151 to 175 of 332 SOC 2 Jobs in the UK

trusted with real responsibility early, including independently handling live production issues. IO’s product is trust: we help businesses achieve ISO 27001, SOC 2, GDPR and other certifications. That means our own infrastructure must model the standards we sell — security and availability come before speed or convenience, always. ...

vendor risk. Strong experience designing, managing and improving vendor security due diligence processes. Knowledge of vendor security assessments (ideally CSA STAR/CAIQ, SOC 2, and ISO 27001) Experience working within a regulated industry and understanding relevant regulatory requirements. Strong understanding of third-party cyber risk and ...

vendor risk. * Strong experience designing, managing and improving vendor security due diligence processes. * Knowledge of vendor security assessments (ideally CSA STAR/CAIQ, SOC 2, and ISO 27001) * Experience working within a regulated industry and understanding relevant regulatory requirements. * Strong understanding of third-party cyber risk and ...

adoption metrics, not just a set of shared services. Security and Compliance: Ensure our cloud environments remain secure and compliant with standards such as SOC2 and ISO-27001. What you’ll bring Infrastructure Leadership: Proven experience leading teams in the infrastructure and SRE domains, with a track record of scaling ...

deployment automation, and share your knowledge with the team. Maintaining Compliance: contribute to ensuring our platform adheres to relevant industry standards such as ISO27001, SOC2, and PCI‐DSS. Collaborating and Learning: work closely with cross‐functional teams, share your expertise, and contribute to our vibrant learning culture. Aiming for Greatness ...

and trust center platforms (e.g., Loopio, Responsive, SafeBase) and GRC tools (e.g., Drata, Vanta).Ability to read and interpret security documentation, penetration test reports, SOC 2 audit reports, and architecture diagrams. Comfort with process automation concepts—scripting, workflow builders, or no-code/low-code tools to reduce ...

important as the fix. Right to work in the UK. Desirable Direct experience of ISO 27001, Cyber Essentials Plus, DSPT, DTAC or SOC 2 audits as an implementer rather than an observer. Infrastructure as code, ideally Terraform. Jira administration and automation. Backup, DR or business continuity ownership ...

Advantageous but not essential: Experience with Windows systems and .NET applications Experience with serverless architectures Experience with defining advanced cloud networking setups Familiarity with SOC2, ISO 27001, or other compliance frameworks Compensation for this role is a combination of salary and stock options. The anticipated base salary range ...

Party Assurance (TPA) practice within Digital and Risk Advisory Services. You will oversee complex TPA engagements, advise on ISAE 3000/3402/3410, SOC 1/SOC 2, and ESG assurance, and act as primary client contact across multiple sectors. You will guide project delivery, risk ...

with customers’ RFIs and RFPs; Obtain at least CII certification to appreciate how the insurance industry works. Knowledge and Experience: Essential: A minimum of 2 years in an infrastructure, SysOps or Security role; Active Directory management; NTFS permission & Group Policy configuration & management; Microsoft RDS Architecture (RemoteApp/RDWeb Gateway … Information Security specialism. Desirable: IaaS and PaaS environments; SQL; VMWare Cloud Director; SharePoint; Windows IIS security & management; Security & GDPR compliance (ISO27001/ISO27032/SOC 2); AWS ecosystem, especially AppStream 2.0. #J-18808-Ljbffr ...

that protect the company without slowing it down. Establish an automated patching system for systems across every part of our cloud. GRC - 20% Own SOC 2. Run the yearly Type II audit, scope the annual web application pentest, and automate as much of the evidence collection in Drata … threat modelling web applications and responding to real security incidents. Experience using AI agents, in your own workflow or in security tooling. Understanding of SOC 2 and comfort with Git. Working knowledge of Jamf. Solid scripting ability in Python or Bash, enough to automate a repetitive task and ...

Take part in on-call and incident response for the services you own Work with Security and GRC so services meet requirements such as SOC 2 and ISO 27001 Partner with Product to scope work, review code, write thorough tests and help raise the technical bar Success … takes direct feedback well Benefits Flexible vacation policy Private Healthcare Employee stock ownership (ESOP) Flexible working and autonomy Pay it forward days - we offer 2 annual pay it forward days where you can take time to volunteer for a charitable cause that is important to you. Wellness days ...

role distinct from product engineering Open-source contributions or public portfolio demonstrating data engineering or AI/agentic work Experience with security compliance frameworks (SOC 2) for AI systems #J-18808-Ljbffr ...

promptly, and help investigate and document security events (suspicious logins, compromised credentials, device loss, cloud misconfiguration). Support compliance evidence collection in Vanta for SOC 2, ISO 27001 and ISO 42001, working alongside the Head of Security & Trust rather than owning audit strategy yourself. Help gather evidence ...

equivalent or higher. Computer Science or Engineering related education preferred. Experience with Identity & Access Management tools. Familiar with IT Governance and Compliance functions, including SOC2 and Data Governance. An understanding of Non Human Identities (NHIs) and the unique challenges within an information security setting. Attention to details and analytical skills. ...

eager to learn Desirable experience: Experience in data protection, with a good understanding of relevant data protection legislation (e.g., UK GDPR). ISO 27001, SOC 2, NIST CSF, CAF, HIPAA, DSPT Gap analysis, auditing, or penetration testing Process and procedure development Software or AI development/testing Client ...

Development Lifecycle (SDL), OWASP Software Assurance Maturity Model (SAMM), or Building Security in Maturity Model (BSIMM). Familiar with compliance regulations like; ISO, GDPR, SOC2, SOX MS in Cyber Security, Information Security, MIS or equivalent Industry security certifications such as CISSP or others Experience in Application penetration testing, CTF competitions ...

etc.). Industry‐recognised certifications such as CISSP, CCSP, CISM, GIAC, etc. Familiarity with compliance frameworks – GDPR, NIST AI RMF, ISO27001, SOC2, etc. Ability to build organisational culture, drive employee engagement, strengthen inclusion and diversity, reduce attrition, and attract top talent. Growth mindset, market focus, and ability to collaborate effectively ...

JFrog, Chainguard) What you bring to the table 7–10 years of experience in IT infrastructure, systems administration, or HPC support, with at least 2–3 years in a lead or senior technical role. Demonstrable hands-on experience managing HPC infrastructure including cluster administration, job schedulers, and performance tuning …/GPU workloads. Experience with compliance frameworks (e.g. SOC 2, ISO 27001) and able to translate control requirements into actual technical implementation (access reviews, logging, encryption, change management), not just pass an audit checklist. Strong Linux administration skills, plus comfort supporting a mixed Linux/macOS/Windows ...

similar). Experience with IaC (Terraform or similar) and CI/CD pipelines. Nice to have Experience operating security or compliance-sensitive infrastructure (SOC 2/ISO 27001 environments) Competitive salary plus meaningful early equity, full health coverage, a $2,000/yr learning budget, and your ...

processes, and build the foundations required to support a high-growth, security-conscious organisation operating under frameworks such as ISO-27001, Cyber Essentials and SOC-2 (with ongoing expansion of controls). What you’ll do: Support and operate Valarian’s IT environment, including device management, identity systems, and … scalable organisation Partner closely with the TechOps Lead to align IT operations with security strategy, contributing to and supporting compliance initiatives (CE/CE+, SOC 2, and future frameworks) Support the expansion and maturity of IT controls that underpin broader security and compliance programs Support and optimise endpoint ...

that breaks the segmentation model Feed findings back into prevention by working with IT and engineering to close root causes Requirements Background in IT, SOC operations or other hands-on technical work Solid grasp of cloud infrastructure, ideally AWS Strong networking knowledge: can read a PCAP, spot beaconing … tested); SOAR or custom response automation; defending data centre or colocation environments (OOB networks, BMC/IPMI, physical access telemetry); handling ISO 27001 or SOC 2 audits; FortiGate logging and NetFlow/sFlow analysis; DFIR certifications (GCIH, GCFA, GCIA); energy, fintech, trading or other high-value-target experience ...

escalation playbooksDriving the transition of advanced detection capability into Cyber Security ownershipWhat we're looking forProven experience in detection engineering, threat hunting, or advanced SOC rolesDeep understanding of modern attacker tradecraft and intrusion techniques across the attack lifecycleHands-on experience buidling detection logic in modern SIEM platforms (e.g Sentinel … build detection pipelines and automationWillingness to challenge bad detections, weak assumptions, and vanity metricsPragmatic mindset: precision and impact beat coverage theatreExperience operating beyond traditional SOC or MSSP modelsHands-on cloud detection experience (identity, control plane, SaaS)Familiarity with threat intelligence platforms and frameworks such as PCI DSS, NIST ...

team in adapting to new auditing standards and digital transformation initiatives. Audit and Attestations: Own the planning and execution of attestation programs (e.g. SOC 2, ISAE 3000). Maintain a library control narrative, process flows, and risk/control matrices. Prepare and deliver responses to findings. … BRING: Proven track record in audit, attestation, or risk assurance in a Big 4, consulting or financial services environment. Solid understanding of DORA, SOC, ISAE3402/3000 and IT Risk control frameworks. Experience in assessing technology, data, or market infrastructure environments. Excellent documentation skills (process maps, RCMs, audit reports ...

would be great if... You’ve worked in financial services, fintech, or another highly regulated environment. You’ve supported PCI DSS, ISO 27001, SOC 2 or NIST-aligned assurance, regulatory reviews, or internal and external audits. Not ticking every box? That’s totally okay! Studies show that women … your work-from-home setup. The application journey has 3 key steps Intro call with the recruiter 30 min call with the hiring manager 2 hours of technical and behavioural interviews This process should take around 4-5 weeks - your schedule is really important to us, so we promise ...