126 to 150 of 332 SOC 2 Jobs in the UK

regulatory expectations, supports operational resilience, and enables secure business growth.Champion & Ensure delivery against compliance requirements like the Apex Gold standard, NIST, DORA, SOC1 and SOC 2, ISO27001 and all relevant group controls.Liaising with key stakeholders, partners and group entities, internal and external.**Key Responsibilities****Technology Control Framework & Strategy ...

with guardrails you trust and help secure and monitor the (code/application/device) fleet. Support compliance work where it intersects security engineering: SOC 2, ISO 27001, customer security reviews, and pen test responses. What we’re looking for 3+ years in security engineering with hands … Google, Microsoft, Oracle, Coinbase, JP Morgan and more Health, fitness and gift card discounts Cycle2Work and Electric Cars scheme Hybrid working friendly - typically 2 days/week in our London office. We’re open to discussing flexible arrangements—please share any preferences in your application We believe diversity drives ...

every five mortgages nationwide. Our agile, cloud-native solutions enable over 60 banks, building societies, specialist lenders, equity release providers and a network of 2,400+ brokers to stay ahead in a competitive market. Built on open architecture and backed by deep industry expertise, our platform is designed … delivery strategy and resource allocation. Security & IT Governance & Compliance: Oversee delivery governance, risk control frameworks, and alignment with industry security standards (e.g., ISO 27001, SOC 2, NIST, GDPR, and FCA financial regulations). Cross-Functional Security Roadmap Integration: Build and maintain delivery roadmaps and executive reporting, managing dependencies ...

and Docker environments Data Loss Prevention (DLP) and SaaS security governance. Advanced detection engineering or SOAR playbook development. Experience supporting ISO 27001 or SOC 2 audits. Diversity, Equity and Inclusion At Deliveroo, we know that a great workplace reflects the world around us and that true diversity and ...

/CD (GitHub Actions or similar), and container orchestration Strong security posture: IAM, network segmentation, secrets, supply chain End-to-end compliance ownership (SOC 2, ISO 27001, or similar): designing the controls, not just answering about them Operational maturity: you've been on-call for systems that mattered ...

including policy-as-code and IaC scanning to automate guardrail enforcement. Cloud Security & Compliance: Working knowledge of cloud security controls and frameworks (ISO 27001, SOC 2, NIST; awareness of NIS2 and DORA) to assure secure-by-design. Continuous Improvement: Turning recurring incidents and problems into standards, patterns, and ...

etc. Nice to have - Industry recognized certification such as CISSP, CCSP, CISM, GIAC etc. Familiarity with compliance frameworks (E.g. GDPR, NIST AI RMF, ISO27001, SOC 2 etc.) Ability to build organizational culture, drive employee engagement, strengthen inclusion and diversity, reduce attrition, and attract top talent Market-focused with ...

and defense-in-depth strategies. Knowledge of Standards: Strong knowledge of relevant security standards and frameworks such as NIST, ISO 27001, MITRE ATT&CK, SOC2 and OWASP. Communication Skills: Ability to articulate technical risks and architectural decisions to both technical and non-technical audiences. Certifications: Architectural qualifications (e.g., SABSA, TOGAF ...

operational reporting and metrics on findings, remediation progress, and tooling healthWhat we're looking for5+ years of hands-on experience in a Security Operations, SOC, or equivalent operational security rolePractical experience operating modern security tooling SIEM (e.g. Sentinel), Data Loss Prevention (DLP) tools, EDR, and vulnerability management platformsSolid understanding … Azure and GCP) and how security operations apply across cloud and SaaSFamiliarity with common frameworks and standards such as PCI DSS, NIST CSF, SOC 2, ISO 27001, CIS Benchmarks, and MITRE ATT&CKA pragmatic, ownership-minded operator: methodical, detail-oriented, and focused on getting things fixed rather than ...

continuity metrics, support the tracking of KRIs, and help identify trends or gaps requiring attention. Assist in preparing actionable reporting for senior stakeholders. 1–2 years’ experience in a risk, business continuity, or GRC-related role. Good understanding of business continuity and information security principles, with direct exposure … Studying towards, or holding, a relevant certification (e.g., CBCI, working towards MBCI, CRISC, or equivalent). Exposure to additional regulatory compliance frameworks (e.g., NIST, SOC 2, DORA). Experience working within a technology, fintech, or payments environment. Familiarity with GRC platforms or risk management and reporting tools. Experience ...

take a deeper dive into your experience and what you could bring to the team. This step will take around 75 mins. 3. Tech 2 Interview with our software consultants In this meeting your potential future teammate will take a deeper dive into your experience and what you could … agent marketplaces, context sharing across a team. LLM observability and tracing tooling (LangFuse, LangSmith, Arize, Braintrust or similar). Regulated‐environment delivery: HIPAA, GDPR, SOC 2, FCA/PRA, PII handling, data residency, guardrails and red‐teaming. Graph or taxonomy‐based knowledge representation alongside vector retrieval. Kafka/ ...

experience designing, running, and improving vendor security due diligence processes.* Strong knowledge of security assurance certifications and assessments maintained by vendors (e.g., ISO 27001, SOC 2, CSA STAR/CAIQ, vendor security questionnaires)* Deep understanding of and ability to articulate the risk associated with vendor risk posture ...

mentoring engineers and leading technical work Preferred Qualifications And Experience Experience applying FinOps to optimise cloud cost through automation Familiarity with ISO 27001, SOC 2 or GDPR control expectations Experience contributing to engineering standards or reusable patterns Klipboard is embracing AI at pace across our products and ways ...

construction documentation. Experience working with ISPs and managing circuit delivery (fiber, MPLS, broadband, LTE/5G). Experience with compliance frameworks (e.g., NIST, CMMC, SOC 2) and secure design practices. Relevant certifications (e.g., CCNP/CCIE, JNCIS/JNCIP, AWS/Azure Networking Specialty, CWNA). Experience supporting ...

representing engineering in external calls with auditors, pentesters, and security vendors; able to explain infrastructure decisions in security terms. Compliance: Familiarity with compliance standards (SOC 2, ISO 27001, etc.) and cloud security postures in AWS, Azure, or GCP. Salary & Benefits Competitive salary and equity grants Employer pension contributions ...

Experience with CI/CD tooling (GitHub Actions, GitLab CI or Jenkins) Desirable Experience with ArgoCD or Flux Prometheus, Grafana or Datadog Exposure to SOC 2 or ISO 27001 environments Previous team leadership or mentoring experience What's On Offer 28 days holiday plus bank holidays Pension with ...

with CI/CD tooling (GitHub Actions, GitLab CI or Jenkins) Desirable Experience with xehkeey ArgoCD or Flux Prometheus, Grafana or Datadog Exposure to SOC 2 or ISO 27001 environments Previous team leadership or mentoring experience What's On Offer 28 days holiday plus bank holidays Pension with ...

DAST) Strong understanding of OWASP Top 10, application security vulnerabilities and web security testing methodologies Understanding of secure coding practices for compliance requirements within SOC2, ISO, HIPAA, HITRUST, etc. Able to effectively give, receive, and respond to feedback Ability to educate company employees about security measures. What we can offer ...

control (ABAC), Role-based access control (RBAC). Build software-defined identity governance policies to ensure compliance with security policies, industry regulations (e.g., NIST, SOC2, ISO 27001), and organizational standards. Present technical information to teams and stakeholders, providing guidance and insight on identity management and best practices. Ideally ...

and enhance cloud environments to support trusted AI, ensuring performance, cost efficiency, and robust governance. Embed responsible AI, security, and compliance frameworks (GDPR, HIPAA, SOC2), including identity, access, encryption, and data protection.We INNOVATE with agent-driven solutions – Develop Proof of Concepts and MVPs that incorporate autonomous agents, advanced analytics, and ...

Windows Server and IIS Networking (switching, routing, firewalls, load balancing, WAN) x86 server hardware Infrastructure automation tools such as Terraform or PowerShell At least 2 years' experience as a technical escalation point for 1st/2nd line IT support teams. Experience with Azure, Cloudflare, Mimecast, or Zscaler … independently and as part of a team. Proven ability to deliver projects to agreed timescales and quality standards. Familiarity with ISO 27001, PCI DSS, SOC 2, or similar security frameworks. Driving license and access to a vehicle - travel to south of England data centre locations is required. What ...

access to a wide range of benefits including: Colleague discounts on our client flights and our client packages Hybrid working (were in the office 2 days per week) Many retail discounts on travel and leisure, health, and wellbeing, eating out, shopping and lifestyle Were working together to deliver … Support compliance with standards and regulations such as: ISO/IEC 27001. NIST Cybersecurity Framework. GDPR/UK GDPR. PCI DSS (where applicable). SOC 2 (where applicable) What you'll have: A strong interest and basic knowledge in cyber security, specifically related to Risk and Governance. Good ...

and third-party vendor systems to verify control effectiveness• Map internal control frameworks to industry standards and regulatory mandates (e.g., ISO 27001, NIST CSF, SOC 2, HIPAA, GDPR, PCI-DSS)• Act as the primary liaison between technical teams and external/internal auditors during annual cyber audits and ...

Intune environments Ensure infrastructure and applications align with appropriate security standards and best practice Work with frameworks and standards including Cyber Essentials, ISO 27001, SOC 2, GDPR and NCSC guidance Apply security principles across network infrastructure, applications and systems Monitor and improve system resilience, performance and operational integrity ...

teams build with cost in mind. Shape Sanity's longer‐term architecture for multi‐region scale, disaster recovery, data residency, and trust requirements like SOC 2, ISO 27001, PCI, HIPAA, or similar customer expectations. Hire, coach, and stretch infrastructure leaders and engineers. The team needs direction, high standards ...