76 to 100 of 1,189 ISO/IEC 27001 Jobs in the UK

Cyber Security Project Manager – CMDB & Asset Management Contract: 6 Months Location: London / 2 days on-site] IR35: Outside IR35 Rate: £700 per day About the Role We are currently recruiting for an experienced Cyber Security Project Manager to lead the delivery of a major CMDB, enterprise asset inventory … information inventory capability across both Operational Technology (OT) and Information Technology (IT) environments. Working within a critical infrastructure / electricity distribution environment , you will play a key role in improving visibility, ownership and control of technology assets, operational systems, applications, services and information supporting essential network operations. This ...

technical security requirements with governance, compliance, and stakeholder engagement. Key Responsibilities Manage and maintain compliance with security standards and accreditations including PCI DSS, ISO 27001, ISO 22301, Cyber Essentials Plus and IT Health Checks. Conduct internal audits, control reviews, and risk assessments. Maintain … SIEM tools. Strong communication, stakeholder management, and report-writing skills. Professional certifications such as CISSP, CISA, ISO 27001 Lead Auditor / Implementer, or ITIL are desirable. Additional Information Based in Leeds with regular travel to Runcorn and occasional UK and European travel (approximately 25%). ...

emerging AI ecosystems, including: Designing security architectures for agent‐based AI systems , including orchestration frameworks, tool‐use agents, and multi‐agent workflows. Implementing AI / LLM security controls across: Model security (input / output filtering, model guardrails) Prompt security, adversarial prompt defense, prompt isolation API & orchestration security, including … cloud‐specific controls and emerging AI regulatory frameworks. Ensure alignment to governance standards such as ISO 27001, NIST 800‐53 / CSF, NIS2, DORA, and industry cloud security benchmarks. Technology Evaluation & Continuous Improvement Conduct cloud and AI security architecture reviews, including: Cloud configuration reviews ...

cross-functional bridge. Support coordination between Cybersecurity, Legal, and Engineering - translating regulatory requirements (GDPR, CCPA, etc.) into actionable policies, and supporting internal / external audits, policy reviews, and compliance syncs. Champion security culture. Drive security awareness and compliance culture across the company. Automate GRC operations. Identify opportunities … cybersecurity - preferably in a tech or SaaS environment. A flexible background, which could include: Engineering or technical roles with exposure to platform risk / security. Legal or compliance roles, ideally with a specialization in cybersecurity or privacy. Hybrid profiles (e.g., lawyers with CISSP, or engineers with compliance experience). ...

Onsite or Hybrid: Hybrid Location: Ashton Vale, Bristol + Hybrid Working Arrangements Compensation: Competitive Salary + Benefits Role Type: Full time / Permanent Role ID: SF75386 At Babcock, we’re working to create a safe and secure world, together. If you join us, you can play your part … similarly regulated sectors (desirable). Qualifications for the Engineer - Product Security Relevant higher education qualification or industry certification such as CISSP, CISM, or ISO27001 Lead Implementer / Auditor. Security Clearance The successful candidate must be able to achieve and maintain Security Check (SC) security clearance for this role. Must ...

Evaluate the effectiveness of technical, procedural, and physical security controls against documented security requirements and standards. Assess security controls against recognised frameworks including ISO 27001 , NIST CSF , NIST 800-53 , and CIS Controls . Review security documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs … Required Skills & Experience Proven experience testing and assessing the effectiveness of security controls within complex enterprise environments. Strong knowledge of security frameworks including: ISO 27001 NIST Cyber Security Framework (CSF) NIST 800-53 CIS Controls Experience reviewing and testing: Network security controls Firewall configurations and rule ...

candidates will come from a defence background, with experience implementation and compliance with Security Architectural Frameworks such as: Infosec Standard 1&2 (IS1&2), ISO27001 and excellent knowledge of security defence standards, policies and guidelines. Tasks include: Work with the Technical Project Managers and the Solution Design Team to create … Institute of Standards Technology Cyber Security Framework NATO Communications Information Agency (NCIA) Standards; ISO 27001 (2013); BS ISO / IEC 27001:2013; European Directive on security of Networks and Information Systems Directive (NIS Directive); and any other demonstrably relevant ...

candidates will come from a defence background, with experience implementation and compliance with Security Architectural Frameworks such as: Infosec Standard 1&2 (IS1&2), ISO27001 and excellent knowledge of security defence standards, policies and guidelines. Tasks include: Work with the Technical Project Managers and the Solution Design Team to create … Institute of Standards Technology Cyber Security Framework NATO Communications Information Agency (NCIA) Standards; ISO 27001 (2013); BS ISO / IEC 27001:2013; Infosec Standard 1&2 (IS1&2); European Directive on security of Networks and Information Systems Directive ...

security operations, identity, risk, governance and assurance, alongside experience leading teams and major security suppliers. Skills, Knowledge & Expertise Knowledge of frameworks including ISO 27001, NIST CSF, NIS2, CAF and Cyber Essentials Plus is important, as is the ability to translate technical risk into clear business … decisions. Leading manager-level reports and developing high-performing teams Managing 24x7 SOC, MDR or other major security suppliers Major incident response and executive / client / regulator communications ISO 27001, ISO 27701, ISO 22301, NIST CSF, NIS2 ...

Select how often (in days) to receive an alert: Role: Senior GRC Analyst Location: Horwich, BL6 6JW Contract: Full-Time Hours / Fixed Term - 6 months Company: EG Group About the Role Cumberland Farms is looking for an experienced Senior GRC Analyst to join our Information Security team. Reporting … security risk assessments across projects, systems, and technology changes, identifying risks and recommending practical controls. Support the maintenance and continuous improvement of the ISO 27001-aligned Information Security Management System (ISMS). Review and maintain information security policies, standards, procedures, and control frameworks to ensure they ...

expertise with the strategic ability to translate complex threats into clear, actionable guidance. Responsibilities Design and own cloud security architecture across AWS, Azure, and / or GCP environments, including the development of reference architectures and reusable solution patterns Define and author enterprise‐level security policies, controls frameworks, and governance … 27001, Cyber Essentials Plus, PCI DSS, and other relevant regulatory frameworks Support DevSecOps adoption and integrate security tooling and controls into CI / CD pipelines across client delivery teams Engage senior stakeholders and executive teams with clear security risk reporting, remediation guidance, and strategic security roadmaps Lead ...

reviews, and vulnerability analyses. Compliance & Reporting: Support compliance with relevant security, privacy, data protection, and AI governance regulations and standards, including PCI-DSS, ISO 27001, SOC, NIST Cybersecurity Framework, HIPAA, GDPR, and emerging AI regulatory expectations. Produce reports covering risk assessments, compliance posture, DLP trends, insider … governance, risk management, compliance, audit, or information security. 3+ years of people leadership, supervisory, or demonstrated workstream leadership experience. Experience supporting or leading ISO 27001, SOC 2, HIPAA, privacy, or similar compliance programs. Experience with Microsoft Purview or similar data protection platforms, including sensitivity labeling ...

Support (MS&S) and supports the day-to-day operation of Bango’s continuity and risk frameworks. You will help maintain compliance with ISO 22301 (the global standard for business continuity) and ISO 27001 (the leading international standard for information security management), assisting … business continuity, or GRC-related role. Good understanding of business continuity and information security principles, with direct exposure to ISO 22301 and / or ISO 27001 frameworks. Demonstrated ability to manage and maintain a risk register or continuity documentation with minimal oversight, given ...

maintain information security policies, procedures and governance frameworks. Manage information security risks, maintain the risk register and oversee remediation activities. Ensure compliance with ISO 27001, GDPR and Cyber Essentials Plus , alongside relevant contractual and regulatory requirements. Conduct risk assessments, internal audits, compliance reviews and Data Protection … Impact Assessments (DPIAs). Support the management of security incidents, business continuity planning and incident response exercises. Maintain ISO 27001 documentation, including the Statement of Applicability, and coordinate internal and external audits. Work closely with Cyber Security, Group IT, HR and external service providers to assess ...

Senior Analyst- Information Assurance & Secure by Design Career Level: Senior Analyst Location: UK Nationwide, preference for Cheltenham / Manchester(hybrid working) Please Note: Due to the nature of client work you will be undertaking, you will need to be willing to go through a Security Clearance process as part … willingness to travel to client sites when required Desirable experience for this role: Familiarity with recognised security standards and frameworks (e.g. ISO / IEC 27001, NIST, UK Government security frameworks) Awareness of assurance and compliance requirements within highly regulated environments. Progress towards ...

coordinate remediation activities. Develop and maintain security policies, controls and standards. Produce management reporting, dashboards and compliance metrics. Plan, conduct and document internal ISO 27001 audits. Support third-party risk management and supplier security assurance activities. Help maintain compliance with frameworks and regulations such as ISO … 27001, NIS Regulations and Cyber Essentials. Support information security awareness initiatives and promote a strong security culture. Assist in security incident investigations and remediation activities. Work with business stakeholders to improve information governance practices and data ownership accountability. What we're looking for Proven experience administering and optimising ...

Including a market supplement, the salary for this role is up to £59,529pa DSE use (for a substantial part of work) 30 / 09 / 2026, 12:00 About us At Wiltshire Police, we are dedicated to making our community a safer place for everyone. Our team … experience and enabling colleagues through technology. Essential Qualifications and Professional Certifications ITIL 4 Foundation ITIL 4 Specialist: Create, Deliver & Support (CDS) ISO / IEC 27001 Foundation / or Cyber Essentials Microsoft Endpoint Manager / Intune Administrator (MD-102) What we offer ...

Alfa is seeking an Information Security Analyst to strengthen our ISMS and ensure ISO 27001 / 27018 compliance across the business. You’ll participate in SSAE 18 / ISAE 3402 audits, document controls, and support internal and external audits while coordinating with engineers, auditors ...

Alfa Financial Software Limited is seeking an Information Security Analyst to strengthen our ISMS and lead ISO 27001 / 27018 audits. You will work with Jira and Confluence, support SSAE 18 / SOC audits, and help translate complex security requirements for engineers, auditors ...

Microsoft Azure and Microsoft 365, helping to ensure systems are secure, reliable and well maintained. You’ll also coordinate day-to-day ISO 27001 compliance activities, maintain evidence and documentation, support audits and help complete security assessments from clients and partners. The role is primarily focused … accurate system documentation, inventories and operational procedures. Support backup restoration testing, disaster recovery and infrastructure improvement activities. Information security and compliance Maintain the ISO 27001 compliance schedule and ensure recurring activities are completed on time. Maintain ISMS documentation, policies, asset records, risk records and corrective actions. ...

What else would help Understanding of Secure by Design principles and their application in product lifecycle development. Familiarity with security and information assurance frameworks (ISO27001 / 27004 / 27005 and NIST Risk Management Framework). The ability to keep abreast of current trends and events relating to security. … could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: https: / / careers.uk.leonardo.com / gb / en / security-and-vetting Why join us Time to Recharge: Enjoy generous leave with ...

What else would help** * Understanding of Secure by Design principles and their application in product lifecycle development.* Familiarity with security and information assurance frameworks (ISO27001 / 27004 / 27005 and NIST Risk Management Framework).* The ability to keep abreast of current trends and events relating to security. … could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: https: / / careers.uk.leonardo.com / gb / en / security-and-vetting **Why join us** At Leonardo, our people ...

Mission We are looking for an experienced OT / IACS Cybersecurity Engineer to join our growing UK&I cybersecurity delivery team focussed on the delivery of cybersecurity solutions, consulting services and technical support within industrial and critical infrastructure environments. This role requires a broad blend of cybersecurity, networking, industrial … segmentation, Active Directory, PKI, secure remote access, and cybersecurity risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS / IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices ...

Experience in cyber security risk management and risk assessments. Strong understanding of cyber security controls, risk frameworks and governance. Working knowledge of ISO 27001, ISO 27005, NIST, CIS Controls and CAF . Experience developing or maintaining cyber security policies and standards. Strong stakeholder management … applicants must have the full and permanent right to work in the UK. 'Apply Now' for immediate review! Cyber Security Risk & Policy Manager, ISO 27001, ISO 27005, NIST, CIS Controls ,Cyber Security Risk & Policy Manager. Cyber Security Risk & Policy Manager, SCADA, Risk, Cyber Security ...

ensuring compliance, driving continuous improvement, and supporting quality assurance activities within a highly regulated environment. Location: Market Deeping Salary: 55,000 - 65,000 / pa Benefits: Flexible working with core hours 25 days holiday plus bank holidays Enhanced pension contributions Private Medical & Dental Life assurance Holiday buy and sell … looking for an experienced Quality Assurance professional with a background in engineering, manufacturing, aerospace, defence, or another highly regulated industry. Engineering qualification (BTEC, HNC / HND, Degree or equivalent experience). Lead Auditor or Internal Auditor certification in ISO 9001. Experience auditing quality and security processes, ideally ...