1 to 25 of 150 Remote/Hybrid SOC 2 Jobs in the UK

evidence generated by integrations rather than collected by humans, and a third‐party risk management program that reflects how we actually use third parties. SOC 2, ISO 27001, and SOX anchor this work. The second job is harder and less charted. As Life360 deploys agentic systems into … peer‐reviewed via pull request. Requirements expressed as enforceable rules and automated checks, not static PDFs. A common controls framework that satisfies SOC 2, ISO 27001, NIST CSF, and future frameworks from a single control reference — no rework. Drive SOC 2 Type 2 ...

suppliers to. Our own assurance is part of the product promise: we are ISO 27001 certified, hold Cyber Essentials Plus and have achieved SOC 2 Type 1. The team works closely with Engineering, Product, Sales, Customer Success, People and Finance, making security and compliance something that helps … work, not delegate it. There's no team to inherit. You'll be the person who keeps ISO 27001 running, takes us from SOC 2 Type 1 to Type 2, and owns the risk framework the leadership team relies on. It's a highly collaborative role: expect ...

security posture management, compliance auditing and regulatory frameworks (HIPAA, PCI-DSS, GDPR, CMMC, SOC 2), plus fluency in the SIEM, SOAR, and SOC technologies (Splunk, Microsoft Sentinel, IBM QRadar, ServiceNow, and similar) that security operations and compliance teams rely on every day. You will … real-time alerting, rapid forensic investigation, behavioral analytics (UEBA), and AI-driven threat detection and response capabilities. Ensure deep integration with SIEM, SOAR, and SOC ecosystems (Splunk, Microsoft Sentinel, IBM QRadar, ServiceNow) for alert export, extended schema, and workflow/action orchestration. Cross-Functional Collaboration Work closely with Sales ...

security systems, supports our corporate IT infrastructure (including Microsoft 365 and our zero-trust network access), and assists with compliance activity such as SOC 2 and Cyber Essentials Plus. This role shares in all of that, not just product-facing infrastructure. If you want a role where your … collaboration with a 3rd party, and our ZTNA network. Assist with technical evidence, control implementation and remediation work for compliance frameworks such as SOC 2 and Cyber Essentials Plus. Balance this work proportionately alongside product infrastructure and delivery responsibilities, this is a supporting part of the role ...

security design and architecture reviews, paired with the governance and process work that scales the program. You will partner on customer due‐diligence and SOC 2 evidence and turn security controls into repeatable workflows that fit how the business already works. You will apply that lens across … and DevOps to reduce risk through secure design and simplicity, not just added controls. Governance, Risk & Compliance Partner on customer due‐diligence (DDQ) and SOC 2 Type II evidence gathering, keeping compliance sustainable rather than fire‐drilled. Build repeatable security workflows that embed controls into existing engineering processes ...

and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part of a fast-growing community … effectiveness Identify control gaps, deficiencies, and areas for improvement Compliance & Risk Alignment Assess controls against relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2) Assess control effectiveness across: Design Effectiveness (DE), Operating Effectiveness (OE) and Control Automation (CA) Support regulatory and internal compliance initiatives Ensure ...

classification, data handling, retention, access, cross-border processing and related technology controls. Support compliance obligations relevant to cloud and software services, including GDPR, CCPA, SOC 2, ISO 27001, FedRAMP and NIST-based requirements, where applicable. Monitor remediation of technology-related data-protection and compliance gaps through closure. … establishing technology control frameworks and supporting audits, certifications, customer assurance and remediation programs. Working knowledge of relevant frameworks and requirements, such as ISO 27001, SOC 2, NIST, GDPR, CCPA and FedRAMP, as applicable. Experience integrating security, privacy and compliance controls into product development or technology‐delivery lifecycles. Experience ...

align with a cloud-first strategy. Partner with Security to harden the Microsoft 365 tenant and infrastructure estate against relevant compliance frameworks (ISO 27001, SOC 2, DORA). Technical Leadership Act as a senior technical point of contact for infrastructure design decisions, escalations, and complex troubleshooting. Change Control … Intune and Kandji are compliant, patched, and enrolled to policy. The Microsoft 365 tenant and wider SaaS estate meet relevant compliance frameworks (ISO 27001, SOC 2, DORA). Infrastructure changes are documented, tested, and follow IT change control processes without exception. Technical documentation, runbooks, and architecture records ...

such as the EU AI Act Perform third-party/vendor security and AI risk assessments Contribute to control testing across frameworks such as SOC 2, ISO 27001, CSA Star, NIST CSF, and emerging AI governance standards Track remediation efforts and maintain risk registers and reporting dashboards Support … Foundational understanding of cybersecurity principles (network security, cloud security, IAM, application security, vulnerability management) Familiarity with common frameworks such as NIST CSF, ISO 27001, SOC 2, or similar Understanding of AI/ML concepts and associated risks (data governance, model bias, hallucinations, prompt injection, model misuse, etc. ...

overflow. You are taking over a production estate that is highly specific: a Node.js application and public API running on Amazon EKS (eu-west-2) , backed by Aurora MySQL 8 (with a read replica) and ElastiCache Redis , fronted by ALB and CloudFront/WAF. Everything is codified using Terraform …/CodeBuild. Observability runs on CloudWatch and a self-hosted Prometheus/Grafana cluster stack, paging via PagerDuty. You will also directly own our SOC 2 compliance programme, keeping controls green via Vanta. What You'll Do Run EKS Production: Own our live AWS environment, handling EKS node ...

building the experience and judgment to take on broader ownership over time. You’ll work closely with experienced security and GRC partners to support SOC 2 Type II and ISO 27001 audit readiness, keep evidence and controls organized, help manage risk and remediation work, and improve the systems … mission by helping our security practices remain effective, measurable, and worthy of our customers’ trust. What you’ll do: Support audit readiness activities for SOC 2 Type II, ISO 27001, and other security assurance initiatives. Coordinate evidence collection with teams across Security, Engineering, Legal, HR, Product, and other ...

when necessary to support them. You will own the IT strategy and roadmap, service performance, vendor procurement outcomes, and the IT control environment, including SOC 2, Cyber Essentials, and GDPR-related IT controls. You will plan and manage the project portfolio, hold vendors and the team to account … outcome, the Indeed relationship, and vendor performance Security, Risk & Compliance: Own the IT control environment and security posture, including policy, access standards, SOC 2, Cyber Essentials, GDPR-related IT controls, and audit outcomes. Direct the team's evidence gathering and control maintenance, and represent IT on security and ...

and close the coverage gaps where some products are today outside the standard tooling. Governance, risk and compliance and vendor management Own ISO 27001, SOC 1, SOC 2 and PCI DSS compliance, the audit calendar, the compliance automation platform and the relationship with our auditors. Work with … software or SaaS company serving regulated enterprise customers, and of facing those customers on security matters. Working knowledge of ISO 27001 and SOC 2, and experience of being accountable for audits and certifications. PCI DSS experience is an advantage. Practical understanding of cloud security on AWS and Azure ...

Access Transparency, relevant to deploying per-market for different banks' regulators Hands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2 ...

Dexory is transforming warehousing and logistics with data intelligence in the UK. We seek an Information Security Lead to own ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes, and to respond to customer security due diligence across engineering, product and operations. ...

creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning and tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ … years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security Command Center) CISSP, OSCP, or equivalent certification Nice ...

and internal security tooling developmentDevelop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us)Develop systems, automations, and methods of security observability … this position will require communication with peers, stakeholders, auditors, and customersUnderstanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents ...

internal security tooling development- Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us)- Develop systems, automations, and methods of security observability … this position will require communication with peers, stakeholders, auditors, and customers- Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards ...

internal security tooling development Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability … this position will require communication with peers, stakeholders, auditors, and customers Understanding of industry-recognised security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards ...

secret rotation and offboarding. Connectors Microsoft 365 and the other sources we read handling tokens, scopes and permissions safely. Compliance The controls behind our SOC 2 and ISO 27001 work in Vanta, with the auditor and pen-test firm you choose and manage. Security answers The security pack … major cloud, GCP ideally, Azure or AWS welcome, and written the infrastructure as code for it. You have been the person who got a SOC 2 or ISO 27001 audit through at a startup or scale-up, and can name the controls you owned and the evidence ...

fake domains and accounts impersonating our brands and leaders. Policy, compliance and trust. Write and enforce policies people actually follow. Prepare the company for SOC 2 or ISO 27001 with Legal & Compliance. Own the public security and trust story, including the trust page on our products. Team leadership. … half your time hands-on while leading a small, fully remote team across many time zones. Nice to have Has prepared a company for SOC 2 or ISO 27001. Has secured or evaluated AI agents and LLM-based tools in production. Has run a third-party risk program ...

demonstrations that showcase how Vanta solves the customer's specific problem, including how Vanta automates and operationalises their GRC programmes across frameworks such as SOC 2, ISO 27001, and HIPAA. Validate the feasibility of standard and semi-complex integrations and confirm alignment with customer environments, workflows, and architectures. … trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making ...

Reporting & Compliance Support by owning operational metrics and performance reporting, communicating risk to stakeholders, and contributing evidence and control monitoring activities supporting ISO 27001, SOC 2 and NIS2 compliance requirements. Key outcomes: Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying … and platforms. Contribute to a high‐performing Security Operations function by mentoring analysts, delivering meaningful operational reporting, and supporting compliance obligations including ISO 27001, SOC 2 and NIS2. Experience required: Proven experience operating within a Security Operations, Cyber Security Analyst, Security Engineer or Incident Response role, with responsibility ...

Reporting & Compliance Support by owning operational metrics and performance reporting, communicating risk to stakeholders, and contributing evidence and control monitoring activities supporting ISO 27001, SOC 2 and NIS2 compliance requirements. Key outcomes: Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying … and platforms. Contribute to a high‐performing Security Operations function by mentoring analysts, delivering meaningful operational reporting, and supporting compliance obligations including ISO 27001, SOC 2 and NIS2. Experience required: Proven experience operating within a Security Operations, Cyber Security Analyst, Security Engineer or Incident Response role, with responsibility ...

endpoint or account security alerts. Work with Security colleagues to remediate issues and strengthen security controls. Assist with compliance activities, including maintaining evidence for SOC 2, ISO 27001, DORA or comparable frameworks. 7. Projects and Continuous Improvement Identify and implement automation opportunities that reduce repetitive administration and improve … management and Linux endpoints. Building integrations and automations using scripts, APIs or workflow tools. Experience maintaining CMDBs, asset registers and operational dashboards. Involvement in SOC 2, ISO 27001, DORA or similar audit and compliance activities. Supplier management, technology procurement and coordination of workplace technology projects. Benefits The organisation ...