as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CISA (Certified Information Systems Auditor) are highly desirable. Strong knowledge of security frameworks (e.g., ISO 27001, COBIT), security technologies, tools, and best practices across EU, UK, and USA Proficiency in risk management processes, vulnerability assessments, and incident response strategies. Current technical and hands-on experience with security More ❯
record of delivering digital transformation programmes and managing remote IT operations In-depth knowledge of IT infrastructure, cloud platforms, cybersecurity, and enterprise architecture Experience with governance frameworks (e.g., ITIL, COBIT) and relevant certifications such as CISM, CISSP, TOGAF, Agile, or PRINCE2 Excellent leadership, strategic thinking, and communication skills Disclosure and Barring Service Check This post is subject to the Rehabilitation More ❯
Act) and industry-specific regulations Experience implementing compliance andcontrol frameworks Proficiency in IT governance and quality standards Knowledge of security management frameworks like ISO/IEC 27001, ITIL, COBIT, NIST standards Strong stakeholder management skills High integrity and professionalism in handling confidential matters Familiarity with risk management tools like OneTrust or similar is preferred Benefits: At Sword, we value More ❯
data models and reporting frameworks. Ensure alignment of analytics and reporting outputs with enterprise risk management andcontrol frameworks. Strong knowledge of risk management frameworks (e.g., NIST, ISO 27001, COBIT) andcontrol environments. Deep understanding of IT general controls, cyber security principles, andtechnology risk domains. Proven experience in risk analytics, data visualization, and reporting (e.g., using Power BI, Tableau More ❯
Staines-upon-Thames, Middlesex, England, United Kingdom
Bupa UK
of third party assurance activities, either for supplier or customer assurance. Extensive knowledge of IT risk management within GRC function, preferably processes, concepts, terminology andcontrol frameworks e.g. ISACA, COBIT, ITIL. Certified in CISA or relevant certifications with one of the following: CISM, CISSP, equivalent experience. Strong knowledge of relevant laws, regulations, and industry standards e.g. UK GDPR, ISO More ❯
background or large multinational experience . Experienced in audit (external and internal) and familiar with Internal Audit standards. Technology Risk/Technology Audit/Technology Controls Certifications: CISA, ITIL, COBIT (CISSP, CISM, CRISC, Prince2 ISO27001 desirable) Able to make a high impact on management, to manage stakeholders and to communicate clearly. Display a passion for working in teams and help … drive personal development. IT process knowledge e.g. as defined in standards like ITIL, Cobit, ISO, or British Standards Possess IT knowledge on IT networks, operating systems, databases, and applications, ideally including the Microsoft stack, Cloud technologies and SAP. Well-versed in assessing business andtechnology risks and controls, be able to articulate the risks, and recommend business-focused solutions. Able More ❯
background or large multinational experience . Experienced in audit (external and internal) and familiar with Internal Audit standards. Technology Risk/Technology Audit/Technology Controls Certifications: CISA, ITIL, COBIT (CISSP, CISM, CRISC, Prince2 ISO27001 desirable) Able to make a high impact on management, to manage stakeholders and to communicate clearly. Display a passion for working in teams and help … drive personal development. IT process knowledge e.g. as defined in standards like ITIL, Cobit, ISO, or British Standards Possess IT knowledge on IT networks, operating systems, databases, and applications, ideally including the Microsoft stack, Cloud technologies and SAP. Well-versed in assessing business andtechnology risks and controls, be able to articulate the risks, and recommend business-focused solutions. Able More ❯
Reading, Berkshire, United Kingdom Hybrid / WFH Options
Deloitte LLP
one end to end programme process including the use of ServiceNow Integrated Risk Management module to support integrated IT risk Management processes. An understanding of the principals around CMMI, COBIT, ITIL, PMI, Prince2, ISO27001, SOC2. Cybersecurity or IT Risk Management experience which should include either control testing or compliance assessment experience. A strong understanding of system development life cycles approaches More ❯
Manchester, Lancashire, United Kingdom Hybrid / WFH Options
Deloitte LLP
one end to end programme process including the use of ServiceNow Integrated Risk Management module to support integrated IT risk Management processes. An understanding of the principals around CMMI, COBIT, ITIL, PMI, Prince2, ISO27001, SOC2. Cybersecurity or IT Risk Management experience which should include either control testing or compliance assessment experience. A strong understanding of system development life cycles approaches More ❯
Leeds, Yorkshire, United Kingdom Hybrid / WFH Options
Deloitte LLP
one end to end programme process including the use of ServiceNow Integrated Risk Management module to support integrated IT risk Management processes. An understanding of the principals around CMMI, COBIT, ITIL, PMI, Prince2, ISO27001, SOC2. Cybersecurity or IT Risk Management experience which should include either control testing or compliance assessment experience. A strong understanding of system development life cycles approaches More ❯
Guildford, Surrey, United Kingdom Hybrid / WFH Options
Deloitte LLP
one end to end programme process including the use of ServiceNow Integrated Risk Management module to support integrated IT risk Management processes. An understanding of the principals around CMMI, COBIT, ITIL, PMI, Prince2, ISO27001, SOC2. Cybersecurity or IT Risk Management experience which should include either control testing or compliance assessment experience. A strong understanding of system development life cycles approaches More ❯
Client stakeholders. Review the outcomes of the transition projects to capture learnings & disseminate across organization Technical Skills – Basic Knowledge on security models such as ITIL, ISO27002, PCI DSS andCobit 5 Experience on Security tools & Technologies Integration of testing mechanisms with industry best practices such as OWASP & NIST Good Understanding of IT security policy, procedure, design, and implementation. Behavioral Skills More ❯
background or large multinational experience . Experienced in audit (external and internal) and familiar with Internal Audit standards. Technology Risk/Technology Audit/Technology Controls Certifications: CISA, ITIL, COBIT (CISSP, CISM, CRISC, Prince2 ISO27001 desirable) Able to make a high impact on management, to manage stakeholders and to communicate clearly. Display a passion for working in teams and help … drive personal development. IT process knowledge e.g. as defined in standards like ITIL, Cobit, ISO, or British Standards Possess IT knowledge on IT networks, operating systems, databases, and applications, ideally including the Microsoft stack, Cloud technologies and SAP. Well-versed in assessing business andtechnology risks and controls, be able to articulate the risks, and recommend business-focused solutions. Able More ❯
Deep understanding of UK/EU regulatory drivers (e.g., FCA/PRA Operational Resilience Policy, DORA, SYSC 8, PS 21/3, CP4/24) and relevant industry frameworks (COBIT, ITIL, ISO 27001/22301, NIST CSF). Strong analytical skills with the ability to translate complex technical issues into clear, business-focused recommendations. Possession of strong team working andMore ❯
Manchester, North West, United Kingdom Hybrid / WFH Options
Experis
Lead the design and implementation of security management processes for a new service offering. Develop and maintain a unified ISMS aligned with ISO/IEC 27001, NIST, PRISMA, andCoBIT frameworks. Conduct gap analyses and risk assessments to ensure compliance with relevant security standards and regulatory requirements. Collaborate with stakeholders across technical and business teams to embed security best practices … are in place and effective. Essential Skills & Experience: Proven experience in information assurance, cyber security, or risk management roles. Strong knowledge and practical experience with ISO27001, NIST, PRISMA, andCoBIT frameworks. Demonstrated ability to design and implement ISMS in complex, multi-stakeholder environments. Excellent communication and stakeholder engagement skills. Relevant certifications such as CISSP, CISM, ISO27001 Lead Implementer/Auditor More ❯
Newcastle Upon Tyne, Tyne And Wear, United Kingdom
DXC Technology Inc
Job Title: Security Architect Location: NEWCASTLE Salary: Competitive Security Clearance: MOD SC (willing and able to obtain DV) About DXC Technology DXC Technology is a global IT services leader, providing cutting-edge technology solutions to modernize and secure IT infrastructure. More ❯
demonstrating compliance against internal security requirements and external commitments including certification and regulatory requirements. Provide subject matter expertise in the application of established standards including NIST, PCI-DSS, GDPR, COBIT, ISO 27001 and Cyber Essential compliance to any new or existing programme of work. Prepare and support internal and/or external compliance audit activities. Manage remediation of any audit … Maintain up-to-date knowledge of legal & regulatory requirements impacting Technologyand Operations and its Partners. Apply comprehensive knowledge of legal, regulatory obligations, and industry best practices (e.g., NIST, COBIT, ISO27001, PAS 555) to ensure compliance with technology standards. Schedule and review risk and compliance audits; direct issues to appropriate resources for investigation and resolution. Our people make us who … deliver for our customers. LI-KS1 Possess one of the Risk or security certifications (CISSP, CRISC, CISM). Have good knowledge and practical experience of NIST, PCI-DSS, GDPR, COBIT, ISO 27001, or Cyber Essentials. Previous experience in a similar role, with the ability to work in a dynamic and changing environment. Excellent team player who can influence, help, andMore ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Lorien
Data platform and Business Intelligence (BI) skills Good technical, infrastructure and security architecture skills including good understanding and awareness of IT service management (e.g. ITIL) and IT governance (e.g. CoBIT) frameworks Good technical skills and awareness of web/digital technologies and the business advantages of varying technologyand operational approaches to managing web based sales and communications channels Strong More ❯
issue management-related processes and services. Experience in Risk Management aligned to certification requirements (ISO27001, ISO31000 or similar) required Knowledge of relevant security/governance frameworks (NIST CSF, ISO27001, CobiT, ) required Experience in service build up a plus Security Governance/Risk Management certification (CISSP, CGEIT, CISM, CRISC ) is a plus Qualified individuals with a disability may request a reasonable More ❯
risk and controls processes. Good understanding of the retail industry and its needs towards technology risks and controls. Strong understanding with various control frameworks and regulatory requirements, such as COBIT, NIST-CSF, Sarbanes-Oxley (SOX), Privacy (CCPA, GDPR, etc.), and other leading practice frameworks. An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in More ❯
/or existing IT General Controls from across access, change, and operations domains drawing on experience to do so independently and/or with minimal support. Working knowledge of COBIT/ITIL Frameworks Comfortable performing IT Risk Assessments across a variety of IT domains. Strong analytical and problem-solving skills, being able to decipher sometimes complex information, analyse and report More ❯
SK10, Butley Town, Cheshire East, Cheshire, United Kingdom
Royal London
Identity and Access Management functions and experience designing and deploying IGA solutions at the enterprise level. Demonstrated successful implementation of security control frameworks and standards such as ISO 27001, COBIT, ITIL, NIST. Certification in Information Security relevant areas such as CISSP, SANS and/or equivalent business experience in a matrix Organisation. High level of personal integrity with the ability More ❯
delivery. Carry out additional duties in line with the scope, responsibility, and grade of the role as required Knowledge Degree-level qualification or equivalent professional certification (e.g., ITIL, TOGAF, COBIT, PRINCE2). Proficiency with Microsoft Power Platform, especially Power Automate. Experience with Intelligent Automation tools such as CoPilot or Blue Prism. Skilled in developing Power Apps (Canvas Apps, Model-Driven More ❯
St. Albans, Hertfordshire, South East, United Kingdom Hybrid / WFH Options
Premier Foods
preferred. Demonstrable strong leadership and communication skills. Strong strategic thinking and problem-solving ability. TOGAF Certified, AWS/Azure Solution Architect, Certified Information Systems Security Professional (CISSP), ITIL or COBIT certification (preferred). Apply today and become a key contributor to our ambitious growth and transformation journey. More ❯
/or existing IT General Controls from across access, change, and operations domains, drawing on experience to do so independently and/or with minimal support. Working knowledge of COBIT/ITIL Frameworks Comfortable performing IT Risk Assessments across a variety of IT domains. Strong analytical and problem-solving skills, being able to decipher complex information, analyse and report on More ❯