51 to 75 of 1,189 ISO/IEC 27001 Jobs in the UK

Analyst - Payments / PCI-DSS / ISO Manchester - office based 4 days a week, remote 1 day a week £55-60k pa A successful payment technology company are seeking a GRC Analyst to join their growing Security team and be responsible for risk management, compliance … knowledge, good organisational skills and the ability to communicate critical security information and requirements to both internal and external stakeholders. GRC Analyst - Payments / PCI-DSS / ISO Manchester - office based 4 days a week, remote 1 day a week £55-60k pa #J ...

Foster a culture kandidat of collaboration and excellence. Additional Info Full project lifecycle experienceಳ್ಳ OT cyber security expertise Technical documentation skills Degree or HND / HNC in a relevant discipline Eligible for security clearance IEC 62443 / IEC 61850 / ISO … 27001 knowledge Industrial networking and firewalls PLC / SCADA / DCS experience Attributes Adheres and champions our company core values – Accountability, Communication, Entrepreneurial, Inspiring and Team Player Is commercially astute Must manage the production of all documentation relevant to their area of responsibility to a high ...

distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling - https: / / enginebystarling.com / careers / engineering / As a Security Engineer at Engine, you'll be working on helping … Manager (EKM) and Secret Manager - including cryptographic key ceremonies Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI / CD Experience configuring and utilising cloud-native security logging, monitoring and detection services Strong programming skills - in security we write our own scripts ...

distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling — https: / / enginebystarling.com / careers / engineering / As a Security Engineer at Engine, you'll be working on helping … Manager (EKM) and Secret Manager — including cryptographic key ceremonies Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI / CD Experience configuring and utilising cloud-native security logging, monitoring and detection services Strong programming skills — in security we write our own scripts ...

role... You will provide technical consultancy services aligned to client needs and will support WSP's cyber security deliverables through the lifecycle of OT / IT development and Digital Transformation projects. You will contribute to the development of proportionate, risk-based recommendations and help translate strategy into practical delivery. … will be involved in the following activities; Supporting clients on cyber security compliance, including NIS-D, NIST, ISO 27001, ISA / IEC 62443 and other relevant industry standards and best practice Contributing to governance frameworks and supporting the development of Cyber Security ...

Role... You will provide technical consultancy services aligned to client needs and will support WSP’s cyber security deliverables through the lifecycle of OT / IT development and Digital Transformation projects. You will contribute to the development of proportionate, risk-based recommendations and help translate strategy into practical delivery. … will be involved in the following activities; Supporting clients on cyber security compliance, including NIS-D, NIST, ISO 27001, ISA / IEC 62443 and other relevant industry standards and best practice Contributing to governance frameworks and supporting the development of Cyber Security ...

technical consultancy services in close alignment with client needs and will be leading WSP’s cyber security deliverables through the lifecycle of an OT / IT development and Digital Transformation projects. You will also be providing strategic advice across our client spectrum as part of your delivery and growth … following activities; Advising the client on Cyber Security compliance especially in regard to NIS-D, NIST, ISO 27001, ISA / IEC 62443 and other relevant industries standards and best practices Developing a framework for governance as well as developing Cyber Security and Information ...

reviews. Provide guidance to asset owners, project teams, and stakeholders on cybersecurity requirements, responsibilities, and best practice. Support information security governance activities, including ISO 27001 maturity initiatives, control reviews, assurance reporting, and continuous improvement. Provide cybersecurity support throughout the project and delivery lifecycle, including tender activities … Practical experience of risk assessment, control evaluation, evidence review and action tracking. Experience in industrial or operational technology cybersecurity. Knowledge of ISO / IEC 27001, IEC 62443, secure development, vulnerability management, security testing or audit methods. You do not need ...

## IT Policy and Controls ManagerLondon, United KingdomApply NowFind out how well you match with this jobRequisition ID286264Date posted08 / 03 / 2026## **Join Us**At Vodafone, we’re not just shaping the future of connectivity for our customers – we’re shaping the future for everyone who joins … delivering capabilities, which meet or surpass the requirements defined in the control framework.* Expected to have a strong knowledge of security risks, controls, processes / technologies / tools to mitigate these risks and Information Security Management Systems.Key accountabilities and decision ownership:* Maintain and develop a control framework which ...

experts, including the head of product security and Product Cyber Resilience Managers to support ongoing Security Assurance. What you’ll bring: Practical experience of ISO27001 / 27004 / 27005 and / or NIST Risk Management Framework(RMF). Experience of supporting asecurity riskmanagement system for highly regulated … Penetration Test Reports and support remediation activities. Awareness of UK Government Assurance Processes (such as the MoD Secure by Design Framework (through JSP 453 / ISN2023 / 09 and through legacy JSP 604 Assurance or the CAF GovAssure processes). Professional recognition in security governance and risk management ...

experts, including the head of product security and Product Cyber Resilience Managers to support ongoing Security Assurance. **What you’ll bring:** * Practical experience of ISO27001 / 27004 / 27005 and / or NIST Risk Management Framework (RMF).* Experience of supporting a security risk management system … Penetration Test Reports and support remediation activities.* Awareness of UK Government Assurance Processes (such as the MoD Secure by Design Framework (through JSP 453 / ISN2023 / 09 and through legacy JSP 604 Assurance or the CAF GovAssure processes).* Professional recognition in security governance and risk management ...

drive down lead times and change failure rates. Secure SDLC: embed technical security requirements across the development lifecycle, optimising automated security controls within CI / CD pipelines, and ensuring well informed platform and product security architecture decisions drive strong protection, resilience and scalability. Corporate IT & Access Controls: Manage … Production Infrastructure functions at consumer scale (tens of millions of active users). Product Integration: Demonstrated experience partnering with Product, Design, and Mobile / Backend Engineering teams to ship user-facing features to roadmap. Audit Track Record: Successful execution and ongoing maintenance of ISO 27001 ...

helps ensure employees have the tools and technology they need to perform at their best. Purpose of the role: Cyber Security Analyst Location: Leeds / London / Midlands (hybrid work pattern) Hours: Full-time, Monday to Friday (37.5 hours per week), with flexible working options. We are seeking … Requirements Skills & Experience: 2–5 years’ experience in IT, compliance, or data-related roles. Familiarity with Microsoft Azure and Entra ID from a compliance / security perspective. Exposure to security frameworks such as ISO 27001 or Cyber Essentials. Certifications (e.g., CompTIA Security+, ISO ...

Cyber and Information Assurance Consultant Job Title Cyber and Information Assurance Consultant Hours Per Week 37 Reporting to Reporting to Principal Cyber Consultant / Head of Services Location Location Remote-first, with attendance at Nexor’s Nottingham office and customer locations as required. Regular UK travel may form part … lifecycle principles. Residual risk and risk acceptance. Assurance evidence and traceability. Frameworks and Standards Working knowledge of some of the following: ISO / IEC 27001. ISO / IEC 27005. NCSC Cyber Assessment Framework. NIST Cybersecurity Framework. MOD Defence Standard ...

data pipeline. What You’ll Do Audits & Framework Management Own or co‐own preparation for and execution of SOC 2 (Type I / II) audits, working directly with external auditors to scope, evidence, and remediate findings Lead or support NIST CSF assessments and gap analyses, translating results into actionable … remediation plans Support alignment and readiness activities for ISO 27001 and other relevant frameworks (e.g., PCI DSS, GLBA, state / federal financial regulations as applicable) Maintain a unified control framework that maps overlapping requirements across multiple standards to reduce duplicate effort Compliance Monitoring & Governance Build ...

stakeholders. As a cyber security advisory lead, you will ideally have relevant skills and experience working in cyber security using best practices (e.g., ISO27001, NIST Cyber Security Framework, NIS Regulations) and / or experience working in Infrastructure (IT / OT) or Cloud environments with cyber security responsibilities … cyber security technologies for use in complex environments. information security management concepts to support solutions and processes. industry good practice and frameworks such as: ISO27001, IEC62443, NIST Cyber Security Framework, CIS Critical Security Controls. relevant legislation and regulation such as: Data Protection Act (DPA), Network and Information Systems (NIS) Regulation ...

manufacturing as well as Research & Development activities. The role therefore requires someone who can effectively support a technology-intensive environment spanning manufacturing operations, engineering / R&D, enterprise applications and site infrastructure. The role combines three key areas of responsibility: -Act as the Digital Technology Site Reliability Leader … candidate will bring a broad Digital Technology background spanning manufacturing-site infrastructure, enterprise and business applications, business-process solutioning, SAP fundamentals, cybersecurity and project / program management. A key expectation of the role is the ability to understand business and engineering needs and translate them into scalable, sustainable ...

structured data, data lineage, APIs, security telemetry and integrations sufficiently to challenge data completeness and fitness for purpose. Experience defining acceptance criteria, supporting testing / UAT and documenting requirements, issues and decisions Cyber Security Risk, Security Assurance, Controls Testing, GRC, Vulnerability Management Assess control design, Endpoint security, Cloud, Identity … Secure Development, Third-Party risk, Incident Management Desirable: CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor / Implementer or equivalent experience. Knowledge of NIST CSF, ISO / IEC 27001, COBIT, CIS Controls or enterprise risk frameworks. Experience with ...

stay safe while keeping our pace. What you'll do Own identity and access across Encord, including SSO, MFA, conditional access, and automated joiner / mover / leaver processes. Manage our device security, keeping our macOS fleet protected through MDM and EDR. Run SaaS and AI security: discovering … conditional access across a company. Experience deploying and managing MDM and EDR across a macOS fleet. A track record of building automated joiner / mover / leaver flows and user access reviews. Experience running SaaS security, including discovering shadow IT, reviewing app permissions, and assessing new tools before ...

supporting National Gas Cyber Security in meeting regulatory and assurance obligations. The role contributes to compliance with NIS Regulations, CAF requirements, and internal / external audits by assessing controls impacts, reviewing evidence, performing control assurance testing, and supporting the delivery of high‐quality submissions to regulators, and carrying … with the SEC-MS control framework are adequately implemented throughout National Gas. Working collaboratively across the Cyber security function and wider business, specifically CNI / Physical / OT / IT, the analyst strengths National Gas’s security posture through insight, analysis, and effective engagement. Key accountabilities: Coordinate ...

maintaining security policies, standards, procedures and control frameworks . Strong understanding of security governance and risk management principles . Experience conducting or supporting technology / security risk assessments and maintaining risk registers. Good knowledge of security control frameworks such as ISO 27001 and NIST … improving security maturity, governance and control effectiveness . Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor / Implementer or similar would be advantageous. In return for your commitment, you can expect At Ricoh, work should feel meaningful, supportive and fulfilling. The Ricoh ...

identity and access management, corporate networking, and cyber security operations . You will partner closely with: Engineering team , who manage product infrastructure (AWS, CI / CD, robotics environments); ITSM Lead , who manages service process, management and support The IT Director , to align on overall strategy, operational reliability, governance … environment – covering endpoints, networks, identity, and security – ensuring reliability, scalability, and compliance. Lead end-user computing and identity management , including device lifecycle, MDM, SSO / MFA, and access provisioning in partnership with ITSM. Implement, operate and continually improve cyber defences across endpoints and SaaS platforms: vulnerability management, EDR / ...

across Humanoid's HMND 01 platform family — the Alpha Wheeled industrial robot and the Alpha Bipedal home robot — both powered by our KinetIQ VLM / VLA-based AI framework. Working alongside product, firmware, autonomy, and hardware teams as part of the Systems Engineering and Architecture Team, you will define … resilient. Contribute to the continual improvement of security engineering capability across the organisation. Ensure compliance with cybersecurity obligations under the EU Machinery Regulation 2023 / 1230 where cyber controls intersect with safety-critical functions and compliance to IEC 62443 (for industrial / OT product security ...

standards, delivering sophisticated migrations, and ensure privileged access is secure, auditable, and resilient.## ## Key Responsibilities* Design and implement PAM capabilities (vaulting, session management / recording, credential rotation, least privilege, EPM / PRA) across on-prem and cloud workloads.* Lead complex integrations with AD / EntraID, IdPs … SIEM / SOAR, CSPM, ITSM, DevOps tooling (CI / CD), and secrets management.* Be responsible for the operational model: backup / recovery, DR, platform upgrades, policy hardening, performance tuning, and continuous improvement.* Drive onboarding at scale ensuring standardized onboarding patterns and controls.* Establish guardrails and RBAC / ...

ISO 27005 frameworks. Operational Technology (OT) Security: Collaborate with OT Security Manager to enhance security within control systems and manufacturing networks (ICS / SCADA). Policy & Governance: Support the development, review, and communication of cyber security policies, standards, and procedures. Security Awareness & Culture: Promote cyber security awareness … cyber or information security, within a regulated or critical infrastructure environment. Working knowledge of:o NCSC Cyber Assessment Framework (CAF)o ISO / IEC 27001 Information Security Managemento NISR Regulations and ONR SyAPso Network security principles of IT systems Hands-on experience with ...