18 of 18 ISO 27001 Lead Implementer Jobs in the UK

Lead Information Security & GRC Specialist London (Hybrid, 3 days in office) 80,000 - 100,000 + Benefits We're partnering with a well-established organisation that's continuing to invest in its Technology and Information Security capability. As the business continues to strengthen its security posture, they … Opportunity This is a hands-on role suited to someone who has successfully led, or played a significant role in, delivering an ISO 27001 certification programme. You'll own and continually improve the Information Security Management System (ISMS), working closely with Technology, Infrastructure, Engineering ...

development, implementation, and management of British Land's information security governance, risk, and compliance programme — ensuring alignment with regulatory requirements, industry standards (e.g. Iso 27001, nist), and good practice. As a member of a small, high-impact team, the role requires an all-rounder … standards. Monitor and report on the status of risk management activities. Compliance Ensure compliance with relevant laws, regulations, and industry standards (e.g., GDPR, iso 27001). Coordinate and support internal and external audits and assessments. Develop and deliver security awareness and training programs ...

governance, manage cyber and information risks, and achieve or maintain compliance with recognised standards and frameworks including ISO / IEC 27001, Cyber Assessment Framework (CAF), Cyber Essentials, SOC-2, PCI, DSS, GDPR, and other relevant regulatory or contractual requirements. This is a customer … manage multiple client tasks or engagements, work under pressure and meet deadlines. Relevant professional certification such as ISO / IEC 27001 Lead Auditor, ISO / IEC 27001 Lead Implementer ...

ownership, visibility and influence across the organisation. This is an opportunity to take responsibility for information security governance in a regulated business where ISO 27001, data protection, supplier assurance, audit readiness and risk management all matter. You'll be the internal point of expertise … across the business. This is what you'll be doing as Information Security Manager Own, maintain and improve the ISMS in line with ISO 27001. Manage information security risk assessments, treatment plans and the risk register. Plan and deliver the internal audit programme for information security. Prepare ...

model.* Ensure compliance with recognised security frameworks including ISO 27001, NIST Cyber Security Framework and IEC 62443.* Lead security architecture, Security Operations Centre (SOC), vulnerability management, incident response and cyber resilience activities.* Conduct technology and cyber risk assessments, developing mitigation … plans and providing executive reporting.* Lead business continuity and disaster recovery planning.* Champion security-by-design principles and promote a security-first culture across the organisation.**Governance & Service Delivery*** Establish governance, operational policies, standards and procedures across Infrastructure and Cyber Security.* Ensure compliance with applicable legal, regulatory ...

looking for a Head of Information Security to own our end-to-end security posture, govern our risk and compliance programme, and lead our IT Operations function. This is a VP Level role with company‐wide scope. With approximately 200 employees across London, New York, Wroclaw, Antwerp … operations sit at the heart of that ambition. What you will be doing Security architecture and engineering Define security architecture standards and lead threat modelling across the organisation Establish and maintain long‐term security architecture aligned to business strategy and regulatory requirements Guide technology decisions ...

Security Consultant Join a fast-growing technology consultancy helping organisations strengthen their cyber resilience through expert advisory services. This is an opportunity to lead high-profile consulting engagements, mentor talented consultants, and play a key role in shaping the growth of an ambitious Cyber Security practice. Role … Hybrid (2 days per week on site) Package: £75,000- £95,000pa & benefits Industry: Cyber Security / Consultancy What You'll Be Doing Lead the successful delivery of cyber security consulting engagements across a broad range of industries. Manage multiple client projects, ensuring high-quality delivery, commercial ...

have: Experience developing, reviewing or managing cyber security policies, standards, procedures or governance frameworks. Strong knowledge of recognised cyber security frameworks such as ISO 27001, NIST, or the Cyber Assessment Framework (CAF). Experience supporting compliance, risk management, governance or information assurance programmes. Excellent … Industrial Control Systems (ICS) security. Knowledge of cyber resilience requirements within critical national infrastructure environments. Professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer / Auditor. What's on Offer Opportunity to influence cyber strategy within ...

will ideally have: Experience developing or managing cyber security policies, standards, or governance frameworks. Strong knowledge of recognised cyber security frameworks such as ISO 27001, NIST, or the Cyber Assessment Framework (CAF). Experience supporting compliance, risk management, or information assurance programmes. Excellent stakeholder … Industrial Control Systems (ICS) security. Knowledge of cyber resilience requirements within critical national infrastructure environments. Professional certifications such as CISSP, CISM, or ISO 27001 Lead Implementer / Auditor. What's on Offer Opportunity to influence cyber strategy within ...

will ideally have: Experience developing or managing cyber security policies, standards, or governance frameworks. Strong knowledge of recognised cyber security frameworks such as ISO 27001, NIST, or the Cyber Assessment Framework (CAF). Experience supporting compliance, risk management, or information assurance programmes. Excellent stakeholder … Industrial Control Systems (ICS) security. Knowledge of cyber resilience requirements within critical national infrastructure environments. Professional certifications such as CISSP, CISM, or ISO 27001 Lead Implementer / Auditor. What's on Offer Opportunity to influence cyber strategy within ...

CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer / Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF-related experience or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding … Strong understanding of security architecture, including zoning, segregation, trust boundaries, secure configuration baselines, identity and access management and secure remote access. Ability to lead security input into formal engineering design reviews and technical governance forums. Ability to translate security risks and regulatory expectations into practical engineering, architecture ...

CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer / Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF‐related experience or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding … Strong understanding of security architecture, including zoning, segregation, trust boundaries, secure configuration baselines, identity and access management and secure remote access. Ability to lead security input into formal engineering design reviews and technical governance forums. Ability to translate security risks and regulatory expectations into practical engineering, architecture ...

frameworks. Ensure compliance with relevant data protection laws, including UK GDPR, ISO standards, including ISO / IEC 27001, Cyber Essentials Plus and industry best practice. Lead incident response planning, security audits, risk assessments and remediation efforts. Represent … systems integration projects. Excellent leadership, communication and stakeholder management skills. Professional certifications such as CISSP, CISM, ISO / IEC 27001 Lead Implementer or Auditor, or similar. Experience working in regulated, public sector or educational environments. Please note ...

directly with clients, solving complex security challenges, and contributing to the growth of a dynamic cyber security practice. Key Responsibilities Client Delivery Management Lead and manage the delivery of cyber security consulting engagements for clients of varying sizes and sectors. Manage a team of consultants delivering cyber … risk management methodologies. Experience managing the delivery of security consultancy projects directly to clients. Knowledge of cyber security frameworks and standards including ISO 27001, NIST CSF, and CIS Controls. Experience managing client risk assessments and security maturity reviews. Strong stakeholder management and client‐facing ...

operational lifecycle Ensure alignment with Security by Design principles, frameworks, and organisational security policies Assess compliance against relevant standards and regulatory requirements, including ISO 44001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN, JSPs, and other applicable frameworks Collaborate with development, engineering, and security … environment such as defence, aerospace, government, critical infrastructure, or enterprise IT. Strong knowledge and practical application of IT assurance frameworks and standards, including: ISO 144001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN and JPS. Proven experience implementing and assuring Security by Design across ...

architecture, engineering and change processes.* Partner with 2LOD to ensure alignment with regulatory expectations (e.g. DORA, UK OpRes). 3. Risk Governance & Decisioning* Lead 1LoD technology risk governance forums).* Provide independent first-line challenge to engineering, architecture, and product teams.* Escalate and drive resolution of material … .* Ensure availability of accurate, decision-ready risk data.* Drive adoption of data-led risk management across engineering teams. 7. Leadership & Operating Model* Lead and develop a high-performing technology risk team.* Define clear roles, responsibilities, and RACI across first and second lines.* Build risk capability across ...

continue to strengthen our position as one of the UK’s leading Hearingcare providers. Reporting directly to the Head of Transformation, you’ll lead our Information Security governance alongside our Data & Development function, ensuring our systems remain secure, compliant and fit for the future while driving innovation … across the business. If you’re looking for a role where you can influence strategic decision‐making, work collaboratively across the business and lead technology transformation, we’d love to hear from you. The role As InfoSec, Data & Development Manager, you’ll be responsible for leading Boots ...

Your level of experience will determine the amount or responsibility given to you, as a result you may also have the opportunity to lead assignments and be responsible for supervising direct reports whilst ensuring the overall success of the engagement. You will be given the opportunity … such as chartered or principal status with the UK Cyber Security Council, or certifications such as CompTIA, NIST, PCiIAA, CISMP, CISSP, CREST, ISO27001 Lead Implementer / Auditor, SABSA, and TOGAF. A Mentor will be on hand to provide support and guidance throughout your journey ...