBILITIES / / Application Management and Development Manage the configuration, deployment and ongoing support of Azure integrations. Develop, test and optimise Azure integrations. Serve ...

Senior Security Analyst / Security Engineer London (City) | £80,000–£90,000 | Permanent If you’re the kind of security engineer who can spot an active threat, contain it calmly, and then harden the environment so it doesn’t happen again — this role is built for you.We’re hiring … hands-on Senior Security Analyst / Security Engineer to strengthen a Microsoft-centric security posture across detection, response, tooling, and infrastructure hardening. Not a one-lane SOC role. Not governance-heavy. This role blends incident response with security engineering and hardening and ideal for someone with 4–5 years ...

roadmaps ensuring agreed actions are completed, not just documented. Run regular risk and vulnerability reviews, prioritising remediation and driving work into the Service Desk / Projects teams. Lead incident handling end - to - end: triage, investigation, containment, communication, documentation, and lessons learned. Monitor and improve Microsoft 365 security posture across … ensure alerts are assessed, escalated, and addressed. Own patching, vulnerability reporting, and remediation follow - through. Conduct technical control checks (email security, endpoint protection, MFA / SSPR, logging, backups, etc.). Attend client and internal security meetings, clearly communicating risks, progress, and next steps. Maintain our security documentation, processes ...

Infrastructure / Security / DevOps A high‐growth AI company is building the next generation of workflow automation for large enterprises — and are looking for a Senior Infrastructure Engineer to help scale their platform as they onboard global customers. The product transforms complex, manual processes into fully automated … reliability culture, and operational excellence. Key Responsibilities Architect, implement, and scale cloud infrastructure to support rapid growth Prepare systems and processes for SOC 2 / ISO 27001 audit readiness Build and maintain CI / CD pipelines across backend, frontend, and data services Develop ...

Information Security Manager | £70,000–£80,000 | Remote (UK) | Eligible for SC / DV Clearance Protect. Enable. Lead. Join TwinStream—a dynamic, engineering-led consultancy born from real-world problem solvers within UK government organisations. We bring technical excellence to complex missions, and now we're looking for someone … improvement of security practices and behaviours Ensure compliance with ISO 27001, Cyber Essentials Plus, UK GDPR, and MOD CSM v3 / v4 Plan, coordinate, and support internal / external audits and pen tests Embed security into projects, cloud services, and software delivery Deliver engaging ...

ISO Manager Location: Ringwood, Hampshire + non-contractual hybrid home working Salary: £40,000 - £45,000 DoE + Profit Share + Benefits Hours: 37.5 hours per week The Role Are you an experienced ISO and Compliance Manager, who ensures an organisation maintains full adherence … ISO 27001, ISO 20000, and ISO 14001 management systems. Coordinating internal audit schedules. Supporting external surveillance / recertification audits. Maintaining controlled documentation and evidence of conformity. Planning and coordinating audit activity. Supporting organisational risk management and maintaining relevant registers. Skills ...

Data Security Consultant SC Cleared - £450 / day via Umbrella - 6 Month Contract - Birmingham - Hybrid - SCC Flex Contract We are seeking an experienced Data Security Consultant to support our clients in designing and delivering pragmatic, business-aligned data security and governance outcomes. This Data Security Consultant role is advisory … information protection strategies aligned to business risk and regulatory requirements Design and deliver Microsoft Purview solutions Translate regulatory and GRC requirements (eg GDPR, ISO 27001, NIST, data residency and retention) into practical, defensible data security controls Conduct data risk assessments, gap analyses, and control reviews across ...

Cyber Security Architect — Security Architecture & Consulting Salary: Up to £75,000 base (DOE) + up to 10% bonus Location: Remote / Home-based with occasional client travel We’re supporting a growing cybersecurity consultancy that is expanding its security architecture and technical consulting capability due to increasing demand … Designing secure architectures across cloud, hybrid and on-prem infrastructure Producing key security architecture artefacts including threat models, risk assessments, architecture blueprints, and high / low-level design documentation Advising clients on implementing security controls aligned with frameworks such as NIST, CIS, ISO 27001, Cyber ...

Senior Cyber Security Architect — Security Architecture & Consulting Salary: Up to £75,000 base (DOE) + up to 10% bonus Location: Remote / Home-based with occasional client travel We’re supporting a growing cybersecurity consultancy that is expanding its security architecture and technical consulting capability due to increasing demand … Designing secure architectures across cloud, hybrid and on-prem infrastructure Producing key security architecture artefacts including threat models, risk assessments, architecture blueprints, and high / low-level design documentation Advising clients on implementing security controls aligned with frameworks such as NIST, CIS, ISO 27001, Cyber ...

Cyber Security We are seeking an experienced OT Security Consultant to support our Energy & Utilities clients in designing, implementing and maturing their IT / OT security capabilities. In this role, you will work with Critical National Infrastructure (CNI) operators, distribution networks, generation facilities and major utilities organisations to help … threat modelling and risk assessments aligned to industry standards. · Support clients in developing OT security improvement plans, security roadmaps and investment cases. Technical OT / ICS Security Delivery · Perform OT network security reviews, segmentation assessments and architecture validation work. · Assist with the design and implementation of secure OT networks ...

ISO and Compliance Manager Location: Ringwood, Hampshire + non-contractual hybrid home working Salary: £40,000 - £45,000 DoE + Profit Share + Benefits Hours: 37.5 hours per week The Role Are you an experienced ISO and Compliance Manager, who ensures an organisation maintains full adherence … ISO 27001, ISO 20000, and ISO 14001 management systems. Coordinating internal audit schedules. Supporting external surveillance / recertification audits. Maintaining controlled documentation and evidence of conformity. Leading the annual DSPT submission and maintaining DSPT evidence libraries. Planning and coordinating Cyber Essentials ...

care. We also operate an Insurer Portal and support a growing data services capability. The role suits someone with strong Azure infrastructure, Kubernetes, CI / CD, and DevOps capability, combined with a practical, service-oriented mindset. You will improve reliability, observability, deployment maturity, security posture, and infrastructure consistency, while … where priorities matter and good judgement counts. Why Join Us? Fully remote role with flexible working options Personal development plans, including a professional development / training budget 25 paid holiday days plus bank holidays (your birthday off too!) Enhanced maternity and paternity pay 4% employer contribution to company pension ...

compliance, assurance reviews, and gap analysis Oversight and improvement of the Information Security Risk Management frameworks and process Conducting in depth supplier due diligence / third party assurance processes Manage audit readiness and support internal / external audit activities Own and deliver the organisation's security awareness programme … Operational Technology (OT) Security Assurance Framework The successful candidate will have the following skills, experience and qualifications: Professional certifications such as CISSP, CISM, ISO27001 Lead Auditor, CLAS etc Extensive experience in information security or IT governance within large, complex environments Strong knowledge of security frameworks (ISO / ...

compliance, assurance reviews, and gap analysis Oversight and improvement of the Information Security Risk Management frameworks and process Conducting in depth supplier due diligence / third party assurance processes Manage audit readiness and support internal / external audit activities Own and deliver the organisation's security awareness programme … Operational Technology (OT) Security Assurance Framework The successful candidate will have the following skills, experience and qualifications: Professional certifications such as CISSP, CISM, ISO27001 Lead Auditor, CLAS etc Extensive experience in information security or IT governance within large, complex environments Strong knowledge of security frameworks (ISO / ...

Graduate Operational Technology (OT) Cyber Security Analyst / Engineer 3 days a week onsite (London or Leicester or Sunderland or Crewe or Derby or Luton) Permanent role with excellent salary + company benefits This person will receive all the training and paid qualifications to move into an Operational Technology … engineering professionals Financial support and study time for professional certifications such as: Certified Information Systems Security Professional Certified Information Security Manager ISO / IEC 27001 Lead Auditor Exposure to large-scale operational systems and real-world cybersecurity challenges Opportunities to grow into specialist ...

Graduate Operational Technology (OT) Cyber Security Analyst / Engineer 3 days a week onsite (London or Leicester or Sunderland or Crewe or Derby or Luton) Permanent role with excellent salary + company benefits This person will receive all the training and paid qualifications to move into an Operational Technology … engineering professionals Financial support and study time for professional certifications such as: Certified Information Systems Security Professional Certified Information Security Manager ISO / IEC 27001 Lead Auditor Exposure to large-scale operational systems and real-world cybersecurity challenges Opportunities to grow into specialist ...

build, and maintain scalable cloud infrastructure to support rapid product growth Own DevOps, observability, and reliability across the platform Prepare systems for SOC 2 / ISO 27001 audit readiness Build and manage CI / CD pipelines across backend, frontend, and data services Implement logging … understanding of networking (VPCs, DNS, load balancers, VPNs, firewalls) Experience managing production databases (PostgreSQL, MySQL, NoSQL) and storage Scripting and automation using Python and / or Bash Security best practices, secrets management, and vulnerability scanning Experience 4–7 years in platform, infrastructure, or DevOps engineering Startup or high-growth ...

compliance processes within a regulated, safety-critical environment. You ll work closely with senior stakeholders to maintain alignment with frameworks such as ISO 27001 and NIST CSF, ensuring controls remain effective and audit-ready. Key Responsibilities of the Governance, Risk & Compliance Officer: • Manage and maintain … communication skills. • Organised, proactive, and able to manage multiple priorities. • Experience within transport, utilities, or similar regulated sectors is highly desirable. • Exposure to OT / ICS environments is a plus. • Certifications such as ISO 27001, CISMP, or CISM are advantageous. Apply now to speak with ...