351 to 375 of 1,213 ISO/IEC 27001 Jobs in the UK

severity security incidents end‐to‐end, coordinating containment and recovery activities, conducting post‐incident reviews, and acting as the senior technical lead during P1 / P2 events. Own Detection & Response Capability through the design, development and optimisation of SIEM detections, maintaining MITRE ATT&CK coverage, improving detection effectiveness … including the creation of playbooks, automated response actions, and integrations between security tools. Experience working with cloud security technologies, endpoint detection and response (EDR / MDR) solutions, threat intelligence, and vulnerability management processes within a modern technology environment. Strong communication skills with the ability to translate technical security risks ...

severity security incidents end‐to‐end, coordinating containment and recovery activities, conducting post‐incident reviews, and acting as the senior technical lead during P1 / P2 events. Own Detection & Response Capability through the design, development and optimisation of SIEM detections, maintaining MITRE ATT&CK coverage, improving detection effectiveness … including the creation of playbooks, automated response actions, and integrations between security tools. Experience working with cloud security technologies, endpoint detection and response (EDR / MDR) solutions, threat intelligence, and vulnerability management processes within a modern technology environment. Strong communication skills with the ability to translate technical security risks ...

have a strong understanding of: Secure-by-Design | Zero Trust | IAM | Network Security | Encryption | Key Management | Secure Information Exchange Knowledge of NCSC guidance, ISO 27001, Cyber Essentials, MoD 05-138 or NIST would be advantageous. Relevant qualifications or certifications such as CISSP, SABSA, TOGAF, CCSP … ISO 27001 are desirable, although equivalent professional experience will be considered. Why This Role? This is an opportunity to work on genuinely complex security problems , rather than simply applying standard security patterns. You'll work on high-assurance projects supporting government, defence and critical national infrastructure ...

Cyber Security Assurance Manager Contract: 6 Months Location: London (1 day per week onsite / flexible) Day Rate: Competitive Start: ASAP We're supporting a large, international enterprise in the search for an experienced Cyber Security Assurance Manager to lead a cyber assurance and control effectiveness programme across … assurance and control effectiveness assessment. Experience assessing technical controls across cloud, infrastructure, identity, networks and applications. Strong working knowledge of frameworks such as: ISO 27001 NIST Cybersecurity Framework NIST 800-53 CIS Controls MITRE ATT&CK Experience producing board-level reporting and translating technical findings into ...

Contribute to the continuous improvement of assurance practices, maintaining awareness of emerging threats, vulnerabilities and industry best practice. Experience & Capabilities Proven experience in cyber / information security risk management and control assurance roles. Strong analytical skills with the ability to evaluate technical, procedural and design evidence. Excellent written … Working: Remote-first with travel as needed. Career Development: Continuous learning and professional growth. Benefits Package: Includes Private Health Care, Cash Back Plan, Buy / Sell Holiday Options, Life Assurance, and more. Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality ...

27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS / IPS, DLP, endpoint protection, IAM, and encryption. Ability to communicate complex concepts clearly and influence at all levels. Certifications such as CISSP, CCSP, CISM … else to showcase why you would be a great addition to our team. We regret that this position is only available for UK citizens / Residents with indefinite leave to remain in the UK. No recruitment agencies, please! We won't accept any introductions. Vix Technology is an Equal ...

incidents, proactively hunting for threats, and continually improving security detections, controls and working practices. Key Activities: Monitor and investigate security alerts across SIEM, EDR / XDR, email security, cloud platforms, identity, network security and data loss prevention tooling. Triage security events, determine scope and impact, coordinate containment and remediation … related technical security role. Strong investigation, log analysis and correlation skills across endpoint, identity, email, cloud and network telemetry. Experience using SIEM and EDR / XDR platforms to investigate alerts and support containment and remediation. Ability to document investigations clearly, maintain evidence and explain findings to technical ...

incidents, proactively hunting for threats, and continually improving security detections, controls and working practices. Key Activities: Monitor and investigate security alerts across SIEM, EDR / XDR, email security, cloud platforms, identity, network security and data loss prevention tooling. Triage security events, determine scope and impact, coordinate containment and remediation … related technical security role. Strong investigation, log analysis and correlation skills across endpoint, identity, email, cloud and network telemetry. Experience using SIEM and EDR / XDR platforms to investigate alerts and support containment and remediation. Ability to document investigations clearly, maintain evidence and explain findings to technical ...

with infrastructure and technical teams to implement secure configurations Support and maintain security policies, procedures and controls Ensure alignment with recognised frameworks including ISO 27001 and NIST Deliver user awareness initiatives such as phishing simulations and training Stay up to date with emerging threats and recommend … with SIEM platforms, vulnerability management tools and detection response technologies such as EDR, XDR or MDR Knowledge of cyber security frameworks such as ISO 27001 or NIST Understanding of data protection legislation including GDPR Ability to investigate incidents, analyse findings and communicate clearly with stakeholders Strong ...

Analysis (SCA), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), container security, code signing and secret detection. Integrate security tooling into CI / CD pipelines and development workflows. Help development teams embed secure-by-design principles throughout the software development lifecycle. Act as the technical lead … practices, secure coding principles and vulnerability management. Experience working with SCA, SAST, DAST and related application security technologies. Strong experience integrating security into CI / CD pipelines and DevSecOps environments. Experience with automation and scripting tools such as Terraform, PowerShell, Python and REST APIs. Experience leading technical teams ...

Provide specific guidance on the operational implementation of controls to support compliance against the following: ISO 27001 – Security Management Cyber Assessment Framework (CAF) Network Information Systems (NIS) Center for Internet Security (CIS) Benchmarks IEC 62443 Key responsibilities for this job: Define and maintain operational … Internet Security (CIS) benchmarking Network and Information Systems (NIS) National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF) ISO Standards – particularly ISO27001 (Information Security Management) IEC 62443 – especially risk management elements #J-18808-Ljbffr ...

Overall purpose of the job: Provide specific guidance on the operational implementation of controls to support compliance against the following: ISO 27001 – Security Management Cyber Assessment Framework (CAF) Network Information Systems (NIS) Centre for Internet Security (CIS) Benchmarks IEC 62443 Key responsibilities for this … Internet Security (CIS) benchmarking Network and Information Systems (NIS) National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF) ISO Standards – particularly ISO27001 (Information Security Management) IEC 62443 – especially risk management elements #J-18808-Ljbffr ...

engineering teams to understand and articulate technical controls in a customer-facing context. Support compliance initiatives across frameworks such as SOC 2, ISO 27001, ISO 42001, EU AI Act, UK Cyber Essentials, and GDPR, including evidence collection and audit readiness. Identify common themes … security, compliance, and customer engagement. Bonus: Experience working with security questionnaires, audits, or third-party risk assessments. Exposure to cloud security concepts (AWS / GCP, Kubernetes, IAM). Experience improving or scaling trust, GRC, or compliance processes in growing organizations. Prior experience supporting enterprise customers. Comfort engaging with financial ...

external suppliers. Work collaboratively with security teams, IT professionals, project managers, procurement, HR and senior leadership. Support external audits and certification activities, including ISO 27001 and client-led security assessments. Assess and manage the security risks associated with third-party suppliers, systems, software, hardware and services … manage competing priorities. Proficiency in Microsoft Word, Excel and PowerPoint. Desirable Skills and Experience Familiarity with international security standards and frameworks, including ISO 27001, the Cybersecurity Maturity Model Certification (CMMC) and the NIST Cybersecurity Framework. Knowledge of NIST SP 800-53 security controls. Experience working with ...

Vysiion Limited is seeking a compliance-focused professional to implement and maintain controls supporting ISO 27001, CAF, NIS, CIS benchmarks, and IEC 62443 across OT and IT environments in the UK. The role involves guiding engineering teams, coordinating audits, and delivering customer-aligned reports ...

Mozilla is seeking an experienced GRC / compliance professional to maintain and mature the ISMS, support ISO 27001 and SOC 2 Type 2 audits, and lead policy programs across cross-functional teams in a remote UK setting. You will partner with Engineering, IT, Legal, Privacy ...

University Health Board Employer type NHS Site Abergele, Bangor, Wrexham Town TBC Salary £50,129 - £57,365 per annum Salary period Yearly Closing 29 / 10 / 2026 23:59 If you relish a challenge, have a passion to help others or simply fancy a fresh start, then … days holiday entitlement plus bank holidays Generous employer pension contributions Agile and flexible working options Membership of the British Computer Society Car leasing options / Cycle 2 Work scheme Person specification Qualifications Meets all essential criteria as per attached job description / person specification Meets all desirable criteria ...

Full-time | Remote / Hybrid Help shape trust, security and compliance in healthcare technology BC Platforms is a global data and technology company helping transform healthcare through secure data platforms, real-world data, analytics and scientific expertise. As we continue to grow our Technology & Platform organization, we expect … trust and compliance initiatives across cloud-based and regulated environments Driving audit readiness, compliance programs and evidence-based assurance across frameworks such as ISO 27001, GDPR, SOC 2 and GxP Providing leadership on risk management, governance and security strategy Partnering with customers, auditors and key stakeholders ...

least privilege principles, maintain accurate group membership and support periodic access reviews. Security, compliance and audit Support our certification and audit programme, including ISO 27001, Cyber Essentials Plus, the NHS Data Security and Protection Toolkit, and DTAC assessments. This involves evidence collection, remediation of findings … functioning, multi-disciplinary team High trust, ownership, and the opportunity to shape meaningful healthcare software Competitive salary, depending on experience Private pension Generous maternity / paternity leave Office in Paddington with hybrid-working model Laptop and any necessary equipment #J-18808-Ljbffr ...

response Oversee external security partners and supplier security audits Lead annual penetration testing and security awareness programmes Support Cyber Essentials, Cyber Essentials Plus, ISO 27001 and similar frameworks Improve security monitoring, logging and SIEM capabilities Support business continuity, disaster recovery and acquisition due diligence Produce clear … security environment including: Microsoft Azure, Intune, Okta, Zscaler, SentinelOne, Mimecast, Tenable, KnowBe4, SD-WAN, SIEM About you We’re looking for an experienced IT / cyber security professional with a strong background in security governance, risk and compliance, ideally within a multi-site or international environment. You’ll bring ...

security incident response processes and recovery activities. Lead security investigations and oversee remediation Drive compliance with security policies, standards and regulatory requirements, including ISO 27001, Cyber Essentials and PCI-DSS. Manage security audits, risk assessments and improvement plans Deliver security reporting, metrics and risk updates … policies, controls and security improvement programmes. Excellent stakeholder management and communication skills, with the ability to influence at all levels. Strong understanding of ISO 27001, Cyber Essentials, PCI-DSS and wider security best practices. Experience leading teams and driving positive change across technology and business functions. ...

minimum). Experience within a Managed Services Provider (MSP) environment. Experience with automation, AI-enabled service delivery and self-service technologies. Knowledge of ISO 27001, ISO 9001 and Cyber Essentials frameworks. Experience with service reporting, RMM, PSA and endpoint management platforms. Exposure to security ...

comparable platforms Strong Python and SQL, and experience building and monitoring production pipelines using PySpark or Spark Experience with infrastructure as code, CI / CD and a Git and GitHub workflow A track record of setting engineering standards and design patterns, conducting architectural review, and producing design documentation that … your best in the recruitment process. Ifyourequireany reasonable adjustments for any part of the recruitment process, please let us know. Holiday entitlement: 25 days / year for staff and 30 days / year for leadership, increasing by 1 day for every year of service up to a maximum ...

practice, their account and the wider business. You will be responsible for the practice and service line-specific delivery elements of your engagement / account as well as a shared ownership for the overall delivery of client outcomes. You will leverage your client and delivery insight to support … industry teams to identify opportunities and develop client solutions. The right person for this role will do this by combining their technical discipline / craft experience, leadership skills and industry network with Made Tech's unparalleled experience of delivering digital services and digital transformation for the Public Sector. ...

trend analysis to identify recurring issues and improvement opportunities. Security, Compliance, and Governance Support audit and compliance activities, including evidence gathering for ISO 27001 and SOC 1 controls. Document procedures, configurations, and changes to meet internal governance and regulatory expectations. Identify opportunities to automate routine tasks … prioritise competing demands and manage workload across support and project tasks. Collaborative mindset, with a willingness to share knowledge across the team. Role Location / Hybrid Schedule This role requires you to work a hybrid schedule, comprised of at least four (4) days a week on‐site ...