1 to 25 of 121 Remote/Hybrid SOC 2 Jobs in the UK

hackajob is partnering directly with Dexory to hire for this role. Information Security Lead/ISO27001/SOC/GRC/Location: Wallingford - Oxfordshire (Hybrid) onsite circa 3 days minimum per week Permanent At Dexory, we are transforming the warehousing and logistics industry through data intelligence. Were currently recruiting … Information Security Lead to own and drive our compliance programmes (ISO 27001, SOC 1 Type 2, SOC 2 Type 2), act as the primary responder to customer security due diligence, and build the systems and knowledge base that allow Dexory to scale securely without friction. ...

oriented skills like API integrations, data querying, and control automation. You’ll be a key player in maintaining our compliance posture across frameworks like SOC 2, NIST CSF, and ISO 27001, while also helping modernize how we monitor and evidence controls using platforms like Anecdotes. This role suits … pull evidence out of a data pipeline. What You’ll Do Audits & Framework Management Own or co‐own preparation for and execution of SOC 2 (Type I/II) audits, working directly with external auditors to scope, evidence, and remediate findings Lead or support NIST CSF assessments and ...

Programme Maintain and continuously improve the Information Security Management System, firmwide information security programme, security policies, certifications and control framework, aligned to ISO 27001, SOC 2, DORA‐related customer obligations, applicable financial services expectations and Crédit Agricole Group requirements. Partner with Product, Engineering and Technology teams to embed … monitoring and exit arrangements. Own the client security assurance process, including security questionnaires, RFP/RFI responses, client audits, evidence packs, ISO 27001/SOC 2 artefacts, penetration test summaries, contractual security schedules and remediation tracking. Security Awareness & Planning Plan and maintain the annual security roadmap ...

security design and architecture reviews, paired with the governance and process work that scales the program. You will partner on customer due‐diligence and SOC 2 evidence and turn security controls into repeatable workflows that fit how the business already works. You will apply that lens across … and DevOps to reduce risk through secure design and simplicity, not just added controls. Governance, Risk & Compliance Partner on customer due‐diligence (DDQ) and SOC 2 Type II evidence gathering, keeping compliance sustainable rather than fire‐drilled. Build repeatable security workflows that embed controls into existing engineering processes ...

align with a cloud-first strategy. Partner with Security to harden the Microsoft 365 tenant and infrastructure estate against relevant compliance frameworks (ISO 27001, SOC 2, DORA). Work closely with senior infrastructure engineers on infrastructure design decisions, escalating complex troubleshooting and design questions as needed. Change Control … Intune and Kandji are compliant, patched, and enrolled to policy. The Microsoft 365 tenant and wider SaaS estate meet relevant compliance frameworks (ISO 27001, SOC 2, DORA). Infrastructure changes are documented, tested, and follow IT change control processes without exception. Technical documentation, runbooks, and architecture records ...

ensuring that nothing falls through the gaps as the business grows. What you’ll be responsible for Audit & Certification You’ll own the ongoing SOC 2 Type II and ISO 27001:2022 audit lifecycle for an already‐certified organisation: surveillance and recertification audit planning, evidence readiness, auditor liaison … regulatory changes or operational changes, and advising leadership on required updates. Vendor & Third‐Party Risk Conduct and support structured vendor risk assessments, review SOC 2 reports, ISO certificates, and DPAs, maintain the vendor register, and ensure periodic reviews are completed on schedule. Infrastructure & Evidence Navigate AWS, Microsoft Entra ...

and close the coverage gaps where some products are today outside the standard tooling. Governance, risk and compliance and vendor management Own ISO 27001, SOC 1, SOC 2 and PCI DSS compliance, the audit calendar, the compliance automation platform and the relationship with our auditors. Work with … software or SaaS company serving regulated enterprise customers, and of facing those customers on security matters. Working knowledge of ISO 27001 and SOC 2, and experience of being accountable for audits and certifications. PCI DSS experience is an advantage. Practical understanding of cloud security on AWS and Azure ...

auditors ask for, how evidence is collected and presented, findings and management responses Familiarity with third‐party/vendor risk: due‐diligence questionnaires, reading SOC 2 reports, contractual security requirements A solid understanding of the technical side of security (networks, systems, cloud, common attack patterns) — enough to keep … taught this material to real audiences (workshops, bootcamps, internal training, university teaching) Experience designing or facilitating tabletop exercises or crisis simulations Exposure to SOC 2 (Type 2) readiness or audit support, PCI‐DSS, or sector frameworks (HIPAA, CMMC, Cyber Essentials) Familiarity with GRC platforms (Drata, Vanta, OneTrust ...

meeting spaces, video conferencing and AV technology remain fully operational Troubleshoot network, hardware, software and endpoint issues Support IT security and compliance requirements, including SOC 2 and ISO 27001 Assist with technology projects and initiatives, including M&A integrations What we’re looking for Experience managing IT operations … managing endpoints and Mac environments Knowledge of core networking principles and troubleshooting Experience with conference room, Zoom/Teams and AV technology Experience with SOC 2 Type 2 and/or ISO 27001 compliance frameworks Strong organisational and project management skills Comfortable working with users at every ...

Access Transparency, relevant to deploying per-market for different banks' regulators Hands‐on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2 ...

Access Transparency, relevant to deploying per-market for different banks' regulators Hands‐on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2 ...

Dexory is transforming warehousing and logistics with data intelligence in the UK. We seek an Information Security Lead to own ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes, and to respond to customer security due diligence across engineering, product and operations. ...

security, including firewall rules, NSGs, WAFs, and network design. Ensure secure cloud configurations and enforce best practices using Azure-native controls and policies. Compliance & SOC 2 Readiness Lead implementation and validation of security controls aligned with SOC 2 and ISO standards. Document processes and participate … Identity & Access Management (IAM), endpoint security, and cloud-native controls. Experience with Microsoft Intune, Jamf Suite, Conditional Access, DLP, MFA, and compliance policies, including SOC2 and ISO27001. Previously used scripting tools such as PowerShell, Python, Bash, KQL, or SQL. You\'ll stand out from the crowd if you also have ...

creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning and tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ … years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security Command Center) CISSP, OSCP, or equivalent certification Nice ...

assessments, and executive reporting for leadership and the board. Lead Compliance & Certifications: Own end‐to‐end audit readiness for enterprise and defense frameworks, including SOC 2 Type II, ISO 27001, Cyber Essentials Plus, and NIST 800‐53. Partner with Product & Engineering: Embed DevSecOps and secure SDLC practices into … cloud security (AWS/GCP), container isolation, cryptography, and network security. Audit & Compliance Track Record: Proven experience taking a high‐growth technology company through SOC 2 Type II or ISO 27001 certifications from start to finish. Stakeholder Management: Exceptional ability to bridge technical security requirements with business strategy ...

program and project management skills, with a track record of delivering across multiple teams. Solid knowledge of cybersecurity frameworks (NIST 800-53, ISO 27001, SOC 2, and/or FedRAMP) and hands‐on audit experience. Enough technical depth to be the team's technical point of contact: comfortable … engineering, cloud security, or security engineering. Prior experience as a technical SME, or as a bridge between compliance and engineering teams. Experience leading a SOC 2 Type II, ISO 27001, FedRAMP, or NIST 800-53 audit end‐to‐end, and familiarity with OSCAL or other compliance‐automation tooling. ...

Data Center, Network, and Application Infrastructure domains. The role is responsible for scanner architecture and tuning, risk-based prioritisation, integration with patch management and SOC functions, automation of VM workflows, and executive reporting. The engineer acts as the primary SME for vulnerability risk decisions and drives continuous improvement … escalation for L1 analysts; mentor team members and review scan configurations and reports. Lead or support internal VM audits and contribute to ISO 27001, SOC 2, or regulatory compliance evidence. TECHNICAL SKILLS & KNOWLEDGE Deep expertise in enterprise VM platforms: Qualys VMDR (including TruRisk), Tenable Security Centre/Tenable.io ...

implementation, maintenance and audit preparation. Advise clients against recognised frameworks including ISO 27001, NIST CSF and CIS Controls, as well as supporting SOC 2 and other compliance requirements. Develop and improve security policies, procedures and governance frameworks. Establish and maintain risk registers and support security governance forums. Support … reports and recommendations. Knowledge or experience in areas such as the following would be beneficial: ISO 27001/ISO 27005 NIST CSF CIS Controls SOC 2 NIS2/DORA Risk management and governance Security operations and monitoring Incident response Vulnerability management Cloud security, particularly Microsoft Azure and Microsoft ...

demonstrations that showcase how Vanta solves the customer's specific problem, including how Vanta automates and operationalises their GRC programmes across frameworks such as SOC 2, ISO 27001, and HIPAA. Validate the feasibility of standard and semi‐complex integrations and confirm alignment with customer environments, workflows, and architectures. … trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making ...

compliance initiatives across cloud-based and regulated environments Driving audit readiness, compliance programs and evidence-based assurance across frameworks such as ISO 27001, GDPR, SOC 2 and GxP Providing leadership on risk management, governance and security strategy Partnering with customers, auditors and key stakeholders on security reviews, assurance … with experience in several of the following areas: Security leadership, governance, risk and compliance (GRC) Cloud security architecture and security strategy ISO 27001, GDPR, SOC 2, GxP, 21 CFR Part 11 or similar regulated frameworks Audit leadership, customer assurance and certification programs Healthcare technology, pharmaceutical, biotechnology or regulated ...

management. Automate wherever possible: zero-touch deployments, IaC for security tooling, automated provisioning and deprovisioning. - Drive compliance and certification. Lead certification efforts (ISO 27001, SOC 2) as needed to meet partner requirements. Automate where needed and treat compliance as a byproduct of good security practice. - Own IT administration … people Experience building or significantly maturing a security programme Familiarity with cloud security (AWS IAM, networking, infrastructure review) Experience with compliance frameworks (ISO 27001, SOC 2) Hands-on experience with endpoint management (Kandji, Jamf, or similar) and identity/access management Experience administering Google Workspace or equivalent Interest ...

and procedures sharp and our compliance with ISO 27001 and ISO 27018 on point. You’ll get involved in SSAE 18/ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and … excellent organisational skills. You write clear documentation and reports, and can translate complex requirements for stakeholders at every level You’ll have at least 2 years’ experience in a related role Experience in a regulated industry, familiarity with other information security frameworks and assurance reports, and exposure to Jira ...

and procedures sharp and our compliance with ISO 27001 and ISO 27018 on point. You'll get involved in SSAE 18/ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and … organisational skills.* You write clear documentation and reports, and you can translate complex requirements for stakeholders at every level.* You'll have at least 2 years' experience in a related role.* Experience in a regulated industry, familiarity with other information security frameworks and assurance reports, and exposure to Jira ...

Information Security Analyst to safeguard our SaaS platform across security operations, access reviews and risk management. You will help operate ISO 27001 and SOC 2 controls while learning quickly and delivering practical security improvements across the business. Based in London with hybrid work, you will collaborate with Engineering ...

Information Security Management System. As an Information Security Analyst, you will help operate and improve the controls that support our ISO 27001 and SOC 2 programmes, while also getting involved in the real security work that happens across a growing SaaS business. You will not be expected … helpful, trusted partner in the way FundApps builds, buys and operates technology. Taking full, end-to-end ownership of FundApps’ ISO 27001 and SOC 2 controls operation, managing every stage from initial evidence collection and control checks through to remediation tracking and comprehensive audit preparation. Organising and chairing ...