1 to 25 of 26 Remote/Hybrid ISO 27001 Lead Implementer Jobs in the UK

services. About the role Our compliance strategy is written. This role makes it happen. First, it takes every company in our group to ISO 9001, ISO 27001, ISO / IEC 42001 and Cyber Essentials Plus, with controls … HaloPSA and Employment Hero for policy acknowledgement and records What you will be doing Group certification programme Gap-assess every group company against ISO 9001, ISO 27001, ISO / IEC 42001 and Cyber Essentials Plus, and agree ...

ISO 27001 Consultant Remote (UK) | £45,000-£55,000 + Excellent Benefits Are you an experienced ISO 27001 professional looking for a varied consultancy role where you can make a genuine difference? This is an excellent opportunity … maintain recognised information security standards. You'll work with a diverse range of clients, including healthcare and medical technology businesses, supporting them with ISO 27001 implementation, Cyber Essentials and wider regulatory compliance. Working remotely from home, you'll ideally be based within ...

Compliance & Security Manager (GRC) Permanent Remote (UK-based) ISO 27001 Lead Implementer or Lead Auditor certification — essential An opportunity to take real ownership of security and compliance at a fast-growing tech company. Our client … maintain security and compliance documentation including policies, procedures, and support materials across information security and compliance programmes Take full ownership of ISO 27001 certification — driving continuous improvement and leading preparation for internal and external audits Manage the internal Data Protection compliance programme, ensuring adherence ...

help you make your moment. Join Team Purple. Join IFS. Job Description We are hiring a Senior Director – Technology GRC to lead governance, risk and compliance across Cloud, Product and Technology within our Trust and Intelligence organization. This senior leadership role will strengthen how we build … Product, Engineering, Cloud Operations, Cybersecurity, Data Protection, Legal and enterprise risk and compliance stakeholders. Role overview As Senior Director – Technology GRC, you will lead the governance, risk and compliance capability for IFS Cloud, Product and Technology. Your remit covers the security, data protection, compliance and responsible ...

hold us to the same standard they hold their own suppliers to. Our own assurance is part of the product promise: we are ISO 27001 certified, hold Cyber Essentials Plus and have achieved SOC 2 Type 1. The team works closely with Engineering, Product … Finance, making security and compliance something that helps the business win and keep customers rather than slowing it down. This role As GRC Lead you'll own Risk Ledger's governance, risk and compliance work day to day: our certifications, our enterprise risk management, our policies ...

payment security environments. Alongside PCI DSS, you’ll have broader cyber security knowledge and experience across areas such as ISO 27001, NIST, NCSC CAF, cyber risk management and security assessments. This broader experience is important in our consulting roles and mirrors the expectations … engagements across merchant and service provider environments, including assessment and non-assessment activities. Delivering wider cyber security consulting engagements across areas such as ISO 27001, NIST, NCSC CAF, risk management and security maturity. Conducting PCI DSS gap assessments, readiness reviews and compliance assessments. Assessing ...

track gap remediation Cyber Essentials Plus Deliver the annual renewal, including technical testing and remediation Monitor scheme changes and ongoing compliance Framework Alignment (ISO 27001, NIST CSF) Evidence alignment and run gap and maturity assessments Produce alignment statements for clients and auditors No formal … ISO 27001 certification held or sought PCI DSS Maintain scoping, segmentation and the annual assessment cycle Coordinate ASV scans and penetration testing Complete attestations with acquirers and assessors Vulnerability Management and Security Testing Validate scan coverage, track remediation and report metrics Coordinate penetration testing ...

delivery of the wider security strategy and improvement plan. Provide leadership, guidance and technical oversight to Information Security Officers within the team. Lead significant security projects and initiatives from assessment and design through to implementation. Own and drive improvements to the organisation's ISMS, security controls … overall cyber maturity . Lead security assessments across infrastructure, networks, endpoints, applications, cloud environments and data. Provide security input into technical architecture and design decisions. Work with technical teams to implement appropriate security controls around identity, access management, SSO and federated services . Oversee information security risk ...

continually improve the organisation's Information Security Management System (ISMS) , including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks … endpoints, applications and data. Identify, assess and manage information security risks, including maintaining risk registers and tracking remediation. Lead and support internal and external security audits , including evidence gathering, control testing and remediation of findings. Manage technical security risks within Data Protection Impact Assessments and policy exceptions. ...

will oversee the delivery of client engagements across a range of security and assurance frameworks, including ISO / IEC 27001 and Cyber Essentials, while identifying opportunities to enhance service offerings, strengthen team capability and support business growth. Working closely with colleagues across Data … Oversee the successful delivery of client engagements across a range of information security and assurance disciplines, including ISO / IEC 27001, Cyber Essentials and wider governance, risk and compliance activities, whilst driving collaboration across Information Security, Data Privacy, Business Continuity, Enterprise Risk ...

technology change initiatives.Conducting cyber risk assessments, security reviews and control assurance activities.Translating industry standards and frameworks such as NIST CSF, NCSC CAF, ISO 27001 and IEC 62443 into practical, business-focused solutions.Helping clients understand regulatory requirements including NIS and NIS2 and supporting effective … following:Experience delivering cyber security consultancy, assurance or secure-by-design services.Knowledge of recognised frameworks and standards such as NIST CSF, ISO 27001, IEC 62443 or NCSC CAF.Experience completing risk assessments, security reviews and control validation activities.Strong stakeholder management skills with the ability ...

change initiatives. Conducting cyber risk assessments, security reviews and control assurance activities. Translating industry standards and frameworks such as NIST CSF, NCSC CAF, ISO 27001 and IEC 62443 into practical, business-focused solutions. Helping clients understand regulatory requirements including NIS and NIS2 … following: Experience delivering cyber security consultancy, assurance or secure-by-design services. Knowledge of recognised frameworks and standards such as NIST CSF, ISO 27001, IEC 62443 or NCSC CAF. Experience completing risk assessments, security reviews and control validation activities. Strong stakeholder management skills ...

Security Operations Lead Salary: Up to £85,000 FTE Location: Home-based, with occasional travel to meetings as required Hours: 40 hours per week Reporting to: Director of Cyber Security and Resilience We are working with a leading UK-based organisation within the digital healthcare sector that … Inspector, Rapid7 and Cloudflare WAF. Security automation and scripting experience using PowerShell, Python or KQL. Knowledge of ISO / IEC 27001, Cyber Essentials Plus, NHS DSPT, NIST Cybersecurity Framework and NIST incident response practices. Experience working within healthcare, NHS suppliers or another regulated ...

assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM / SOAR platforms, detection engineering, threat … autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring and rollback mechanisms. Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer / Auditor, cloud security certifications or AI / security-focused training. Please ...

assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM / SOAR platforms, detection engineering, threat … autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring and rollback mechanisms. Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer / Auditor, cloud security certifications or AI / security-focused training. Please ...

remediation strategies and residual risks to stakeholders. Supporting governance, risk and compliance activities within secure and regulated environments. Depending on experience, you may: Lead consultancy engagements and workstreams. Mentor and support the development of colleagues. Act as a trusted adviser to senior client stakeholders. Contribute to business … controls. Understanding of Defence procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud ...

remediation strategies and residual risks to stakeholders. Supporting governance, risk and compliance activities within secure and regulated environments. Depending on experience, you may: Lead consultancy engagements and workstreams. Mentor and support the development of colleagues. Act as a trusted adviser to senior client stakeholders. Contribute to business … controls. Understanding of Defence procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud ...

regulated, high-consequence or security-conscious environment. You'll have a strong understanding of recognised cyber security frameworks such as NIST CSF, ISO 27001 and CAF , alongside experience leading cross-functional cyber initiatives. Excellent communication skills are essential, particularly the ability to take complex … Industrial Control Systems, cyber investment planning or major digital transformation programmes would be particularly advantageous. Relevant certifications such as CISSP, CISM, SABSA or ISO 27001 Lead Implementer would also be welcomed. Cyber Strategy Manager Why Apply? This ...

regulated, high-consequence or security-conscious environment. You'll have a strong understanding of recognised cyber security frameworks such as NIST CSF, ISO 27001 and CAF , alongside experience leading cross-functional cyber initiatives. Excellent communication skills are essential, particularly the ability to take complex … Industrial Control Systems, cyber investment planning or major digital transformation programmes would be particularly advantageous. Relevant certifications such as CISSP, CISM, SABSA or ISO 27001 Lead Implementer would also be welcomed. Cyber Strategy Manager Why Apply? This ...

audits to ensure adherence to regulatory standards and local government frameworks.Ensure that security compliance efforts are aligned with relevant laws and regulations, and lead audits to verify compliance with standards like PSN, PCI-DSS, etc.Develop and manage ongoing assurance processes to evaluate the effectiveness of security controls … Systems Security Professional) or similar cybersecurity certifications (e.g., CISM, CISA, CRISC) are essential. Other relevant certifications, such as CISA (Certified Information Systems Auditor), ISO 27001 Lead Implementer, or SOC 2 knowledge are desirable.Essential requirements Candidates will only ...

requirements, the cyber threat landscape and business priorities Establish effective programme governance, control, reporting, risk management and assurance to support successful delivery outcomes Lead multi-disciplinary teams across cyber security, technology, risk, operations and business functions to deliver transformational change Deliver cyber maturity assessments, security roadmaps, implementation … management skills, with experience coordinating diverse delivery teams and suppliers Relevant cyber security qualifications or certifications such as CISSP, CISM, CRISC, CCSP, SABSA, ISO 27001 Lead Implementer / Auditor, SANS, GIAC certifications or equivalent Up-to-date knowledge ...

right questions, recognise when risk is not being managed, and make sure the right people act. What you will do Creatively lead product discovery and roadmap ownership: driving novel solutions, bringing fresh ideas, and translating complex operational problems into actionable product visions, user stories, and prioritized backlogs. … technical progress, security controls, and operational risks into actionable updates for senior sponsors. Give programme and client leadership the operational support required to lead relationships and outcomes, rather than carrying every programme mechanic personally. What good looks like after 90 days You have established a clear delivery ...

role can be based from Wokingham or Warwick and we continue to offer hybrid working from office and home. Key Accountabilities Governance & Strategy Lead the development and continual evolution of NESO's Security Governance Framework, ensuring alignment with organisational strategy, risk appetite and regulatory obligations. Develop … Risk Management Develop and operate NESO's enterprise cyber risk management framework, aligned to NIS Regulations, and external standards such as CAF, ISO 27001, and enterprise risk management processes. Drive a threat-informed approach to risk identification, assessment, prioritisation and treatment. Establish clear risk ...

standards and security baselines. Provide governance and assurance over Identity & Access Management (IAM), Privileged Access Management (PAM), cloud security and security configuration standards. Lead security architecture reviews and provide independent assurance over technology solutions, projects and material technology change. Ensure security requirements are embedded within project, change … activities. Experience assessing technology risks in financial services environments. Qualifications: Minimum of one below is required: CISSP CCSP TOGAF Azure Security Engineer ISO27001 Lead Implementer or Lead Auditor Problem Solving and Judgment Customer Focus Planning and Reviewing Performance Focus Communication ...

critical role in safeguarding complex engineering systems that support national security and critical infrastructure. Working within our Mission Technologies team, you’ll lead and influence how security is designed into systems from concept to operation, ensuring robust protection against evolving threats. This is an exciting opportunity … assurance. Day-to-day, you’ll have the following responsibilities: Develop and implement comprehensive Information Assurance Strategies to meet complex customer security requirements. Lead risk management activities that align with an industry standard such as NIST SP 800-37 or the ISO / IEC ...