6 of 6 Remote/Hybrid ISO/IEC 27002 (supersedes ISO/IEC 17799) Jobs in the UK excluding London

requirements and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part of a fast … Proven experience with security control testing and assurance activities Strong knowledge of one or more frameworks: ISO 27001 / ISO 27002 NIST CSF / NIST 800-53 SOC 2 / ISAE 3402 CIS Critical ...

including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and customer compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide senior oversight of third … party / vendor security risk and critical supplier assurance. Support security assurance for customer contracts and external stakeholder requirements. Develop security reporting, KPIs and dashboards for senior management. Work with security operations and engineering teams to identify vulnerabilities, manage remediation and improve security controls. Provide security input into ...

policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks … years' experience in an Information Security, GRC, compliance or security consultancy role. Practical experience implementing and managing ISO 27001 / ISMS rather than purely theoretical knowledge. Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO ...

designing and assuring secure solutions across Azure, on-premise and hybrid environments. Strong knowledge of industry frameworks such as NCSC guidance, NIST CSF / 800-53, ISO 27001 / 2 or SABSA. Understanding of identity & access management, network security, encryption, API security … testing and security assurance processes. Ability to define, document and govern security requirements throughout solution delivery. Desirable: Knowledge of NIS Regulations and ISA / IEC 62443 for OT and industrial control systems. Experience working in highly regulated industries such as utilities, energy or critical ...

proactively hunting for threats, and continually improving security detections, controls and working practices. Key Activities: Monitor and investigate security alerts across SIEM, EDR / XDR, email security, cloud platforms, identity, network security and data loss prevention tooling. Triage security events, determine scope and impact, coordinate containment and remediation … technical security role. Strong investigation, log analysis and correlation skills across endpoint, identity, email, cloud and network telemetry. Experience using SIEM and EDR / XDR platforms to investigate alerts and support containment and remediation. Ability to document investigations clearly, maintain evidence and explain findings to technical ...

reliability improvements Experience & Skills Required: Hands-on experience with Azure Monitoring (Application Insights, Alerts, Action Groups) Strong knowledge of OpenTelemetry (including Kubernetes) Scripting / automation using PowerShell and / or Azure CLI Experience with Terraform and GitHub Actions Ability to define SLIs / SLOs … budgets Incident response and post-incident review experience Familiarity with Docker and Kubernetes Strong communication and documentation skills Desirable: Working knowledge of .NET / C# and React / NextJS Experience with cloud cost optimisation Knowledge of Azure networking (DNS, VNets, Firewalls) Understanding of security frameworks (e.g. ...