Nottingham, Nottinghamshire, East Midlands, United Kingdom Hybrid / WFH Options
Experian Ltd
cloud security controls. Professional certification such as CISA, CISM, CISSP, ISO 27001 Lead Auditor, or equivalent. Knowledge of industry standardsand frameworks such as NIST 800-53, ISO 27001/27002, CIS Controls, COBIT. Experience with current automated and manual industry methods for evaluating security controls on prem and in More ❯
risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standardsand regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2 or equivalent. Experience working in a variety of environments or organisational contexts to develop cyber strategy andMore ❯
risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standardsand regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2 or equivalent. Experience working in a variety of environments or organisational contexts to develop cyber strategy andMore ❯
Manchester, Lancashire, United Kingdom Hybrid / WFH Options
Deloitte LLP
risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standardsand regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2 or equivalent. Experience working in a variety of environments or organisational contexts to develop cyber strategy andMore ❯
Bristol, Gloucestershire, United Kingdom Hybrid / WFH Options
Deloitte LLP
risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standardsand regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2 or equivalent. Experience working in a variety of environments or organisational contexts to develop cyber strategy andMore ❯
Cardiff, South Glamorgan, United Kingdom Hybrid / WFH Options
Deloitte LLP
risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standardsand regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2 or equivalent. Experience working in a variety of environments or organisational contexts to develop cyber strategy andMore ❯
design. Key Responsibilities: Security Assessment & Risk Analysis Update documentation on current security posture. Conduct risk assessments and gap analyses against industry standards (ISO 27001, NIST). Identify vulnerabilities and ensure compliance with client contracts. Security Architecture Design Refine high-level and detailed security architectures. Design network segmentation, encryption, access controls More ❯
london, south east england, United Kingdom Hybrid / WFH Options
Levy Search
design. Key Responsibilities: Security Assessment & Risk Analysis Update documentation on current security posture. Conduct risk assessments and gap analyses against industry standards (ISO 27001, NIST). Identify vulnerabilities and ensure compliance with client contracts. Security Architecture Design Refine high-level and detailed security architectures. Design network segmentation, encryption, access controls More ❯
Risk Treatment Plans Establish security requirements for cloud-based solutions by evaluating business strategies and requirements, implementing security standards such as ISO 27000 series, NIST, CSF, and CSA Identify and deliver appropriate controls based on industry standards (e.g. CCM) to drive cloud and customer security solutions framework based on business More ❯
control in data protection. Understanding of protection controls applied to data throughout its lifecycle. Experience implementing data security standards such as ISO27001, PCI DSS, NIST CSF. Ability to manage cyber security risks and communicate effectively with stakeholders. Desirable Skills: Experience leading a Cyber Security Assurance function. Bachelor's Degree (or More ❯
trends is crucial. Developing and implementing security policies, standards, and procedures: This includes creating guidelines aligned with industry best practices and regulatory requirements (e.g., NIST CSF, ISO 27001, GDPR). Designing and architecting secure IT environments: This may involve network security design, cloud security architecture (AWS, Azure, GCP), and implementing More ❯
london, south east england, United Kingdom Hybrid / WFH Options
Global TechForce
trends is crucial. Developing and implementing security policies, standards, and procedures: This includes creating guidelines aligned with industry best practices and regulatory requirements (e.g., NIST CSF, ISO 27001, GDPR). Designing and architecting secure IT environments: This may involve network security design, cloud security architecture (AWS, Azure, GCP), and implementing More ❯
Warwick, Warwickshire, United Kingdom Hybrid / WFH Options
ICEO
with proven Second Line of Defense responsibilities in InfoSec and IT Compliance & Frameworks : Demonstrated success meeting GDPR, EU NIS2, and familiarity with ISO 27001, NIST, and cybersecurity best practices Risk & Governance : Skilled in conducting risk assessments, defining mitigation strategies, and creating/enforcing security policies Good technical understanding of IT More ❯
events Hands-on knowledge and experience of security operations and incident response planning; Cellebrite, Magnet Domain Tools Knowledge of cybersecurity principles and frameworks; ISO27001, NIST, GDPR etc. Knowledge and experience with MS Sentinel, Cisco Meraki, MS Defender, Endpoint protection Knowledge and experience with SIEM, IDS/IPS, firewalls, endpoint protection More ❯
of Agile, DevSecOps, System Engineer and or equivalent Knowledge of security standardsand secure development principles such as NCSC Secure Development & Deployment Guidance, OWASP, NIST Secure Software Development Framework (SSDF - 800-218), Microsoft Azure Secure Development best practices, ISO27001 Experience with Azure cloud infrastructure, particularly Azure PaaS service Experience with More ❯
governance and control implementation. I'm Qualified Because I Have 10+ years experience with security and compliance standards such as ISO 27001, CSA STAR, NIST 800-xx, SOC 2. Experience leading a team. Held an information security compliance position (or similar), have a solid background in IT, and a good More ❯
management, cyber risk, security target operating model, governance, compliance, cyber security maturity assessment, metrics and C-level dashboards ) and leading industry-based practices (e.g. NIST CSF, ISO 2700x ) Managing the coordination and communication of key findings and results of engagements, producing written reports and supporting oral presentations to senior client More ❯
degree. Information Security certifications such as CISSP, CISM, CISA, or CRISC are highly preferred. Knowledge with common compliance frameworks like the CIS Critical Controls, NIST SP800, ISO27001 Detailed knowledge of cyber risk management practices from the context of ERM Frameworks and familiarity with GRC applications. Strong analytical and problem-solving More ❯
Portsmouth, England, United Kingdom Hybrid / WFH Options
Computappoint
a leadership role Strong hands-on knowledge of SIEM, EDR, SOAR, IDS/IPS, firewalls, and cloud security Deep understanding of MITRE ATT&CK, NIST, ISO 27001, CIS frameworks Proven experience in incident response, threat intelligence, and multi-tenant SOCs Excellent leadership, communication, and client engagement skills Bonus Points for More ❯
Portsmouth, yorkshire and the humber, united kingdom Hybrid / WFH Options
Computappoint
a leadership role Strong hands-on knowledge of SIEM, EDR, SOAR, IDS/IPS, firewalls, and cloud security Deep understanding of MITRE ATT&CK, NIST, ISO 27001, CIS frameworks Proven experience in incident response, threat intelligence, and multi-tenant SOCs Excellent leadership, communication, and client engagement skills Bonus Points for More ❯
a leadership role Strong hands-on knowledge of SIEM, EDR, SOAR, IDS/IPS, Firewalls, and cloud security Deep understanding of MITRE ATT&CK, NIST, ISO 27001, CIS frameworks Proven experience in incident response, threat intelligence, and multi-tenant SOCs Excellent leadership, communication, and client engagement skills Bonus Points for More ❯
security certifications (e.g., CISSP, CISM). Experience managing operational security activities, including governance and compliance. Strong understanding of regulatory and compliance frameworks such as NIST CSF, ISO 27001, and GDPR. Demonstrated ability to advise on secure software development practices. Demonstrable experience with security technologies and architectures. Hands-on experience with More ❯
fast-paced, collaborative environment. Ideally, you’ll also have: Experience with Microsoft Sentinel, Defender, Cloud App Security, or Purview A solid grasp of ISO27001, NIST, UK GDPR, and security frameworks Knowledge of vendor management and vulnerability assessments Bonus points for certifications like ISO27001 Lead Implementer, CISSP, or CISM What’s More ❯
cybersecurity, or cloud technologies (e.g., CISSP, CISM, AWS, Microsoft Certified Solutions Expert) are a plus. Familiarity with security frameworks and regulations such as GDPR, NIST, and ISO 27001 is beneficial. Why Join Us? Join a high-growth cybersecurity company that’s reshaping the identity and access management landscape. Work with More ❯
regular threat hunt activities and report findings to leadership. Security Governance and Compliance Ensure all work follows relevant security standardsand regulations, including SOX, NIST, GDPR, CPRA, and other industry-specific requirements. Participate in annual security assessments and audit activities. Develop and implement Standard Operating Procedures and other documentation as … Some relevant experience in a technical IT role (System Administration/Network Administration/DevOps). Knowledge of security frameworks and regulatory compliance standards (NIST CSF, SOX ITGC, GDPR, MITRE ATT&CK, etc.) Experience with common industry SIEM and vulnerability management platforms. Experience maintaining the Microsoft Defender platform and other More ❯