176 to 200 of 332 SOC 2 Jobs in the UK

would be great if... You’ve worked in financial services, fintech, or another highly regulated environment. You’ve supported PCI DSS, ISO 27001, SOC 2 or NIST-aligned assurance, regulatory reviews, or internal and external audits. Not ticking every box? That’s totally okay! Studies show that women … your work-from-home setup. The application journey has 3 key steps Intro call with the recruiter 30 min call with the hiring manager 2 hours of technical and behavioural interviews This process should take around 4-5 weeks - your schedule is really important to us, so we promise ...

security compliance, risk management, internal audit or assurance. Working knowledge of at least one major framework, such as PCI DSS, ISO/IEC 27001, SOC 2 or NIST CSF, with the ability to apply requirements in practice. Experience reviewing policies, audit reports, control narratives and evidence, and translating … and optical insurance cover An exciting and flexible working environment surrounded by friendly and committed co-workers Electric Vehicle Scheme incentive Work from anywhere 2 weeks per year policy Reward, benefits and wellbeing hub (offering support, discounts, cashback and savings) Training and development opportunities Ad-hoc team events, incentives ...

Supply Chain/Vendor Risk Management practices and methodologies. Understanding of common risk and compliance frameworks(e.g. ISO 27001, NIST CSF, DORA, NIS2, SOC 2) and how they apply to third-party risk programmes. Strong understanding of the sales process from initiation to close. A proven track record ...

Drive Security & Compliance: Integrate security-by-design principles into our architecture, ensuring that our transaction-heavy environment meets strict financial compliance standards (PCI-DSS, SOC2). Influence & Mentor: Act as a force multiplier for the engineering organization by mentoring senior engineers, leading architecture review boards, and guiding major technical decisions. ...

outcomes in support of enterprise projects. You will be confident working across the major information security frameworks and standards, including ISO 27001, NIST and SOC 2, and able to shape risk, compliance and control decisions in a way that keeps both us and our clients secure without slowing ...

and operations teams across firms managing combined assets of over £70 billion. We are a Microsoft Agentic Launchpad cohort company alongside NVIDIA, ISO 27001, SOC 2 Type II and ISO 42001 certified, and selected for the FCA's AI Live Testing programme. About the role Forward Deployed Engineering ...

have requirements Experience working in fintech, payments or other regulated environments. Experience building internal developer platforms or self-serve infrastructure tooling. Experience supporting SOC2, ISO27001 or similar compliance initiatives. Background in SRE or platform engineering at scale (100+ engineers, 1000+ services). Experience designing connective layers or shared infrastructure ...

mission-critical enterprise platforms is required. Relevant exposure may include: Identity Governance & AdministrationPrivileged Access ManagementAccess certifications/User Access ReviewsCompliance initiatives (SOX, ISO, NIST, SOC 2)Zero Trust programsSecurity transformation effortsAdditional InformationWork PersonasWe approach our distributed world of work with flexibility and trust. Work personas (flexible, remote ...

and 'Analytics Leader’ Global impactwith a rapidly expanding footprint Analytics provider to the largest asset managers in the world Enterprise-grade security(ISO 27001 & SOC-2) Seamless integrationwith OMS, EMS, and collateral systems At Cassini, our client focus drives everything we do. You’ll work alongside experienced engineers, product ...

products and low-latency data stores (e.g. DynamoDB) Automated testing and validation frameworks for models and services Experience in regulated industries (e.g. PCI, HIPAA, SOC2), large companies, or mature engineering teams Optional familiarity with LLM tooling/RAG Why Join Us? Impact: Own high-profile ML-backed services that power ...

environment, the record is as important as the fix. Right to work in the UK. Desirable Experience supporting ISO 27001, Cyber Essentials, DSPT, DTAC, SOC 2 or comparable compliance frameworks. Scripting in PowerShell, Bash or Python. Working knowledge of DNS, DHCP, VPN and firewall fundamentals. Exposure ...

and secure identity patterns for internal/external systems. Assess and manage IAM attack surfaces and ensure compliance with industry standards and regulatory requirements (SOC 2).Collaboration & LeadershipCollaborate with engineering, UX, and business stakeholders using Agile methodologies. Mentor team members on IAM technologies and best practices. Produce clear ...

production Linux, networking and security fundamentals Calm under pressure, and clear notes after an incident Nice to have Cost optimisation ISO 27001 or SOC 2 audits What we offer Four-day focus weeks Fridays are for learning, side projects or rest. Same salary. Remote-first Work from anywhere … Europe, with a £1,000 home office budget. £2,000 learning budget Courses, books and conferences, plus time to use it. 30 days off Plus bank holidays, and the studio closes between Christmas and New Year. Profit share Ten per cent of annual profit, split across the team. Private ...

destination for millions of people planning their next move, reading the latest industry news, or just browsing what’s on the market. Location: London - 2 days per week Reports to: Head of Technology Risk and Assurance The role We are seeking a proactive and detail-oriented GRC Analyst … understand technical workflows and design compliance processes that enhance rather than disrupt team efficiency What You’ll Bring To The Role Demonstrable experience (typically 2–4 years) in a project management, GRC, or security-related role Familiarity with information security, privacy, or compliance-based projects Experience reporting to stakeholders ...

across cultures, functions, and geographies.* Familiarity with the development and maintenance of privacy information management systems, including frameworks based on **ISO/IEC 27701**, SOC 2, and relevant ISO audit and compliance programs.* CIPP/E, CIPP/M, or equivalent privacy certification.### Desirable Qualifications* Experience advising … regulators, or other relevant supervisory bodies.#LI-KK1**What’s in it For You?*** **Hybrid Work Model:** We’ve adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally ...

operational cadence, enablement, and forecasting discipline within a fast-growing technical sales organization. Regulatory Knowledge: Understanding of compliance frameworks such as PCI DSS, HIPAA, SOC 2, GDPR, or FedRAMP. Hyperscaler/Digital Native Background: Talent coming out of hyperscalers, digital natives, distributed systems environments, or startups is strongly … mission to help build a better Internet is protecting the free and open Internet. Project Galileo : Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already ...

Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) as we scale globally and across new offices. Minimum requirements for the role: 2-4 years of experience in the governance, risk, and compliance space Experience implementing or maintaining vendor‐risk programs Experience performing security and maturity assessments … and requirements into clear business risks and requirements to non technical stakeholders. An ideal candidate also has: Experience working with NIST Cybersecurity Framework profiles, SOC 2, ISO 27001, or similar frameworks Experience creating workflows through automation and AI assistance Experience working within common GRC and procurement platforms such ...

realities of a fast-moving engineering-led organisation. Desirable Experience supporting security assurance programmes for frameworks such as TISAX, ISO 21434, ISO 27001, SOC 2, or similar. Experience helping organisations evolve from periodic assurance towards continuous assurance. Familiarity with assurance techniques in cloud-native and software engineering environments. ...

development practices appropriate for handling sensitive compensation, payroll, and equity data including privacy, auditability, segregation of duties, and country-specific data protection requirements (GDPR, SOC 2, country-level payroll regulations). Partner with product, mobility tax, payroll, and equity subject-matter experts to translate complex regulatory and client ...

patch management, incident response, access reviews, and privileged access or zero-trust access delivery. Delivered against a security certification or audit (TISAX, ISO 27001, SOC 2 or equivalent) on the implementation and evidence side. Scripting or infrastructure-as-code ability, enough to set the standard and review your ...

realities of a fast-moving engineering-led organisation. Desirable Experience supporting security assurance programmes for frameworks such as TISAX, ISO 21434, ISO 27001, SOC 2, or similar. Experience helping organisations evolve from periodic assurance towards continuous assurance. Familiarity with assurance techniques in cloud-native and software engineering environments. ...

patch management, incident response, access reviews, and privileged access or zero-trust access delivery. Delivered against a security certification or audit (TISAX, ISO 27001, SOC 2 or equivalent) on the implementation and evidence side. Scripting or infrastructure-as-code ability, enough to set the standard and review your ...

data integrations. Proficient in SQL and familiar with data visualization tools such as Looker, Superset, PowerBI, or Tableau. Bonus: Familiarity with security frameworks (e.g., SOC 2, ISO 27001, NIST), and the concept of continuous control monitoring (CCM). Soft Skills: Analytical Mindset: Strong ability to interpret data, identify ...

communicate platform strategy clearly to both technical and non-technical audiences. Bonus Experience: Exposure to relevant compliance and governance frameworks, such as ISO 27001, SOC 2 or GDPR within a research or scientific environment. Personally, you Are comfortable working in a matrixed environment, balancing multiple stakeholders and contributing ...

postmortem afterward. You understand that reliability is built through good design, not just good monitoring. Awareness of security best practices and compliance requirements (SOC 2 or similar). Cost consciousness: not just making things work, but making them work economically at scale. You've rightsized compute, managed Spot ...