251 to 275 of 1,157 ISO/IEC 27001 Jobs in the UK

accordance with company procedures, customer requirements and applicable standards including ISO 9001, ISO 14001 and ISO / IEC 27001. Key Responsibilities - Receive and inspect incoming IT equipment. - Identify equipment specifications and record asset information accurately. - Perform diagnostic testing on laptops, desktops … monitors and other IT equipment. - Repair or replace faulty components including: o RAM o SSD / HDD o Keyboards o Batteries o Screens o Cooling systems o Power supplies -- Install and configure operating systems where required. - Carry out BIOS and firmware updates. - Ensure all devices have successfully completed approved ...

APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns for AI application development, including permission boundaries, identity controls, sandboxing, auditability, input / output validation and human-in-the-loop controls. Help clients establish governance and assurance processes for AI systems across the lifecycle, from experimentation through … prompts, APIs, tools and users. Awareness of emerging AI security risks such as prompt injection, sensitive information disclosure, excessive agency, insecure output handling, model / data poisoning, vector or embedding weaknesses and AI supply chain risk. Ability to perform threat modelling for complex systems, including AI-assisted or agentic ...

APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns for AI application development, including permission boundaries, identity controls, sandboxing, auditability, input / output validation and human-in-the-loop controls. Help clients establish governance and assurance processes for AI systems across the lifecycle, from experimentation through … prompts, APIs, tools and users. Awareness of emerging AI security risks such as prompt injection, sensitive information disclosure, excessive agency, insecure output handling, model / data poisoning, vector or embedding weaknesses and AI supply chain risk. Ability to perform threat modelling for complex systems, including AI-assisted or agentic ...

mature cyber security controls within this area, and own the implementation of these plans going forward.**Skills and Experience Specification:****Essential:*** Experience in cyber / information security risk roles with a focus on third-party / vendor risk management.* Bachelor’s degree in information security, Technology Risk Management … related field.* Relevant professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer / Lead Auditor.* Experience in regulated industries, implementing relevant regulations and expectations for third-party security risk management.* Proven experience designing, running, and improving vendor security due diligence processes.* Strong knowledge ...

London AreaG&A – Security & IT Operations / Full-time / HybridWe're all about helping brands turn ideas into impact. Frontify's brand platform transforms how teams organize digital assets, collaborate on projects, and create engaging campaigns. Our people empower thousands of marketers and designers — including teams … information security governance, GRC, or technology risk within a SaaS or cloud environment. You've been the subject matter expert in SOC 2 and / or ISO 27001 audits — not just supporting them, but working directly on controls and partnering with auditors. Experience with additional ...

your team and providing services directly into customers. 1. TechnicalDelivery(OT Cyber Security) Perform OT risk assessments, threat modelling, and vulnerability assessments. Assess and / or assure compliance withtheNIS Regulations, NCSC CAF, NIST CSF, IEC 62443, ISO 27001, and sector-specific guidance. Develop … security measures and designs to deliver security improvements Provideexpert guidance oncommon OT cyber security challenges such assecure integration of IT / OT systems,cloudconnectedOT, remote access,protecting legacy systems,and emerging technologies). Develop and review system hardening standards, network segmentation designs, asset management solutions, and security monitoring approaches ...

plans. Support tendering, proposals, and technical inputs during sales and contract negotiations. Compliance, SHEQ & ISO Management Develop, implement, and maintain company HSEQ / SHEQ management systems. Ensure full compliance with health, safety, environmental, quality, and information / security legislation. Maintain, audit, and continuously improve ISO … across the organisation. Support sustainability and Net Zero initiatives, including energy performance and environmental controls. Key Skills & Competencies Strong technical background within building services / BMS or similar engineering environments. Excellent knowledge of health, safety, environmental, and quality management systems. Commercial and contractual awareness. Strong organisational, analytical, and reporting ...

customer at the heart of everything we do in protecting the bank. Act as the senior cybersecurity partner for GFT domains (Risk / Finance / Treasury / Corporate Functions), advising leadership and delivery teams on material cyber risks, control expectations and risk-based trade-offs to meet … facilitating governance forums and challenging constructively. Collaborative, outcome-driven approach; able to drive delivery through influence in a complex stakeholder environment. DesirableCertifications such as ISO27001, CISA, CISM, CISSP, CRISC, CEH (or equivalent). Experience supporting technology for Finance / Treasury / Risk domains and / or corporate ...

development plans.Support tendering, proposals, and technical inputs during sales and contract negotiations.Compliance, SHEQ & ISO Management Develop, implement, and maintain company HSEQ / SHEQ management systems.Ensure full compliance with health, safety, environmental, quality, and information / security legislation.Maintain, audit, and continuously improve ISO-certified systems … compliance culture across the organisation.Support sustainability and Net Zero initiatives, including energy performance and environmental controls.Key Skills & Competencies Strong technical background within building services / BMS or similar engineering environments.Excellent knowledge of health, safety, environmental, and quality management systems.Commercial and contractual awareness.Strong organisational, analytical, and reporting skills.Confident communicator with ...

Starrycare Recruitment Services | Full time Cyber Security Architect Newport, United Kingdom | Posted on 07 / 08 / 2026 Country United Kingdom Job Description Responsible for designing and governing enterprise security architecture across on-premises, cloud, and hybrid environments. Work closely with security leadership and technical teams to define … Responsibilities Design and maintain enterprise security architecture aligned with business objectives and government security frameworks. Ensure compliance with security standards and regulations including ISO 27001 , PCI DSS , GDPR , GovAssure , NCSC Cyber Assessment Framework , and Secure by Design principles. Develop and manage the security architecture compliance roadmap ...

using Agile Software Development practices such as XP and Continuous Delivery. Experience of managing and prioritising effort across multiple deliverables that are in scoping / development. Experience of working with cross-functional teams to discover and deliver product features that achieve the right outcomes. Knowledge & Skills Strong communication skills … with the ability to use data and narrative to drive action and decision-making with both internal / external stakeholders and delivery teams. Strong knowledge of Microsoft Excel, PowerPoint and Word. An understanding of using Atlassian Jira for product delivery. A strong understanding of how to construct a cohesive ...

Security Advisory & Client Solutions Associate Manager / Manager (Microsoft Security) The Security Advisory & Client Solutions Manager is a senior, client-facing cyber security professional responsible for leading security advisory engagements, shaping strategic security opportunities, and driving growth across Microsoft-first clients. The role combines deep security consulting experience with … delivery teams to convert opportunities into successful security engagements. The role requires a strong understanding of Microsoft's security ecosystem, including Microsoft 365 E3 / E5 / E7, Entra ID, Defender, Sentinel, Purview, Copilot and emerging technologies such as Agent 365. While primarily advisory and client-focused ...

enterprise server environments. Knowledge of Windows Server and Linux operating systems, including administration and troubleshooting. Solid understanding of networking technologies and protocols, including TCP / IP, DNS, DHCP, VPNs, and SD-WAN environments. Experience managing Microsoft technologies such as Active Directory, Entra ID, Microsoft 365, and Intune. Strong analytical … Employer name Cora Health Group Limited Address Newcastle Upon Tyne Newcastle upon Tyne Tyne and Wear NE12 8EU United Kingdom Employer's website http: / / www.corahealth.co.uk / ...

Basic informationLocationLondonBusiness LineTechnology & TransformationJob TypePermanent / FTCDate published28-Aug-2026Req #24476Job descriptionConnect to your IndustryDo you want to be at the heart of some of the biggest and most ambitious programmes undertaken to keep our country safe We are proud of the impact we have with our range … depth knowledge of security frameworks, standards, and best practices (e.g., ISO 27001, NIST, CIS, CAF).Experience of working in Cyber / Information security within the Defence / Security environment with a focus on one of more of the domains (Land, Air, Maritime, Space, Cyberspace ...

researchers to maximize velocity, removing obstacles while maintaining secure compute environments.Google Collaboration: Act as a key technical liaison within the broader Alphabet / Google ecosystem and with strategic security vendors, ensuring Isomorphic Labs maintains its agile, pioneering edge.Vulnerability and Incident Escalation: Serve as the senior technical escalation point … qualificationsEssential:Engineering Leadership: Proven track record of managing, building, or leading technical security teams within fast-paced scale-ups, hyper-growth startups, and / or world-class technology organizationsStrategic Architecture: Deep experience defining, implementing, and defending security architectures across complex, multi-tenant cloud systems.Industry Exposure: Solid professional exposure ...

enjoys solving problems together, sharing knowledge and supporting each other's development. You'll benefit from: Technical variety across a broad range of small / medium (SMB) customers and Microsoft-first environments. Involvement in professional services projects, migrations and technology improvements. Exposure to experienced technical colleagues and real opportunities … engineers. Maintain clear documentation that benefits the wider team. Contribute positively to project work, continual improvement, and ISO 9001 / ISO27001 certification standards. What We Offer £30,000-£35,000 salary, depending on experience and qualifications. 25 days annual leave plus bank holidays. Annual performance-related bonus ...

industry best practice relating to auditing, compliance and risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills / Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience … equivalent) is desirable. Experience in auditing, compliance or risk management, ideally gained in the Public Sector, particularly Defence. Understanding of NCSC CAF v3.2 / v4.0. Some MoD experience is desirable but not essential. Strong analytical and problem solving skills. Excellent communication and interpersonal skills. Ability to work independently ...

industry best practice relating to auditing, compliance and risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills / Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience … equivalent) is desirable. Experience in auditing, compliance or risk management, ideally gained in the Public Sector, particularly Defence. Understanding of NCSC CAF v3.2 / v4.0. Some MoD experience is desirable but not essential. Strong analytical and problem solving skills. Excellent communication and interpersonal skills. Ability to work independently ...

third-party security assessments, including reviewing documentation, assurance reports and control evidence. A solid understanding of information security frameworks and standards such as ISO 27001, NIST, Cyber Essentials and SOC reporting. Strong analytical, organisational and problem-solving skills, with the ability to spot risks, join … Visit the link below to discover why we're a great place to work and what being part of more means for you. https: / / www.morethanacareer.energy / centrica If you're full of energy, fired up about sustainability, and ready to craft not only a better ...

Proven experience working as an Information Security Manager, Cyber Security Manager, Information Assurance Manager or equivalent . Experience leading cyber security, information security and / or compliance activities within a medium-to-large enterprise environment. Strong experience managing an enterprise information / cyber security risk register . Demonstrable … internal and external security audits . Strong knowledge of ISO 27002 and experience delivering against its requirements. Strong knowledge of Cyber Essentials / Cyber Essentials Plus . Experience working with NIST security frameworks. Knowledge of CAF / Cyber Assessment Framework and its application to organisational security. ...

current environment, remediate issues, and implement a modern, scalable endpoint provisioning solution. What You'll Be Doing Create, maintain and optimise Windows 10 / 11 Gold Images for enterprise deployment Assess and troubleshoot the existing Windows laptop provisioning process Design and implement a reliable Microsoft Autopilot and Intune deployment … provisioning processes, SOPs and governance Produce technical documentation and deliver knowledge transfer to BAU support teams Essential Skills Ability to combine traditional imaging / gold image approaches with modern Autopilot provisioning Strong hands-on experience creating and managing Windows Gold Images Strong hands-on experience with Microsoft Autopilot Expert ...

including configuring EDR policies, tuning SIEM rules, and optimizing the system for performance•Work with the network engineers to implement posture management i.e. ICE / NAC segmentation / lateral movement control and firewalls•Proactive collaboration with InfoSec to align CrowdStrike and other key security platforms with our security … support remediation and risk mitigation efforts•Oversee WAF, DDoS, VPN, and perimeter firewalls•Work with Endpoints team to administer MFA, SSO, PAM, MDM / MAM, and Conditional Access•Maintain security certificates, encryption keys, and IDS / IPS systems•Collaborate with third-party penetration testers to identify, prioritize ...

Description GRC / Risk & Assurance Consultants – Secure by Design (MOD) Multiple Contract Roles available Circa £600 / day | Outside IR35 | Hybrid – Reading (1–2 days onsite) We are looking for experienced GRC, Risk & Assurance Consultants to to join a specialist consultancy delivering a major Defence programme in Reading. … with UK Government security principles, guidance and assurance approaches. Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer / Auditor or equivalent. WHAT IS ON THE OFFER? Contract: Outside IR35 Day Rate: CIRCA £600 per day Location: Reading / Hybrid working Onsite ...

make informed decisions while supporting commercial success. You'll drive the day‐to‐day operation and continuous improvement of our compliance programs, including ISO 27001, SOC 2, TISAX, and emerging regulatory requirements. You'll serve as the subject matter expert during audits and ensure our control … information security governance, GRC, or technology risk within a SaaS or cloud environment. You've been the subject matter expert in SOC 2 and / or ISO 27001 audits — not just supporting them, but working directly on controls and partnering with auditors. Experience with additional ...

GDPR and related data protection frameworks Strong regulatory interpretation and analytical skills Excellent written and verbal communication, especially for reporting Ability to translate legal / regulatory language into technical and operational requirements Strong organizational and stakeholder management skills Proactive mindset with high attention to detail Might haves: Professional certifications … such as: CISM, CISSP, CRISC, CISA ISO 27001 Lead Implementer / Auditor Experience working with regulators or in regulated industries (e.g., telecom, financial services, critical infrastructure) Familiarity with compliance tools (e.g., ServiceNow GRC, Archer, MetricStream) Experience with control frameworks such as ISO 27001 ...