1 to 25 of 60 Remote/Hybrid SOC 2 Jobs in the UK

security design and architecture reviews, paired with the governance and process work that scales the program. You will partner on customer due‐diligence and SOC 2 evidence and turn security controls into repeatable workflows that fit how the business already works. You will apply that lens across … and DevOps to reduce risk through secure design and simplicity, not just added controls. Governance, Risk & Compliance Partner on customer due‐diligence (DDQ) and SOC 2 Type II evidence gathering, keeping compliance sustainable rather than fire‐drilled. Build repeatable security workflows that embed controls into existing engineering processes ...

work closely with Engineering, Product, Legal, and Leadership to embed security into everything we build, while evolving our compliance posture across ISO‐27001 and SOC‐2 (including expansion into additional controls). What you’ll do: Own and execute Valarian’s end‐to‐end information security strategy Lead … and mature our security posture across compliance frameworks, including ISO‐27001, SOC 2, and expansion into additional control frameworks Design and implement scalable security architecture across cloud, infrastructure, and applications Partner with Engineering to embed secure‐by‐design principles into development workflows Build, manage, and continuously improve security ...

rigorous security standards expected by our enterprise clients. Responsibilities Own the ISMS: Lead the maintenance of our ISO 27001 certification and spearhead the upcoming SOC 2 Type 2 audit processes. Endpoint & IT Security: Manage our fleet security via MDM (e.g. JumpCloud), ensuring robust encryption, patching, and access … both compliance and technical security engineering. Solid understanding of networking, encryption, and security fundamentals. Proven track record of managing ISO 27001 and successfully delivering SOC 2 audits (ideally in a startup environment). Ability to thrive in a fast-paced startup where you need to be self-directed ...

creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning and tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ … years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security Command Center) CISSP, OSCP, or equivalent certification Nice ...

operational readiness. Maintain technical documentation, including system architecture diagrams and security-related documentation. Support compliance initiatives and security certification efforts, including frameworks such as SOC 2, ISO 27001, and NIST. Collaborate closely with engineering and support teams to integrate security into platform operations and development workflows. Requirements … platforms. Strong programming skills, including experience with C# or another high-level programming language. Practical knowledge of security frameworks and compliance standards such as SOC 2, ISO 27001, and NIST. Experience working with containers, Kubernetes, and cloud-native orchestration technologies. Solid networking knowledge, including TLS, firewalls, VPNs, segmentation ...

seeking a hands-on **Security & Infrastructure Engineer** to support and improve our cloud, identity, endpoint and security operations capabilities.This is not a pure SOC role. The successful candidate will work across Microsoft cloud security, endpoint management, vulnerability management, infrastructure support and compliance activities, helping to strengthen the organisation … identity, networking, resilience and platform improvements.* Provide technical escalation support for security and infrastructure-related issues.## ## Governance, Risk & Compliance* Assist with ISO 27001, SOC 2 and similar audit and compliance activities.* Support evidence collection, access reviews, control validation and audit remediation actions.* Contribute to security standards, procedures ...

and compliance posture to leadership in clear, business-oriented terms. Compliance and certifications Drive certification and attestation efforts (e.g., ISO 27001 and/or SOC 2): design and maintain the control framework, own the documentation and evidence, and lead internal and external audits. Build a sustainable, “always-audit … . Strong, practical knowledge of GDPR and UK GDPR and day-to-day data protection. Hands‐on experience with ISO 27001 and/or SOC 2 implementation and audits. Working familiarity with the Microsoft security stack (Entra ID, Defender, Purview, Intune). Experience responding to client/customer ...

Information Security & Compliance Lead (GRC) Job Title: Information Security & Compliance Lead Location: Oxfordshire - Hybrid 2 days per week on site Industry: Enterprise SaaS/Technology Solutions About the Role We are partnering with a fast-growing, globally active software and data solutions enterprise looking to appoint an experienced Lead … . In this position, you will drive the operational security initiatives necessary to achieve and maintain formal security frameworks and attestation standards (including SOC 2 Type I/II lifecycles). You will translate complex trust criteria into practical, sustainable controls, bridge operational gaps, coordinate external audits, and ...

compliance initiatives across cloud-based and regulated environments Driving audit readiness, compliance programs and evidence-based assurance across frameworks such as ISO 27001, GDPR, SOC 2 and GxP Providing leadership on risk management, governance and security strategy Partnering with customers, auditors and key stakeholders on security reviews, assurance … with experience in several of the following areas: Security leadership, governance, risk and compliance (GRC) Cloud security architecture and security strategy ISO 27001, GDPR, SOC 2, GxP, 21 CFR Part 11 or similar regulated frameworks Audit leadership, customer assurance and certification programs Healthcare technology, pharmaceutical, biotechnology or regulated ...

Compliance Officer (ISO 27001, SOC2, GDPR) Fully Remote (Visit to the Milton Keynes Office once a month) £45,000 - £50,000 + Bonus & Benefits Are you a hands-on compliance professional who thrives on variety and ownership? Do you have experience delivering ISO, SOC & GDPR audit & compliance projects? Join … and governance is critical. You'll manage and maintain ISO 27001, ISO 9001 and ISO 22301 certifications, lead GDPR and data protection compliance, oversee SOC 2 - Type II controls, coordinate business continuity and disaster recovery activities, and support customer audits and due diligence requests. You'll also play ...

compliance framework across the business Leading PCI DSS compliance initiatives Developing and improving GDPR processes and documentation Supporting security standards such as ISO 27001, SOC 2 and/or Cyber Essentials Creating policies, procedures and governance documentation Building and maintaining risk registers Preparing the business for future audits … roadmap to get everything where it needs to be. Ideally you'll have experience with: Governance, Risk & Compliance (GRC) PCI DSS GDPR ISO 27001, SOC 2 and/or Cyber Essentials Security governance and audit preparation Policy creation and documentation Risk management frameworks Working independently with multiple stakeholders ...

among others. In addition, you will own and continuously improve Intigriti’s threat detection capabilities. This includes running day-to-day Security Operations Centre (SOC) activities, expanding log coverage, and building high-quality detections in our SIEM. You will use frameworks such as MITRE ATT&CK and MITRE D3FEND … availability of company data. Collaborate with the IT System Administrator to manage and enhance the overall network and system security. Incident Response, Threat Detection & SOC Operations Develop, maintain, and run incident response plans to address security incidents promptly and effectively. Run day-to-day SOC operations, including monitoring ...

Cloud platforms (AWS, Azure, GCP) A background in financial services or similar regulated industries Familiarity with compliance frameworks, and security requirements (e.g., ISO 27001, SOC 2, SOX, PCI DSS, FedRAMP, FFIEC, NYDFS, and SEC compliance requirements) A track record in consulting, solutions architecture, or technical coaching. Interest ...

against cyber threats. We operate in a highly secure global SaaS organization that holds multiple certifications such as PCI‐DSS, ISO/IEC 27001, SOC, HIPAA, IRAP and works with a large, federated customer base. Responsibilities Develop and lead a team of Security Analysts and Engineers, providing management, mentorship … latest security threats, vulnerabilities and mitigation techniques. Advantageous Skills and Experience Experience working on projects ensuring compliance with PCI DSS, ISO/IEC 27001, SOC, HIPAA, IRAP controls. Knowledge of security compliance standards relevant to the SaaS industry such as PCI, GDPR, ISO 27001, SOC 2, NIST. ...

Cloud and Zero Trust principles. Own compliance across multiple jurisdictions, including data residency and sovereignty, mapping controls to relevant frameworks (e.g. ISO 27001, SOC 2, GDPR, regional equivalents) and evidencing them for audit. Govern at scale with Azure Policy, authoring definitions and initiatives, applying them across scopes, and … days holiday plus all UK bank holidays 4x life assurance Enhanced family‐friendly leave – 5 months' full pay for maternity or adoption, plus 2 weeks' fully paid paternity/adoption leave and an extra 2 weeks to use as paid annual leave within 24 months of birth ...

mandatory security checks. Impress Us More By Having (Desirable) Proven experience working with and adhering to FinTech-related certifications, standards, or frameworks such as SOC2, ISO 27001, PCI DSS, DORA or similar regulated environments. Relevant certifications such as Google Cloud Professional Security Engineer, CKS (Certified Kubernetes Security Specialist), or CISSP. ...

and information risks, and achieve or maintain compliance with recognised standards and frameworks including ISO/IEC 27001, Cyber Assessment Framework (CAF), Cyber Essentials, SOC-2, PCI, DSS, GDPR, and other relevant regulatory or contractual requirements. This is a customer-facing consultancy role, requiring confident engagement with senior stakeholders … GDPR and relevant information security standards or best practice frameworks Knowledge of additional frameworks such as CAF, NIS-2, NIST Cybersecurity Framework, CIS Controls, SOC 2, ISO 22301, ISO 27701 or PCI DSS. ExperienceusingGRC,auditmanagement,riskregisterorreporting tools. HoldSC/DVclearanceorwillingnesstoundertakesecurity vetting. MemberofCiSPoranotherrelevantprofessional community. Willingnesstostudyforandattainfurtherrelated qualifications. Experienceofimplementingandmanaging ISO 9001. ...

Bachelor’s degree in Computer Science, Engineering, or a related field. Familiarity with security and compliance standards relevant to financial services (e.g., GDPR, DORA, SOC 2). Proficiency in Spanish or Portuguese is a plus. #J-18808-Ljbffr ...

Bachelor’s degree in Computer Science, Engineering, or a related field. Familiarity with security and compliance standards relevant to financial services (e.g., GDPR, DORA, SOC 2). Proficiency in Spanish or Portuguese is a plus. About us Ebury delivers sophisticated, integrated solutions—business accounts, hedging, and financing ...

Network Security Engineer Job Title: IT Security Engineer Location: Oxfordshire - Hybrid (2 days per week on-site) Industry: Enterprise SaaS/Technology Solutions About the Role We are partnering with a rapidly scaling, globally active software and data platform enterprise looking to appoint a dedicated IT Security Engineer … . Framework Knowledge: Solid comprehension of ISO 27001 principles, threat modelling frameworks, vulnerability scanning, risk treatment life-cycles, and secondary compliance standards (e.g., SOC 2 or PCI DSS). Qualifications: Relevant technical diploma or equivalent practical background, reinforced by desirable professional credentials (such as CISSP, CEH, CCNA Security ...

with guardrails you trust and help secure and monitor the (code/application/device) fleet. Support compliance work where it intersects security engineering: SOC 2, ISO 27001, customer security reviews, and pen test responses. What we’re looking for 3+ years in security engineering with hands … Google, Microsoft, Oracle, Coinbase, JP Morgan and more Health, fitness and gift card discounts Cycle2Work and Electric Cars scheme Hybrid working friendly - typically 2 days/week in our London office. We’re open to discussing flexible arrangements—please share any preferences in your application We believe diversity drives ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

services, banking, or payments. Experience in InfoSec and Cyber Security. Experience setting up policies and processes in InfoSec area. Familiarity with PCI-DSS, ISO27001, SOC 2/3 or other global standards. Familiarity with regulatory requirements (DORA, PCI-DSS, PSD2, GDPR). Understanding of agile development processes and ...

representing engineering in external calls with auditors, pentesters, and security vendors; able to explain infrastructure decisions in security terms. Compliance: Familiarity with compliance standards (SOC 2, ISO 27001, etc.) and cloud security postures in AWS, Azure, or GCP. Salary & Benefits Competitive salary and equity grants Employer pension contributions ...

business before. Bonus points if you've helped shape DevOps roadmaps, mentored others, or worked with cost optimisation, security, or compliance frameworks (ISO, SOC2, etc.). This is more than just another DevOps role - it's a chance to join a company at the perfect stage: profitable, scaling, tech ...