426 to 450 of 887 ISO/IEC 27001 Jobs in the UK

understanding of enterprise IT environments and modern technology architectures. Experience assessing or managing one or more of the following: Cloud platforms (Azure, AWS and / or Google Cloud) Enterprise infrastructure and networks Data centres and hosting environments IT operations and service management Enterprise applications and ERP platforms Identity … business continuity Data platforms and integration architectures Familiarity with one or more of the following technology frameworks and best practices: ITIL COBIT NIST ISO 27001 Well-Architected Frameworks Cloud Adoption Frameworks Experience evaluating technology risks, technical debt and technology investment requirements. Solid understanding of core cybersecurity ...

architects, offensive security specialists, risk teams, and senior business stakeholders. Practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red / purple team findings, exploitability, and risk-based remediation. Security solution architecture knowledge across cloud, identity and access management, network security, application security, endpoint, data … consulting, operational resilience, or a related financial services role. Certifications: Relevant certification to support relevant experience such as CISSP, CISM, CRISC, OSCP, CREST, GIAC / SANS, SABSA and vendor specific certification. Knowledge of tools or technologies: Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO ...

Description Senior DevSecOps EngineerReading (Hybrid working available)Active SC Clearance requiredUp to £71 p / h Inside IR35We're looking for an experienced security cleared Senior DevSecOps Engineer to play a key role in delivering secure digital platforms for high-profile Defence and Aerospace programmes. You'll lead … lifecycle. As the Senior DevSecOps Engineer, you will: Lead the design and implementation of secure DevSecOps platforms and toolchainsEmbed automated security controls into CI / CD pipelinesDevelop secure Infrastructure as Code (Terraform, Bicep, ARM, Ansible)Design secure Azure, AWS and hybrid cloud environmentsImplement vulnerability management, security monitoring and automated ...

identity & access management (IAM), zero-trust architectures, cloud security, and data privacy frameworks, payment systems, fraud detection, digital banking security, and third-party / vendor risk management. Advise financial institutions on regulatory compliance (e.g., FCA / PRA, - relevant regulations, , ISO 27001, NIST, CSF, Data … areas such as identity & access management (IAM), zero-trust architectures, cloud security, data privacy frameworks, fraud detection, digital banking security, and third-party / vendor risk management. Support financial institutions in achieving compliance with evolving regulations, enhancing operational resilience and cyber incident response capabilities. Develop cyber risk frameworks that ...

Title: AI Technical Lead - IT Location: SPAIN / UK - Harrogate / Remote WHO WE ARE Certinia delivers a Services-as-a-Business platform that powers and connects all aspects of services operations, from services estimation and delivery to customer success management and financial planning and accounting. The company … with at least 3 years in a technical lead role delivering enterprise-grade process automation. AI Implementation Track Record: Proven experience utilising existing AI / ML technologies to transform business processes and mitigate LLM-specific risks (e.g., prompt injection and data leakage). Leadership Interfacing: Demonstrated experience engaging with ...

Exposure to vulnerability management and threat hunting activities. Experience supporting government, defence, or public sector programmes. Familiarity with security frameworks such as NIST, ISO 27001, or CIS Controls. Consulting or client-facing experience. Key Competencies Cybersecurity Operations Cyber Threat Intelligence Threat Modelling Security Monitoring Risk Analysis ...

management, and enterprise risk management, combined with strong stakeholder engagement and leadership skills to drive security transformation programmes across the organisation. Qualification BSC and / or MSc in Cyber Security, Computer Science, Information Technology, Information Security or related subject or relevant industry experience. CompTIA Security+ CASP+ (or SecurityX) Associate … membership grade with CIISEC ICS2 Certified Cloud Security Professional (CCSP), Certified Information, Systems Security Professional (CISSP), and / or Information Systems Security Architecture Professional (ISSAP) CESG Certified Cyber Professional (CCP) in Security Architecture or Risk Management Additional cloud security qualifications such as Microsoft Azure, AWS, GoogleAdvanced degree ...

Cyber Security GRC Consultant (DV Cleared) Location: Hybrid / South West Region Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within MOD and Public … culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD / Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce ...

What we require: Experience in a Cyber Security Engineer, SOC Analyst, or similar security-focused role. Hands-on experience with Microsoft Defender (Endpoint and / or O365 security). Experience using Rapid7 SIEM or a comparable SIEM platform for alerting and investigations. Experience managing or supporting Sophos Antivirus … Good working knowledge of Windows environments and basic networking concepts. Strong documentation, reporting, and communication skills. Practical experience with security tools such as IDS / IPS, Metasploit, Nexpose, Nmap, Nessus, Wireshark, L0phtCrack, John the Ripper, or similar. Familiarity with recognised information security frameworks such as ISO 27001 ...

internal and customer networks. Act as a technical centre of excellence for network and device security. Monitor and investigate security events using SIEM, IDS / IPS and other security tools. Investigate and resolve security incidents and provide incident response support. Manage vulnerabilities and support penetration testing and security assessments. … with customers, suppliers and technology partners as required. Technical Requirements Strong hands-on experience with: Cisco firewalls, routers and switches Juniper platforms SIEM IDS / IPS Vulnerability management Penetration testing Computer forensics Secure network design and management Security monitoring and incident investigation Good knowledge of: ISO 27001 ...

aligned DSPT assessments. Knowledge of NHS information governance and data protection requirements. Experience with ISO 27001, NIST, Cyber Essentials / Cyber Essentials Plus or similar security frameworks. Experience with risk and control frameworks, audit methodologies or maturity models. Experience supporting cyber transformation, remediation or organisational … speak with Edward Laing here at ISR Recruitment on 07436 071 872 or please send through a copy of your latest online profile and / or CV (edward@isr.uk.com) for an immediate call back in the strictest confidence. If you have substantial hands-on experience in DSPT ...

across sectors and other Baringa capabilities, working as one firm around the client's problem Using AI tooling to deliver consulting services responsibly, and / … building tooling and automation – for example agentic AI, Power BI, Power Apps, risk quantification or digital twins. Even Better If Certifications in CISSP, ISO27001, NCSC CCP, GCISP, PRINCE2 (or equivalent), AI governance (e.g. AIGP), cloud security (CCSP or CCSK), business continuity and resilience (e.g. BCI), and post-quantum or cryptography ...

Exposure to vulnerability management and threat hunting activities. Experience supporting government, defence, or public sector programmes. Familiarity with security frameworks such as NIST, ISO 27001, or CIS Controls. Consulting or client-facing experience. Key CompetenciesCybersecurity OperationsCyber Threat IntelligenceThreat ModellingSecurity MonitoringRisk AnalysisIncident InvestigationCyber Risk ManagementThreat AssessmentStakeholder EngagementProblem ...

model. Leading the ongoing development of Moneybox’s Information Security Programme, using NIST CSF as the practical risk‐management framework while aligning with ISO 27001 for governance, control maturity and assurance. Reducing real security risk across Moneybox’s technology estate, people processes, suppliers and products. Building ...

Microsoft Intune Microsoft Purview Microsoft Copilot for Security Desirable Experience within Local Government, Public Sector, NHS, Education or other regulated environments Knowledge of ISO27001, NIST, Cyber Essentials and related security frameworks Experience supporting digital transformation and cloud-based security initiatives What's on Offer? Opportunity to shape and influence cyber ...

technology selectionWhy You? Basic Qualifications: We are looking for professionals with the required skills to achieve our goals: Deep hands-on expertise with Cisco / Juniper architecture (wireless and access-layer switching)Understanding of the design and management differences between traditional controller-based and cloud-native, AI-driven architectures … Technology (OT), Packet Switching, Security Engineering, Software-Defined Networking Wide Area Network (SD-WAN), System Monitors, Wireless System Design, Zero Trust ArchitecturePolish Salary Range / Polski przedział wynagrodzenia: PLN 270,750 to PLN 451,250The annual gross base salary range for new hires in this position is listed above ...

Work with delivery teams to ensure security is embedded throughout Experience Required This role is aligned to a technically credible and delivery focused consultant / cyber risk practioner; with an emphasis on real world risk assessment, not theory. Success will come from strong judgement, hands-on experience … impact work in high trust environments Direct engagement with senior client stakeholders Opportunity to shape risk led security decisions Ongoing professional development Flexible working / Remote first Interested? Submit your application to learn more about this exciting opportunity. ...

Work with delivery teams to ensure security is embedded throughout Experience Required This role is aligned to a technically credible and delivery focused consultant / cyber risk practioner; with an emphasis on real world risk assessment, not theory. Success will come from strong judgement, hands-on experience … impact work in high trust environments Direct engagement with senior client stakeholders Opportunity to shape risk led security decisions Ongoing professional development Flexible working / Remote first Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality are core values to us. ...

reviewing logs, identifying root causes and implementing remediation. Knowledge & Skills Technical Understanding, awareness or experience of the following: Strong knowledge of networking, including TCP / IP, DNS, firewalls, VPNs, proxies and load balancers. Proficiency with infrastructure-as-code and automation tools such as Terraform, Ansible, Python or Bash. Familiarity … with containers and orchestration platforms such as Docker and Kubernetes. Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001 or SOC 2. Ability to conduct threat modelling, infrastructure risk assessments and architecture reviews. Strong troubleshooting, documentation and cross-functional communication skills. Personal ...

DevSecOps Engineer - Azure / Application Security We're working with an established organisation looking to appoint an experienced DevSecOps Engineer to strengthen its Azure deployment and application security capabilities. This is a hands-on position combining Azure DevOps, cloud infrastructure and application security. You'll take ownership … / CD pipelines, Infrastructure-as-Code and security testing, while helping development teams embed secure practices throughout the software delivery lifecycle. The Role You'll be responsible for: Designing and maintaining CI / CD pipelines within Azure DevOps Deploying Azure applications and infrastructure using Terraform Supporting Azure services ...

Experience: Extensive experience engaging with stakeholders at all levels, including senior leadership and C-suite executives. Proven experience operating within client-facing and / or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security … yearEnhanced Parental LeavePaid Fertility Leave (5 Days)Statutory & Contributory PensionEAP with Help@HandGym Membership BenefitsCycle to Work and Electric Vehicle schemesFlexible WorkingAnnual Away Days / Company SocialsDiversity and InclusionAs an equal opportunities employer, we are committed to creating a work environment that supports, celebrates, encourages and respects all individuals ...

Experience: Extensive experience engaging with stakeholders at all levels, including senior leadership and C-suite executives. Proven experience operating within client-facing and / or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security … Days) Statutory & Contributory Pension EAP with Help@Hand Gym Membership Benefits Cycle to Work and Electric Vehicle schemes Flexible Working Annual Away Days / Company Socials Diversity and Inclusion As an equal opportunities employer, we are committed to creating a work environment that supports, celebrates, encourages and respects ...

Experience: Extensive experience engaging with stakeholders at all levels, including senior leadership and C-suite executives. Proven experience operating within client-facing and / or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security … Days) Statutory & Contributory Pension EAP with Help@Hand Gym Membership Benefits Cycle to Work and Electric Vehicle schemes Flexible Working Annual Away Days / Company Socials Diversity and Inclusion As an equal opportunities employer, we are committed to creating a work environment that supports, celebrates, encourages and respects ...

previous experience in an IT Management role, you will possess: Experience managing MSPs and outsourced technology services. Strong knowledge of Microsoft 365, Entra ID / Active Directory and modern IT environments. Broad understanding of infrastructure, networking, endpoints, backups and telecommunications. Experience delivering IT projects and managing service performance. Good … technical and non-technical stakeholders. Desirable Experience Engineering, manufacturing, industrial or regulated-sector environments. Cyber Essentials Plus or similar compliance frameworks, such as ISO 27001 or NIST Business continuity and disaster recovery planning. ...

defence, or highly regulated environments. Knowledge of Zero Trust security principles. Experience with cloud-native security tooling and security automation. Familiarity with NIST, ISO 27001, CIS Controls, or similar security frameworks. Experience supporting DevSecOps and secure software delivery practices. Relevant cloud and security certifications such ...