cloud infrastructure is properly secured, and that sufficient controls are in place to meet our compliance goals with respect to industry standards such as SOC 2. Role Responsibilities Write high-quality infrastructure-as-code that automates the provisioning, deployment, scaling, and monitoring of Pendo's infrastructure to ensure that More ❯
scalable, and secure environments. Automate workflows, build scripts, and operational tasks to improve efficiency and scalability. Ensure compliance with security standards and protocols (e.g., SOC2, ISO27001). Automate security processes, such as key management, vulnerability scanning, and incident response. Lead the response to security breaches or system failures, including incident More ❯
auth, billing, analytics and more. Work with security and compliance teams to ensure features meet data protection, privacy, and compliance requirements (e.g., GDPR, HIPAA, SOC2). Collaborate with UX/UI designers and product marketing to create intuitive experiences for managing users, groups, and access rights. Product More ❯
automate model management, training, and deployment processes. Knowledge of cloud infrastructure security practices, including data privacy, model security, and compliance standards like GDPR andSOC 2. Familiarity with AWS big data tools (Redshift, Glue, EMR) for processing large datasets to support machine learning models. Preferred Qualifications: AWS Certified Machine More ❯
Security Operations Oversee security operations to monitor, detect, and respond to potential threats in real-time. Lead the establishment of a Security Operations Center (SOC) for continuous monitoring and threat intelligence. Continuously evaluate and enhance security tools, technologies, and processes to stay ahead of evolving threats. Application and Cloud … monitor compliance. Manage security reviews during vendor onboarding and contract renewals. Governance, Risk, and Compliance Ensure compliance with relevant regulations (e.g., PCI DSS, GDPR, SOC2, ISO 27001) and internal policies. Maintain up-to-date knowledge of emerging threats, regulatory changes, and best practices. Establish and report key More ❯
London, England, United Kingdom Hybrid / WFH Options
Cure Talent
availability using load balancing, failover strategies, and automated scaling. Implement and maintain security best practices and compliance with industry standards (e.g., GDPR, ISO 27001, SOC2). Collaborate with developers, QA, and product teams to streamline deployments and provide mentorship on DevOps best practices. We’re seeking a More ❯
london, south east england, United Kingdom Hybrid / WFH Options
Cure Talent
availability using load balancing, failover strategies, and automated scaling. Implement and maintain security best practices and compliance with industry standards (e.g., GDPR, ISO 27001, SOC2). Collaborate with developers, QA, and product teams to streamline deployments and provide mentorship on DevOps best practices. We’re seeking a More ❯
Reigate, Surrey, United Kingdom Hybrid / WFH Options
Willis Towers Watson
integration Hands on Experience with IaaC utilising C# Experience in AWS A good grasp on cybersecurity standards and frameworks e.g. ISO27001, NIST, CIS, OWASP, SOC2 AZ500 Certification More ❯
skillsto interpret data and provideinsights into threatsfacing the bank. Awareness of common Cyber Incidents and Security breaches(OWASP). Desirable Knowledge or experience in SOC2, ISO 27K, PCI DSS and GDPR. Previous experience working withinan organisations Cyber Incident Responsefunction. Hands on experience with Information Securitytools. Please contact me if you More ❯
skillsto interpret data and provideinsights into threatsfacing the bank. Awareness of common Cyber Incidents and Security breaches(OWASP). Desirable Knowledge or experience in SOC2, ISO 27K, PCI DSS and GDPR. Previous experience working withinan organisations Cyber Incident Responsefunction. Hands on experience with Information Securitytools. Please contact me if you More ❯
to-date and effective. ️ Is This You? CISSP, CISA, or CISM certification is strongly recommended, but not required. ISO 27001/27701/42001, SOC-2, PCI DSS, and GDPR knowledge, experience, and qualifications are highly desirable. At least 5 years of relevant industry experience in information security, with More ❯
variety of customers. You should have an excellent understanding of ISO27001 with knowledge on other Information Security standards and frameworks being advantageous, such as SOC2 or PCI DSS. You should apply if you enjoy working in a fast-paced, innovative business with an exciting brand that has More ❯
preferably with a focus on acquisition integration. Strong knowledge of regulatory compliance requirements, risk management frameworks, including ISO 27001, NIST. Experience with SOC1/2, GDPR, and privacy frameworks. Proficiency in information security tools, techniques, and controls. Experience with metrics and KPIs to measure and track information security risk. More ❯
with customers' RFIs and RFPs; Obtain at least CII certification to appreciate how the insurance industry works. Knowledge and Experience: Essential: A minimum of 2 years in an infrastructure, SysOps or Security role; Active Directory management; NTFS permission & Group Policy configuration & management; Microsoft RDS Architecture (RemoteApp/RDWeb Gateway … Information Security specialism. Desirable: IaaS and PaaS environments; SQL; VMWare Cloud Director; SharePoint; Windows IIS security & management; Security & GDPR compliance (ISO27001/ISO27032/SOC2); AWS ecosystem, especially AppStream 2.0. More ❯
costs associated with infrastructure and services, ensuring alignment with budgetary goals. Compliance & Audits Compliance : Manage and contribute to recurring annual compliance activities, including ISO27001 andSOC2 audits, in collaboration with the respective audit teams and third-party advisors. Security : Ensure security best practice including identifying potential threats and vulnerabilities, designing … incident response. Skills in system monitoring, performance tuning, and troubleshooting infrastructure and micro-service-based architectures. Understanding of compliance frameworks like ISO 27001 andSOC2, and experience in managing audits and compliance activities. Familiarity with incident response processes and tools, ensuring timely resolution of issues. Benefits: Competitive More ❯
City, Aberdeen, United Kingdom Hybrid / WFH Options
Baker Hughes Gruppe
guidelines and regulatory/compliance requirements related to information security and cloud computing such as ISO 27001, NIST 800-53, IEC/ISA 62443, SOC2, PCI, SOX, etc. Have hands-on experience on IT M&A/IT Compliance/drafting, modifying, reviewing, or managing technical Transition Service Agreements - advantageous. More ❯
of data flows, services, and integration components. Security, Risk & Compliance Embed security, privacy, and audit controls into every solution design, ensuring readiness for GDPR, SOC2, and ISAE 3402 requirements. Work closely with InfoSec, Compliance, and Risk functions to identify and mitigate architectural risks. Skills, knowledge, expertise: Strong More ❯
Terraform, CloudFormation, etc.). Experience with container security (Docker, Kubernetes, etc.). Familiarity with security frameworks and standards (e.g., CIS benchmarks, NIST 800-53, SOC2). Relevant certifications are a plus (e.g., AWS Security Specialty, CCSP, CISSP). What we offer Play a key role in shaping More ❯
business service, systemand data architectures Experience of i nformation security audit and assurance Familiarity with formal information security frameworks and certifications such as SOC2 , ISO27001 , CE, CIS top 20, OWASP Experience with contract review of information security schedules and terms Excellent verbal, written and interpersonal communication More ❯
with engineering teams to help architect and implement solutions that are secure by design Apply cloud security best practices based on major frameworks like SOC2, WA-Framework Example of the work you will be doing: Conduct and review internal automated security testing results Manage security aspects of GitLab CI/ More ❯
Success (BPO industry), including supporting industries like Banking, Financial, Healthcare/Insurance, Retail, among others. Strong understanding of security frameworks and regulatory requirements (e.g., SOC2, GDPR, ISO 27001, PCI-DSS). Exceptional project management and audit oversight skills. Excellent communication and leadership abilities, with a collaborative andMore ❯
as-code practices (Terraform preferred). An ideal candidate also has: Experience managing application security within a regulated or compliance-heavy environment (e.g., FedRAMP, SOC2). Familiarity with Tines, AWS Lambda, or similar automation tools for orchestrating security workflows. Contributions to open source security tooling or thought More ❯
as-code practices (Terraform preferred). An ideal candidate also has: Experience managing application security within a regulated or compliance-heavy environment (e.g., FedRAMP, SOC2). Familiarity with Tines, AWS Lambda, or similar automation tools for orchestrating security workflows. Contributions to open source security tooling or thought More ❯
protection, DLP, SIEM). Hands-on expertise with troubleshooting hardware, software, and SaaS issues. Security Knowledge: Familiarity with security frameworks and standards such as SOC2, ISO 27001, GDPR, or NIST. Experience with incident response and risk management. Knowledge of Zero Trust architectures and security-first IT practices. More ❯