Derby, England, United Kingdom Hybrid / WFH Options
Cooper Parry
Security Expertise, particularly within Microsoft 365 and Azure environments Infrastructure Knowledge: networking, Windows, macOS etc. Familiarity with security frameworks & standards i.e. NIST, CIS Benchmarks, NCSC guidelines, ISO 27001 and CyberEssentials Plus (CE+) Practical experience with PowerShell, Python, and Kusto Query Language (KQL) for automation, analysis, and custom alerting Exposure to programming languages such as JavaScript, C, or More ❯
Job Title: Senior Cyber Security Architect Reporting to: Cyber & Technical Advisory Salary: £60,000-£80,000 Job Type: Permanent, full time Location: Home based (This role will require regular UK travel and at times need you to stay away from home) Since our establishment in 1990, Methods has partnered with a range of central government departments and agencies … integrators and software houses - we have a customer-centric value system whereby we focus on delivering what is right for our clients. Methods are experts in delivering secure, resilient cyber and information services - keeping systems and data safe. We help reduce risk and vulnerabilities from cyber-attacks by developing a security road-map tailored to your unique needs. … We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks. Responsibilities: Ability to research, articulate, pitch complex and innovative security advice, at both business and technical levels, for new or existing problems, with the objective to justify and communicate decisions directly to key customer More ❯
Glasgow, Scotland, United Kingdom Hybrid / WFH Options
Cathcart Technology
external vendors to help deliver a wide range of infrastructure improvements. From migrating to Azure AD and Intune, to rolling out Defender across the business and helping push toward CyberEssentials Plus and ISO 27001 compliance; there’s a lot going on, and you’ll be in the thick of it. Alongside cloud migration work, you’ll also … and cloud services, resolving escalated issues while contributing to a variety of internal projects. You’ll work within an ITIL aligned environment, helping improve system performance, network reliability, and cyber security posture. Collaborating across support functions and with senior leadership, you’ll take ownership of your technical space, from endpoint security to server virtualisation and cloud platform improvements. It … platforms in a business environment • Exposure to cloud migrations, ideally Azure (some AWS experience also fine) • Experience supporting enterprise platforms like IIS & SQL • Familiarity with compliance standards (ISO 27001, CyberEssentials, NIST) There’s no on call requirement, though some flexibility around out of hours work may occasionally be needed. This is a genuinely varied and collaborative environment More ❯
Glasgow, Lanarkshire, Scotland, United Kingdom Hybrid / WFH Options
Cathcart Technology
external vendors to help deliver a wide range of infrastructure improvements. From migrating to Azure AD and Intune, to rolling out Defender across the business and helping push toward CyberEssentials Plus and ISO 27001 compliance; there's a lot going on, and you'll be in the thick of it. Alongside cloud migration work, you'll also … and cloud services, resolving escalated issues while contributing to a variety of internal projects. You'll work within an ITIL aligned environment, helping improve system performance, network reliability, and cyber security posture. Collaborating across support functions and with senior leadership, you'll take ownership of your technical space, from endpoint security to server virtualisation and cloud platform improvements. It … platforms in a business environment Exposure to cloud migrations, ideally Azure (some AWS experience also fine) Experience supporting enterprise platforms like IIS & SQL Familiarity with compliance standards (ISO 27001, CyberEssentials, NIST) There's no on call requirement, though some flexibility around out of hours work may occasionally be needed. This is a genuinely varied and collaborative environment More ❯
London, England, United Kingdom Hybrid / WFH Options
The Best Connection
areas related to Release and Change Management. Also, support the organisation’s information security posture by implementing, maintaining, and monitoring security controls, ensuring compliance with relevant standards (e.g., ISO27001, CyberEssentials), and contributing to the secure operation of IT systems and services. This role offers hybrid working with a minimum of 3 days based from our Head Office … Cycle to work scheme Option to join our employee benefits scheme The Person: Essential Criteria: Bachelor’s degree (minimum 2:1) from a leading academic institution (BSc Information/Cyber Security) Experience working within an IT security role Familiarity with MS Operating Systems, M365, and Azure GCSE or equivalent in Maths and English (Grade C/4) Experience working … in ISO27001, Cyber Security Essentials, or other Security framework environments. The role will be offered subject to a satisfactory DBS check. Flexibility to work occasional weekends and out of hours Desirable Criteria: ITIL Foundation Level or above ISO:27001 Implementor, Auditor, or other security-related certifications Experience with SIEM tools, vulnerability management, or scripting (e.g., PowerShell, Python) Microsoft More ❯
London, England, United Kingdom Hybrid / WFH Options
Ripjar
our mission of delivering secure, resilient technology to governments and enterprises around the world. As Chief Information Security Officer (CISO), you will be responsible for developing and executing our cyber risk strategy, driving alignment with international frameworks such as ISO27001, SOC2, DORA and regional frameworks like CyberEssentials, and leading executive team engagement on security governance, regulatory … and compliance posture to support international expansion and customer growth. Manage and own the Information Security budget, investments, and ROI. Governance, Risk, and Compliance Maintain compliance with ISO27001, SOC2, CyberEssentials and evolving DORA regulations. Lead internal risk assessments, security audits, and regulatory readiness efforts. Oversee third-party and supply chain security due diligence and assurance processes. Operational … security and its practical application to our organisation as it scales. Ideally, you will have: Proven leadership in high-growth scale-up environments. Expertise in ISO27001, SOC2, NIST CSF, CyberEssentials, and DORA. Experience with modern cloud infrastructure and security (AWS, Azure, GCP, PaaS/IaaS/SaaS). Familiarity with IAM, DLP, and Linux-based environments. Strong More ❯
Bristol, England, United Kingdom Hybrid / WFH Options
Ripjar
our mission of delivering secure, resilient technology to governments and enterprises around the world. As Chief Information Security Officer (CISO), you will be responsible for developing and executing our cyber risk strategy, driving alignment with international frameworks such as ISO27001, SOC2, DORA and regional frameworks like CyberEssentials, and leading executive team engagement on security governance, regulatory … and compliance posture to support international expansion and customer growth. Manage and own the Information Security budget, investments, and ROI. Governance, Risk, and Compliance Maintain compliance with ISO27001, SOC2, CyberEssentials and evolving DORA regulations. Lead internal risk assessments, security audits, and regulatory readiness efforts. Oversee third-party and supply chain security due diligence and assurance processes. Operational … security and its practical application to our organisation as it scales. Ideally, you will have: Proven leadership in high-growth scale-up environments. Expertise in ISO27001, SOC2, NIST CSF, CyberEssentials, and DORA. Experience with modern cloud infrastructure and security (AWS, Azure, GCP, PaaS/IaaS/SaaS). Familiarity with IAM, DLP, and Linux-based environments. Strong More ❯
City of London, London, United Kingdom Hybrid / WFH Options
BRITISH ARAB COMMERCIAL BANK PUBLIC LIMITED COMPANY
London Contract Type: Permanent Job Summary Reporting to the Head of Information Security, the role will support the delivery of the Banks IT Security strategy through implementation of the Cyber security programme, configuration and management of cyber security solutions, and proactive collaboration with the Banks security operations functions. Key Work Outputs and Accountabilities Assist with the delivery of … the Banks strategic Cyber Security roadmap and maintaining regulatory compliance Act as a security point of contact to advise and guide the IT team as to effective ways of operating the Banks diverse security tooling Lead the creation, maintenance and delivery of the Bank's cyber security awareness and training programme including mandatory training and Phishing simulation exercises … are operating as intended and within the Banks risk tolerance (including organising vulnerability management and penetration testing exercises) Lead the Bank's collection, interpretation and dissemination of the current Cyber threat landscape and help with the identification of innovative controls and mitigations to match Help to generate security performance metrics and KPIs Help to ensure that the Bank can More ❯
London, England, United Kingdom Hybrid / WFH Options
Ripjar
our mission of delivering secure, resilient technology to governments and enterprises around the world. As Chief Information Security Officer (CISO), you will be responsible for developing and executing our cyber risk strategy, driving alignment with international frameworks such as ISO27001, SOC2, DORA and regional frameworks like CyberEssentials, and leading executive team engagement on security governance, regulatory … and compliance posture to support international expansion and customer growth. Manage and own the Information Security budget, investments, and ROI. Governance, Risk, and Compliance Maintain compliance with ISO27001, SOC2, CyberEssentials and evolving DORA regulations. Lead internal risk assessments, security audits, and regulatory readiness efforts. Oversee third-party and supply chain security due diligence and assurance processes. Operational … security and its practical application to our organisation as it scales. Ideally, you will have: Proven leadership in high-growth scale-up environments. Expertise in ISO27001, SOC2, NIST CSF, CyberEssentials, and DORA. Experience with modern cloud infrastructure and security (AWS, Azure, GCP, PaaS/IaaS/SaaS). Familiarity with IAM, DLP, and Linux-based environments. Strong More ❯
Join our Cyber Security Team as a Governance, Risk and Compliance Analyst. If you have been involved in practical aspects of GRC including ISO270001, want to work with a team of dedicated professionals and are able to understand wider business impacts of GRC on a business, please read more and apply. Location We operate a flexible, hybrid working environment … Assist with internal audits and help prepare for external audits to maintain compliance with ISO27001 and other standards Help identify and assess information security risks, working closely with the Cyber Risk Manager Provide guidance to colleagues on basic security best practices and requirements Contribute to reporting on the ISMS performance and improvement plans Support continual improvement initiatives and track … Good analytical and problem-solving skills A proactive and collaborative approach Integrity and a commitment to confidentiality and professionalism Qualifications A bachelor's degree in computer science, information technology, cyber security, or a related field Experience and knowledge Familiarity with information security frameworks, especially ISO27001 (2013 or 2022) Basic understanding of risk management principles and security controls Interest in More ❯
Winchester, Hampshire, United Kingdom Hybrid / WFH Options
Arqiva
Join our Cyber Security Team as a Governance, Risk and Compliance Analyst. If you have been involved in practical aspects of GRC including ISO270001, want to work with a team of dedicated professionals and are able to understand wider business impacts of GRC on a business, please read more and apply. Location We operate a flexible, hybrid working environment … Assist with internal audits and help prepare for external audits to maintain compliance with ISO27001 and other standards Help identify and assess information security risks, working closely with the Cyber Risk Manager Provide guidance to colleagues on basic security best practices and requirements Contribute to reporting on the ISMS performance and improvement plans Support continual improvement initiatives and track … Good analytical and problem-solving skills A proactive and collaborative approach Integrity and a commitment to confidentiality and professionalism Qualifications A bachelor's degree in computer science, information technology, cyber security, or a related field Experience and knowledge Familiarity with information security frameworks, especially ISO27001 (2013 or 2022) Basic understanding of risk management principles and security controls Interest in More ❯
Cheltenham, England, United Kingdom Hybrid / WFH Options
Bailie Group
and consultancies with the collective mission to improve people's lives by sharing knowledge. CDS DS is an industry leading technical consultancy delivering world class services in Support Engineering, Cyber Security & Information Assurance, Training & Leadership Development and Communications. We exist to make the world a safer place and do this by providing sophisticated training solutions, operational support, information assurance … legislation, including: HMG/NCSC Information Assurance Policies, Standards and Guidelines Cross-government security accreditation and secure by design processes JSP440 (plus other standard MoD IA methods) DCPP's Cyber Security Model List X, List N CyberEssentials Office for Nuclear Regulation (ONR) Security Assessment Principles (SyAPs) NIST GDPR, DPA, Computer Misuse Act, Official Secrets Act NIS … to clients. A proactive interest in maintaining and enhancing technical and consultancy skills. Examples of Professional Qualifications, Certifications and Security Clearances Full Member of CIISec and/or UK Cyber Security Council (Security and Information Risk Advisor, Auditor or Security Architect) or the agreement and ability to achieve such certification within 6 months of employment. Holder of current key More ❯
Cambridge, England, United Kingdom Hybrid / WFH Options
Techwaka
collaboratively with the wider TechOps team, consulting on IT projects, providing strategic advice, and validating security elements to safeguard our IT infrastructure. You will be responsible for promoting effective cyber hygiene across the company by conducting phishing simulations and using your knowledge of the evolving threat landscape to guide cybersecurity training initiatives. Additionally, you will have ample opportunities to More ❯
London, England, United Kingdom Hybrid / WFH Options
Techwaka
collaboratively with the wider TechOps team, consulting on IT projects, providing strategic advice, and validating security elements to safeguard our IT infrastructure. You will be responsible for promoting effective cyber hygiene across the company by conducting phishing simulations and using your knowledge of the evolving threat landscape to guide cybersecurity training initiatives. Additionally, you will have ample opportunities to More ❯
Cheltenham, England, United Kingdom Hybrid / WFH Options
Ripjar
our mission of delivering secure, resilient technology to governments and enterprises around the world. As Chief Information Security Officer (CISO), you will be responsible for developing and executing our cyber risk strategy, driving alignment with international frameworks such as ISO27001, SOC2, DORA and regional frameworks like CyberEssentials, and leading executive team engagement on security governance, regulatory … and compliance posture to support international expansion and customer growth. Manage and own the Information Security budget, investments, and ROI. Governance, Risk, and Compliance Maintain compliance with ISO27001, SOC2, CyberEssentials and evolving DORA regulations. Lead internal risk assessments, security audits, and regulatory readiness efforts. Oversee third-party and supply chain security due diligence and assurance processes. Operational … security and its practical application to our organisation as it scales. Ideally, you will have: Proven leadership in high-growth scale-up environments. Expertise in ISO27001, SOC2, NIST CSF, CyberEssentials, and DORA. Experience with modern cloud infrastructure and security (AWS, Azure, GCP, PaaS/IaaS/SaaS). Familiarity with IAM, DLP, and Linux-based environments. Strong More ❯
London, England, United Kingdom Hybrid / WFH Options
RecruitMe
powers critical environmental innovation. What You’ll Do: Manage and support the Information Security Management System (ISMS) across the group and its subsidiaries Ensure compliance with leading frameworks: ISO27001, CyberEssentials Plus, and NIST CSF Coordinate responses to customer and supplier audits, ensuring follow-up actions are delivered Conduct internal security assessments (including occasional UK site visits) Provide … on the SecOps roadmap What You’ll Bring: Essential Experience & Skills: Solid experience in Information Security, auditing, and compliance Hands-on knowledge of ISO27001 implementation and auditing Familiarity with CyberEssentials Plus and IT risk frameworks Excellent problem-solving and analytical skills Able to work independently and cross-functionally Strong written and verbal communication Desirable Qualifications: ISO27001 Lead More ❯
Guildford, Surrey, United Kingdom Hybrid / WFH Options
Allianz Popular SL
Analyst plays a key role in supporting Allianz UK's Information Security initiatives, with a focus on executing the Governance, Risk, and Compliance (GRC) activities and implementing the NIST Cyber Security Framework (CSF) across the organisation. The NIST analyst will involve in day-to-day GRC operations, such as designing and implementing security controls, interpreting requirements from the Group … Security Analyst at Allianz UK, you will be pivotal in advancing the company's Information Security initiatives by executing Governance, Risk, and Compliance (GRC) activities and implementing the NIST Cyber Security Framework (CSF) organization-wide. Your role will involve daily GRC operations, including designing and implementing security controls, interpreting requirements from the Group Information Security Framework, and managing non … potential risks, and monitoring progress on maturity uplifting across security functions. You will be developing and implementing an information security controls catalogue, policies, and procedures aligned with the NIST Cyber Security Framework (CSF). Collaborating with the wider organization to integrate control testing and risk management activities into the existing governance framework. Assisting cross-functional teams and business units More ❯
London, England, United Kingdom Hybrid / WFH Options
Crown Agents Bank
response to security incidents, including investigation, containment, root cause analysis, and reporting. Work with internal teams to continuously improve incident response processes. Support compliance and alignment with ISO 27001, CyberEssentials, SWIFT, NIST and other relevant frameworks. Communicate effectively with various stakeholders including engineers, product managers, operations team, senior management, and auditors about the information security posture, risks … certifications (e.g. CEH, OSCP, AWS Security) are a plus. Experience Minimum of 8 years’ experience in information security roles, ideally in the financial sector. Experience working with ISO 27001, CyberEssentials, and preferably NIST CSF, SOC 2, or SWIFT frameworks. Strong understanding of security in the context of software development and application security (OWASP, SDLC, DevSecOps). Hands … fast-paced environment. Excellent communication skills, with the ability to engage both technical and non-technical stakeholders. Innovative mindset with a passion for staying current in the ever-evolving cyber landscape. Experience working in or with regulated financial institutions is desirable. Additional Information Hybrid working Contributory personal pension plan: - Minimum: Employee 2% and Employer 7%. Employer matches contributions More ❯
London, England, United Kingdom Hybrid / WFH Options
Toro Solutions
managed IT & security services provider based in London, with over a decade of experience. As a small but growing company, we specialise in delivering integrated security solutions that span cyber, physical, and personnel domains offering you a rare opportunity to work at the intersection of these critical areas. Our clients range from high-net-worth individuals and their families … across IT projects, shaping end to end solutions and advising on best fit technologies, platforms and configurations for secure, scalable delivery. You will work closely with the Director of Cyber, the IT Systems Specialist and the wider Cyber team to identify the needs of our clients, the capability of our business and manage our technology accordingly. Internally this … ownership of problems and use initiative to troubleshoot user issues, prioritising requests and keeping an audit trail of communications. You will work closely with the other members of the Cyber team, communicate effectively, delegate appropriately and guide the junior members of the team with your experience and expertise. General Responsibilities • Helpdesk – proactive infrastructure management for our clients and escalated More ❯
Bristol, England, United Kingdom Hybrid / WFH Options
Cyber UK
Forces Recruitment Service (AFRS) team and take operational ownership and accountability for information security management processes for Defence opportunities. In this role, you will deliver, manage, and audit the cyber security aspects of contracts in accordance with MOD Secure by Design standards. You will oversee the extensive security arrangements for Serco partners and subcontractors, ensuring their compliance with MOD … ISO 27001. Advise on technical requirements and compliance with formal contract security schedules (Security Aspects Letters) and recommend security technologies and controls. Provide advice and guidance to maintain existing cyber security compliances (e.g., ISO 27001, CyberEssentials Plus), MOD certifications, and HMG security controls. Adopt a proactive approach to security management and assurance coordination, ensuring smooth running … using recognised frameworks like NIST. Experience in creating and delivering security awareness training. Ability to work effectively with stakeholders to support contract and business unit needs. Clear communication of cyber security concepts to senior stakeholders, with the ability to escalate issues promptly. Capability to work independently, make sound decisions, and meet deadlines. Logical and methodical approach to problem-solving. More ❯
Gloucester, England, United Kingdom Hybrid / WFH Options
Morson Talent
Junior Cyber Security Analyst – GBP350 per day – Inside IR35 – Hybrid working with 2 days a week near Gloucester – contract until year end with potential for extension. My client, one of the UKs biggest producers or zero carbon electricity, is looking for a motivated and detail–oriented Junior Cyber Security Analyst to support their information security and compliance functions. … This role is ideal for someone starting their cyber security career who wants hands–on experience across a variety of security frameworks, data analysis, and stakeholder engagement. You ll work closely with internal teams and external partners to maintain security standards, support audit readiness, and help protect sensitive data. Key responsibilities – Provide administrative and operational support to the cyber … including pivot tables, charts, and data cleaning Proficient in Power BI for creating dashboards and reporting security metrics Working knowledge of international standards and frameworks, including: ISO27001, ISO27017, GDPR, CyberEssentials Plus High attention to detail and a structured, analytical approach to problem–solving Ability to communicate clearly and professionally with both technical and non–technical stakeholders Ability More ❯
and forward thinking organising in Bristol. This role will be tolead their information security compliance efforts, specifically in line with ISO/IEC 27001 , ISO/IEC 42001 and CyberEssentials PLUS standards. In this role you will be responsible for maintaining, auditing, and continuously improving their Information Security Management System (ISMS), overseeing compliance initiatives, coordinating with internal … the building of a new Team to deliver CaaS and supporting services. Develop, implement, and maintain the Information Security Management System (ISMS) aligned with ISO/IEC 27001 and CyberEssentials PLUS standards. Lead internal audits, gap assessments, and risk assessments for ISO 27001 and CyberEssentials PLUS. Coordinate and manage external audits and certifications, including … Identify compliance gaps and lead remediation activities. Oversee incident management, business continuity, and data protection processes as part of ISMS requirements. Stay current on changes to ISO 27001 and CyberEssentials PLUS frameworks, regulatory expectations, and cybersecurity threats. Develop and deliver security and compliance awareness training across the organisation. Collaborate with IT, Legal, HR, and other departments to More ❯
Bristol, Avon, South West, United Kingdom Hybrid / WFH Options
Alexander Mae (Bristol) Ltd
and forward thinking organising in Bristol. This role will be tolead their information security compliance efforts, specifically in line with ISO/IEC 27001 , ISO/IEC 42001 and CyberEssentials PLUS standards. In this role you will be responsible for maintaining, auditing, and continuously improving their Information Security Management System (ISMS), overseeing compliance initiatives, coordinating with internal … the building of a new Team to deliver CaaS and supporting services. Develop, implement, and maintain the Information Security Management System (ISMS) aligned with ISO/IEC 27001 and CyberEssentials PLUS standards. Lead internal audits, gap assessments, and risk assessments for ISO 27001 and CyberEssentials PLUS. Coordinate and manage external audits and certifications, including … Identify compliance gaps and lead remediation activities. Oversee incident management, business continuity, and data protection processes as part of ISMS requirements. Stay current on changes to ISO 27001 and CyberEssentials PLUS frameworks, regulatory expectations, and cybersecurity threats. Develop and deliver security and compliance awareness training across the organisation. Collaborate with IT, Legal, HR, and other departments to More ❯
and forward thinking organising in Bristol. This role will be tolead their information security compliance efforts, specifically in line with ISO/IEC 27001 , ISO/IEC 42001 and CyberEssentials PLUS standards. In this role you will be responsible for maintaining, auditing, and continuously improving their Information Security Management System (ISMS), overseeing compliance initiatives, coordinating with internal … the building of a new Team to deliver CaaS and supporting services. Develop, implement, and maintain the Information Security Management System (ISMS) aligned with ISO/IEC 27001 and CyberEssentials PLUS standards. Lead internal audits, gap assessments, and risk assessments for ISO 27001 and CyberEssentials PLUS. Coordinate and manage external audits and certifications, including … Identify compliance gaps and lead remediation activities. Oversee incident management, business continuity, and data protection processes as part of ISMS requirements. Stay current on changes to ISO 27001 and CyberEssentials PLUS frameworks, regulatory expectations, and cybersecurity threats. Develop and deliver security and compliance awareness training across the organisation. Collaborate with IT, Legal, HR, and other departments to More ❯
bristol, south west england, United Kingdom Hybrid / WFH Options
Alexander Mae (Bristol) Ltd
and forward thinking organising in Bristol. This role will be tolead their information security compliance efforts, specifically in line with ISO/IEC 27001 , ISO/IEC 42001 and CyberEssentials PLUS standards. In this role you will be responsible for maintaining, auditing, and continuously improving their Information Security Management System (ISMS), overseeing compliance initiatives, coordinating with internal … the building of a new Team to deliver CaaS and supporting services. Develop, implement, and maintain the Information Security Management System (ISMS) aligned with ISO/IEC 27001 and CyberEssentials PLUS standards. Lead internal audits, gap assessments, and risk assessments for ISO 27001 and CyberEssentials PLUS. Coordinate and manage external audits and certifications, including … Identify compliance gaps and lead remediation activities. Oversee incident management, business continuity, and data protection processes as part of ISMS requirements. Stay current on changes to ISO 27001 and CyberEssentials PLUS frameworks, regulatory expectations, and cybersecurity threats. Develop and deliver security and compliance awareness training across the organisation. Collaborate with IT, Legal, HR, and other departments to More ❯