401 to 425 of 885 ISO/IEC 27001 Jobs in the UK

seeking a Lead Cyber Security Advisor for an initial 6 assignments with the option to extend. Location: East Kilbride (Glasgow) or London / Hybrid The ideal candidate will have an active security clearance and a strong background in Cyber Security and risk management within a high-threat government environment. … Skills and Experience: Proven expertise in risk management, particularly in information security, utilizing recognized methodologies such as NIST 800-30 / 37 and ISO 31000. Experienced in managing both internal and external cybersecurity risks related to IT systems, services, and data storage, especially within digital cloud services. ...

Defender security assessment tools, vulnerability scanning tools and SIEM platforms. In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS / IPS, Load Balancers, Application Gateways, Proxies, M365, EDR and KQL.Expertise in utilising Azure DevOps to drive efficient and collaborative development processes, including the development … have a range of support to help you keep yourself well. We have the thrive mental health app, our colleague assistance programme available 24 / 7, our own, in-house mental health first aiders, support groups and a dedicated team to make sure we are covering your needs There ...

successful doing what they love. Your Team You’ll join SumUp’s Global Internal Audit team , part of our wider G&A / GRC function , reporting directly to the Global Head of Internal Audit . This team plays a critical role in protecting SumUp’s integrity, supporting regulatory compliance … hands‐on IT auditor who enjoys combining technical depth with clear communication and stakeholder collaboration. Must‐have experience: Minimum 4 years’ experience in IT / Internal Audit within a regulated financial services environment Strong knowledge of audit standards, risk management, and internal controls Experience auditing IT controls and frameworks ...

Security Division Mission of securing GitLab Infrastructure with our own product ("dogfooding") What You'll Bring Expert knowledge of security for cloud infrastructure (AWS / GCP / Azure), container orchestration (Kubernetes) and related infrastructure and data security topicsProficiency in multiple programming languages (Go, Python, Ruby) with a track … communication skills, able to explain security tradeoffs to technical and non-technical audiences, including senior leadershipFamiliarity with security certifications, frameworks, and standards (FedRAMP, ISO 27001, SOC 2, PCI-DSS)Share our values, and work in accordance with those valuesPlease note that we welcome interest from candidates ...

WILL DOPartner with Trading, Middle Office and Quant (Institutional FinOps) teams to map out inventory trading systems, data flows, third-party integrations and custody / settlement touchpoints. Conduct deep-dive assessments mapping critical assets and workflows to identify structural vulnerabilities. You will be responsible for defining the Target State … maintain monitoring for FinOps-specific security signals such as abnormal order patterns, signature misuse, unusual settlements. You will integrate these signals into our SIEM / SOAR for real-time response. Support secrets and key-management hygiene. You will ensure app / service keys are stored in KMS / ...

etc.). Understanding of cryptography, encryption and security protocols. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge of compliance frameworks (ISO 27001, NIST CSF, etc.). Personal Attributes Exceptional strategic thinking combined with strong technical depth. Outstanding communication and stakeholder engagement skills. Strong ...

firewalls, etc.)Understanding of cryptography, encryption and security protocolsFamiliarity with MOD security requirements, Classification Guides and defence standardsKnowledge of compliance frameworks (ISO 27001, NIST CSF, etc.)Personal AttributesExceptional strategic thinking combined with strong technical depthOutstanding communication and stakeholder engagement skillsStrong problem-solving and analytical capabilitiesProven ability ...

complex technical issues * Own end-to-end incident, request, problem and change management aligned to ITIL best practice * Oversee ticket queues, workload distribution, SLA / OLA adherence and ticket quality * Produce regular service reporting (SLAs, backlog, ticket ageing, trends, first-time fix rates) and provide insights to leadership * Drive … continuous improvement through root cause analysis, gap analysis and service optimisation initiatives * Coordinate service desk involvement in projects, rollouts, migrations and onboarding / offboarding activities * Work closely with infrastructure, security, applications teams and third-party suppliers to ensure effective service delivery * Maintain and improve knowledge management, documentation and standard ...

Cyber Security GRC Consultant (DV Cleared) Location: Cambridgeshire / London, Hybrid - c. 3 days minimum on-site presence required Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk … culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD / Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce ...

Cyber Security GRC Consultant (DV Cleared) Location: Cambridgeshire / London, Hybrid - c. 2-3 days on-site presence required Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk … culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD / Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce ...

Senior DevSecOps Engineer Reading (Hybrid working available) Active SC Clearance required Up to £71 p / h Inside IR35 We're looking for an experienced security cleared Senior DevSecOps Engineer to play a key role in delivering secure digital platforms for high-profile Defence and Aerospace programmes. … Senior DevSecOps Engineer, you will: Lead the design and implementation of secure DevSecOps platforms and toolchains Embed automated security controls into CI / CD pipelines Develop secure Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated ...

roles which your background might be better suited to. 5+ years of relevant experience in the medical device space (either industry or through consulting / service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security … Skilled in crafting compelling proposals and other business development materials. Proficient in cultivating opportunities within the client base and network. Holds Cyber Security accreditations / qualifications such as [CISSP, CSSLP, CISM], indicating a solid foundation in the field. You thrive in problem-solving and analytical thinking You enjoy collaborating ...

roles which your background might be better suited to. 5+ years of relevant experience in the medical device space (either industry or through consulting / service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security … Skilled in crafting compelling proposals and other business development materials. Proficient in cultivating opportunities within the client base and network. Holds Cyber Security accreditations / qualifications such as [CISSP, CSSLP, CISM], indicating a solid foundation in the field. You thrive in problem-solving and analytical thinking You enjoy collaborating ...

Experience with SAST, DAST and software composition analysis tools Knowledge of secure coding practices across languages such as Java, C, C++ Experience with CI / CD pipelines and DevSecOps integration Threat modelling techniques and tools Understanding of OWASP Top 10 and common vulnerability classes Experience with API security … application security, secure development or software engineering with a security focus Hands-on experience conducting application security reviews Experience implementing security in CI / CD processes Experience working with development teams in an enterprise environment Desirable Experience building or contributing to a security CoE or capability model Experience working ...

U.S. Department of War and Fortune 500s, our platform runs on-premises and in private clouds, delivering secure messaging, file sharing, workflow automation, audio / screenshare, and project management—all with full data and operational control. Mattermost powers high-stakes workflows across mission planning, real-time, real-world operations … policies, incident response, forensics, and endpoint management programmesPartner with Engineering to assess and mitigate risks from AI-enabled tools and workflowsExplore and implement AI / automation in detection, analysis, and response pipelinesEngage closely with North American and international staff across time zonesRequired Background & Skills Bachelor's degree in Computer ...

secure coding standards across technologies including Java, C and C++. Embed security throughout the Software Development Lifecycle (SDLC). Design and support secure CI / CD pipeline patterns. Integrate SAST, DAST, SCA and security tooling into development workflows. Support automation of security controls and assurance activities. Security Leadership & Developer … application security principles and secure coding practices. Experience working with SAST, DAST and Software Composition Analysis (SCA) tools. Experience integrating security controls into CI / CD pipelines. Strong understanding of OWASP Top 10 and common vulnerability classes. Experience with API and web application security. Knowledge of threat modelling techniques ...

security, or equivalent).Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.).Understanding of cryptography, encryption and security protocols.Knowledge of compliance frameworks (ISO 27001, NIST CSF, etc.).Personal AttributesExceptional strategic thinking combined with strong technical depth.Outstanding communication and stakeholder engagement skills.Strong problem-solving and analytical ...

ensure compliant, ethical, and secure AI systems. This role requires strong data governance and risk management experience in defence or government, with ISO 27001 and ISO 42001 knowledge, plus active UK SC or DV #J-18808-Ljbffr ...

Title: Product Manager Reports to: Head of Product Department: Product Hours: Full Time, 39.5 hrs per week Location: Hybrid / Remote , with 3 days per week in the office Role Purpose: The Product Manager is responsible for identifying, shaping and validating product opportunities within the Commercial / Enterprise … Technical Product Owner leads on feasibility, technical shaping, backlog detail and delivery readiness. Key Responsibilities: Own the early-stage product thinking for the Commercial / Enterprise revenue stream by turning commercial, client and stakeholder requests into clear product opportunities, expected outcomes and measurable success criteria. Lead discovery and validation ...

selection. Maintain cyber threat awareness on a company global scale and bespoke to the organisation. Oversee security within network architecture, encryption protocols, and identity / access management for restricted environments. Direct cyber security audits and penetration testing across defence platforms and supply chains. Provide cyber security training and awareness … GDPR).Excellent leadership, stakeholder management, and ability to operate under pressure. Degree in Cyber Security, Computer Science, or related field. Degree or equivalent defence / security qualifications preferred. Security clearance (SC or DV) required or eligibility to obtain. Desirable: Professional certifications: CISSP, CISM, CISA, CEH, or equivalentExperience with secure ...

selection. Maintain cyber threat awareness on a company global scale and bespoke to the organisation. Oversee security within network architecture, encryption protocols, and identity / access management for restricted environments. Direct cyber security audits and penetration testing across defence platforms and supply chains. Provide cyber security training and awareness … . Excellent leadership, stakeholder management, and ability to operate under pressure. Degree in Cyber Security, Computer Science, or related field. Degree or equivalent defence / security qualifications preferred. Security clearance (SC or DV) required or eligibility to obtain. Professional certifications: CISSP, CISM, CISA, CEH, or equivalent Experience with secure ...

selection. Maintain cyber threat awareness on a company global scale and bespoke to the organisation. Oversee security within network architecture, encryption protocols, and identity / access management for restricted environments. Direct cyber security audits and penetration testing across defence platforms and supply chains. Provide cyber security training and awareness … . Excellent leadership, stakeholder management, and ability to operate under pressure. Degree in Cyber Security, Computer Science, or related field. Degree or equivalent defence / security qualifications preferred. Security clearance (SC or DV) required or eligibility to obtain. Desirable: Professional certifications: CISSP, CISM, CISA, CEH, or equivalent Experience with ...

Crowdstrike Pre-Sales Senior ManagerUK-wide / hybridCareer Level 6We areWe are a global collective of innovators applying the New every day to improve the way the world works and lives. Help us show the world what's possible as you partner with clients to unlock hidden value … least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability / exposure managementProven experience with enterprise security architectures, including identity infrastructure, cloud environments (AWS, Azure, GCP), OT / ICS environments, or hybrid data centerBachelor ...

such as identity & access management (IAM), zero-trust architectures, cloud security, and data privacyframeworks, payment systems, fraud detection, digital banking security, and third-party / vendor risk management. Advise financial institutionsonregulatory compliance(e.g., FCA / PRA, - relevant regulations, , ISO 27001, NIST,CSF, Data Privacy … Advise clientsin areas such as identity & access management (IAM), zero-trust architectures, cloud security,data privacyframeworks, fraud detection, digital banking security, and third-party / vendor risk management. Support financial institutionsin achieving compliance with evolving regulations, enhancingoperational resilience and cyber incident response capabilities. Develop cyber risk frameworksthat embed security ...

understanding of enterprise IT environments and modern technology architectures. Experience assessing or managing one or more of the following: Cloud platforms (Azure, AWS and / or Google Cloud) Enterprise infrastructure and networks Data centres and hosting environments IT operations and service management Enterprise applications and ERP platforms Identity … business continuity Data platforms and integration architectures Familiarity with one or more of the following technology frameworks and best practices: ITIL COBIT NIST ISO 27001 Well-Architected Frameworks Cloud Adoption Frameworks Experience evaluating technology risks, technical debt and technology investment requirements. Solid understanding of core cybersecurity ...