151 to 175 of 604 ISO/IEC 27001 Jobs in the UK excluding London

Posted on: 10 / 09 / 2026 – Application Deadline: 24 / 09 / 2026 Are you ready to chart your own career path? With our refreshed strategy, we’re building on our rich heritage and transforming our business to be more scalable and efficient, unlocking … Ensure effective security operations, vulnerability management, identity and access management, threat detection and incident response capabilities. Maintain alignment with recognised security frameworks including ISO 27001 and NIST. Maintain strong cyber resilience against evolving security threats. Lead executive response to significant cyber incidents. Provide Board- and Executive ...

remediation processes. Use testing outcomes, lessons learned and emerging threats to improve security controls and testing methodologies. Essential Experience Significant experience in penetration testing / offensive security, with the ability to lead complex testing engagements. Strong hands-on understanding of penetration testing across applications, infrastructure and technology environments. Proven … understanding of security risk assessment, vulnerability prioritisation and risk acceptance. Knowledge of recognised penetration testing methodologies and security frameworks. Desirable Experience Relevant penetration testing / offensive security certifications such as CREST, OSCP, OSWE, GPEN or equivalent. Experience operating within large, complex or highly regulated organisations. Experience across cloud environments ...

adding friction to their day. Technical Compliance and Assurance - Own the technical controls behind our certifications and assurance activity, including Cyber Essentials Plus, ISO 27001, evidence gathering, and remediation. Technical Risk Assessment - Lead technical security risk assessment across projects, suppliers, and internal services, identify where … data protection, email security, cloud security posture, and system hardening. Frameworks and standards. Applying security frameworks, standards, and regulatory drivers such as NIST, ISO 27001, GDPR, and NIS2 through practical technical controls. Cyber Essentials Plus. Technical control implementation, evidence collection, remediation tracking, and preparation for assessment. ...

Title: Cyber Security Governance & Assurance Specialist - ESN Req ID: 62449 Job Function: Cyber Security Posting Start Date: 04 / 09 / 2026 Posting End Date: 15 / 09 / 2026 Division: UK Business Job Location: GBR Bristol - Assembly, GBR-Birmingham-Three Snowhill, GBR-London-BTHQ … Contract. Deliver and verify the implementation of end to end security services as defined within specified the ESN contracts. Deliver and implement ISO27001 compliant security strategies, policies, procedures, processes, threat identification & responses that provide wrap-around security services and solutions for the ESN service. Deliver the required Security accreditation ...

security and privacy assessments, including Data Protection Impact Assessments (DPIAs) and associated reviews. Support the ongoing maintenance and development of the firm's ISO 27001 management system, as well as future ISO 42001 requirements. Contribute to information governance initiatives, including data classification and records … developing or supporting policies, procedures and governance frameworks. Strong stakeholder management and communication skills. Excellent analytical and problem-solving abilities. Relevant information security and / or data protection certifications would be beneficial. Degree-level education would be advantageous. What You'll Bring You will be someone who is: Professional ...

Advanced KQL skills, with the ability to develop and optimise complex detections and threat hunting queries. Strong scripting and automation experience using PowerShell and / or Python, including API integrations and workflow automation. Experience administering Microsoft Entra ID, Conditional Access, Intune and Microsoft 365 security solutions. Good understanding … meet strict deadlines. Excellent written and verbal communication skills. Candidates must be able to pass security vetting (BS7858). Salary: £60,000 | Location: Reading / hybrid 2 days from home ...

actively participating in training, protecting data and systems, actively identifying and mitigating vulnerabilities, and promptly reporting any suspicious activity or potential security incidents. Education / Experience Qualifications: Bachelor's Degree with 8 or more years of related experience is preferred. An equivalent combination of education and / … organization. Experience building an IT Third-Party Risk function within a global organization. Industry recognized certifications such as the CRISC, CISA, CISSP, CISM, and / or CGEIT are preferred. Experience in the use and administrative setup of GRC software platforms (e.g., Vanta, ServiceNow GRC). Physical Requirements: Professional office ...

role offers real social impact and the opportunity to shape how our platform is built. Key Responsibilities Manage our Azure cloud estate and CI / CD pipeline. Provision and manage cloud and server infrastructure programmatically. Support desktop clients with Windows, database, and application hosting expertise. Enforce security, coordinate penetration … Skills & Experience Practical, hands-on exposure to Azure cloud services (App Service, Azure SQL, Service Bus, Entra) or similar PaaS. Working understanding of CI / CD pipelines and containerisation. Strong Windows Desktop and Server administration (setup, maintenance, troubleshooting). Awareness of UK data protection and security compliance frameworks (GDPR ...

safeguard the current and future technology estate, respond to security incidents, drive continuous improvements in security services and standards, and ensure compliance with ISO and Cyber Essentials Plus. Working closely with the CISO, you'll provide valuable security insights, metrics, and reporting that shape the security strategy, helping … protection controls, including Data Loss Prevention (DLP) , Sensitivity Labels , and encryption . Manage security awareness training and phishing simulation programmes. Support and maintain ISO 27001 , Cyber Essentials , and Cyber Essentials Plus certifications. Produce security metrics , dashboards , and security reports to inform security strategy . Lead ...

trusted with real responsibility early, including independently handling live production issues. IO’s product is trust: we help businesses achieve ISO 27001, SOC 2, GDPR and other certifications. That means our own infrastructure must model the standards we sell — security and availability come before speed … techniques and their implementation Experience of AI hosting Certification in AWS or Kubernetes Familiarity with ISO 27001 or other security / compliance standards Experience with Ruby on Rails Experience in a regulated or compliance-driven environment Why you’ll love it here A fast-growing ...

Centre (ISAC). Advisory: Advise the Board and Senior Leadership Team on security implications of new contracts, office moves, or changes in company ownership / structure. Integrated Security Support Collaborate with the IT Manager (responsible for ISO 27001 / Cyber Essentials Plus) to ensure … Security "List X" environment. Regulatory Knowledge: Deep understanding of the Security Policy Framework (SPF), Cabinet Office security controls, and List X requirements (specifically FSA / iv). Vetting: Active eDV clearance Detail Oriented: Meticulous record-keeping skills for musters, visitor logs, and classified document registers. Desirable: DISA / ...

policies, NAT, and high-availability configurationsDeploy and support FortiADC load balancers, including application delivery, traffic distribution, and high-availability designsConfigure and manage Dell L2 / L3 switching environments, including VLANs, trunking, and inter-VLAN routingDesign and maintain core routing architecture using protocols such as OSPFProvide secure VPN access into … carrier handoffsEnsure resilient and redundant network designs aligned to production requirementsFortinet Firewalls (FortiGate)FortiADC (load balancing and application delivery)Dell networking (Layer 2 / Layer 3 switching platforms)Routing (OSPF)VLAN design and network segmentationLayer 2 / Layer 3 switchingWhat You Bring to the Role:Education:Bachelor ...

multiple stakeholders Familiarity with CRM systems such as Salesforce or equivalent sales and quoting tools Strong domain knowledge across cybersecurity services Understanding of OT / IT security, Continuous Assurance, Continuous Threat Exposure Management, Digital Identity and Access Management, and complex managed services Familiarity with GDPR, HIPAA and ISO … Senior Stakeholders Mentoring Account Teams Coaching Sales Teams Certifications & Qualifications GDPR Familiarity HIPAA Familiarity ISO 27001 Familiarity Industry Keywords OT / IT Security Continuous Assurance Continuous Threat Exposure Management Digital Identity and Access Management Managed Services Tools & Technologies Salesforce CRM Systems #J-18808-Ljbffr ...

benefits. Application Details Location: Based at client locations, working remotely, or based in our Godalming or Milton Keynes offices. Start Date: ASAP. Reference: PR / 010824_1774544720. Posted 26 March '26. Enquiries: enquiries@triad.co.uk 01908 278450 Salary £75k, plus excellent company benefits. About Us Triad Group … 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure / NCSC CAF, HMG Security Policy Framework. Knowledge of cloud security principles across platforms such as AWS, Azure, or GCP Experience with identity and access management ...

with clear communication, supporting both operational delivery and the continual improvement of NICE's cyber security posture.What the candidate will be expected to do / bring:o Act as a hands on cyber security specialist, investigating security alerts, responding to incidents and supporting day to day operational cyber resilienceo … escalation point for complex security issues, contributing expert analysis and practical solutions o Support compliance with recognised security standards and frameworks (e.g. Cyber Essentials, ISO27001), maintaining clear and auditable records o Communicate complex technical risks and findings clearly to both technical and non technical stakeholders About us The Infrastructure, Cyber ...

role where you can keep your feet firmly on the Microsoft stack, without getting pulled into round-the-clock SOC shifts or systems build / configuration? This could be exactly the move you're after. We're working with a fast-paced financial services group, currently evolving through … doing Monitoring and auditing security across the Microsoft stack (Defender, Purview) to spot, flag and escalate risks - this is a second-line, monitoring / audit role rather than a build or configuration one Producing management information and reporting, using some light scripting (e.g. JSON) to support this Supporting audits ...

response, cyber investigations, and escalation procedures. Oversee annual penetration testing programmes and security audits. Support compliance initiatives including Cyber Essentials, Cyber Essentials Plus, ISO 27001, and similar frameworks. Produce security reporting for IT leadership and senior business stakeholders. Conduct security due diligence for acquisitions and support … Strong understanding of cyber security governance, risk management, and compliance. Experience implementing and supporting security frameworks such as Cyber Essentials, Cyber Essentials Plus, ISO 27001, or similar. Strong knowledge of Microsoft Azure security and cloud governance. Experience working with modern identity, endpoint protection, email security ...

secure-by-design solutions. What you'll be doing Conduct threat modelling, risk assessments and security architecture reviews Assess security across cloud and Kubernetes / container environments Embed SAST, DAST, SCA, SBOM and secret scanning into CI / CD pipelines Perform security code reviews and provide secure coding … PoCs where appropriate Manage IAM and key management controls Support product security incident response, root-cause analysis and remediation Develop detection engineering capabilities, IDS / IPS rules and technical runbooks Monitor emerging threats and continuously improve security controls Work across engineering, security and compliance teams to drive security improvements ...

office systems. Our total focus at Cloudfy is to help you sell more, reduce costs to serve, allow your customers to self-service 24 / 7 and provide a completely integrated solution. Back in 2010, a team of seasoned e-commerce experts formed Cloudfy to address the need … improve the automation, security, scalability and reliability of Cloudfy's platform and supporting services. You will be responsible for building and maintaining CI / CD pipelines, managing cloud infrastructure, supporting operational excellence initiatives, and helping embed DevSecOps principles across the software development lifecycle. Note: This role ...

Agentic SDLC. You will own blueprints, guardrails and platform fabric, enabling product teams to ship at world-class velocity while ensuring security, compliance (UK / EU GDPR and ISO 27001 / 42001), and scalable, resilient #J-18808-Ljbffr ...

DevOps / Infrastructure Engineer Location: Shoreham-by-Sea, West Sussex Working pattern: Hybrid – minimum 2 days per week in the office Type: Permanent We’re looking for a hands-on DevOps / Infrastructure Engineer to join an established infrastructure team during a significant programme of work. The team … while helping to improve automation, security, reliability and day-to-day infrastructure operations. Security is a key focus, with the team working towards 24 / 7 patching through increased automation and improved processes. You’ll need to be someone who can balance technical delivery with security and customer impact. ...

experience across: AWS, Azure or GCP security Linux administration and hardening IAM, SSO, MFA, RBAC and privileged access SIEM, EDR and vulnerability management TCP / IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and / or ISO … 27001 Security incident investigation and remediation You don’t need to tick every box. What matters is a strong infrastructure background, credible hands-on security experience and the ability to troubleshoot problems rather than just identify them. CISSP, CCSP or Security+ would be useful, but practical experience carries ...

minimum of 2 years in an infrastructure, SysOps or Security role; Active Directory management; NTFS permission & Group Policy configuration & management; Microsoft RDS Architecture (RemoteApp / RDWeb Gateway / RDS Broker); Virtual Windows 2016 DC Servers / File Server with SMB file shares; Site-to-Site VPN configuration … interest in pursuing an Information Security specialism. Desirable: IaaS and PaaS environments; SQL; VMWare Cloud Director; SharePoint; Windows IIS security & management; Security & GDPR compliance (ISO27001 / ISO27032 / SOC 2); AWS ecosystem, especially AppStream 2.0. #J-18808-Ljbffr ...

Provide specific guidance on the operational implementation of controls to support compliance against the following: ISO 27001 – Security Management Cyber Assessment Framework (CAF) Network Information Systems (NIS) Center for Internet Security (CIS) Benchmarks IEC 62443 Key responsibilities for this job: Define and maintain operational … Internet Security (CIS) benchmarking Network and Information Systems (NIS) National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF) ISO Standards – particularly ISO27001 (Information Security Management) IEC 62443 – especially risk management elements #J-18808-Ljbffr ...

Skills and experience • Experience in Information Security, Cyber Security, Technology Risk or Security Governance • Experience in FCA-regulated financial services • Strong knowledge of ISO 27001, NIST and CIS Controls • Strong understanding of Microsoft Entra ID and AWS security • Experience conducting access reviews, risk assessments and supplier … Skills and experience • Experience in Information Security, Cyber Security, Technology Risk or Security Governance • Experience in FCA-regulated financial services • Strong knowledge of ISO 27001, NIST and CIS Controls • Strong understanding of Microsoft Entra ID and AWS security • Experience conducting access reviews, risk assessments and supplier ...