251 to 275 of 747 Remote/Hybrid ISO/IEC 27001 Jobs

track record of successfully managing responses to both internal and external audits.* Sound knowledge of core GRC practices and industry frameworks, such as ISO 27001, ISO 9001, ITIL, and COBIT.* Document & Quality Control - Expertise in quality management principles, policy governance, and administering Document Management ...

CloudMargin is seeking an Information Security Manager to own the information security function, shaping an ISO 27001:2022-aligned programme. You will work with the CTO and leadership, taking a hands-on approach to build the security function and partner with engineering to strengthen the SaaS ...

defined and maintained.Regulatory & Policy Oversight• Own the Information Security Policy framework and supporting standards.• Ensure mapping of regulatory and industry standards (e.g. GDPR, ISO 27001) to firm policies.• Oversee annual policy attestation and compliance reporting.• Lead audit readiness and regulatory engagement.Risk & Assurance• Ensure all information security … Regulation Authority (SRA) Standards and Regulations, and Principles. Person specification • 8–12+ years in Information Security, with governance leadership experience.• Strong knowledge of ISO 27001, GDPR, law firm or regulated professional services environment preferred.• Experience presenting to executive committees.• Strong commercial and financial awareness.• Ability ...

Dexory is transforming warehousing and logistics with data intelligence in the UK. We seek an Information Security Lead to own ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes, and to respond to customer security due diligence across engineering, product and operations. ...

maintaining network segmentation, secure remote access, and monitoring controls for OT environmentsCollaborating with engineering teams to secure industrial protocols (e.g., OPC UA, Modbus TCP / IP, Ethernet / IP)Defining requirements for authentication, encryption, certificate management, and key infrastructure within subsea systemsProviding technical guidance and mentorship to junior … Bachelor’s or Master’s degree in Cyber Security, Computer Engineering, Electrical Engineering, or a related fieldSignificant experience in cyber security engineering within industrial / OT environments, preferably in oil & gas or energyStrong knowledge of industrial control systems (ICS), SCADA, and subsea production systems architecturesProven experience with cyber security ...

Faculty is seeking an Information Security Manager to drive compliance and secure its scaling global operations. You will lead the ISO 27001:2022 management system, partner with senior stakeholders, and own the governance roadmap. This is an ambitious, individual-contributor role with high impact on security ...

senior management across regions and drive security improvements within a 40% hybrid London office environment. The role requires ISO 27001 / 2 2022 expertise, risk framework experience, and relevant certifications alongside strong communication and leadership skills for coordinating audits and training across dispersed teams. #J ...

with a particular focus on its managed services and cybersecurity offering. The firm has built its reputation on personalised, high-touch delivery — including ISO 27001-accredited security practices — and is looking for an experienced new-business hunter who can open doors with mid-to-large … sized IT consulting and managed services firm serving mid-to-large UK organisations across sectors including education, financial services, and the public sector. ISO 27001, 9001, and 14001 accredited, with a service range spanning managed services, cybersecurity, cloud, and workplace technology. What You’ll Own Proactively ...

security in design, code and backlog decisions. Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI / CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security … Contribute to security standards, metrics and ways of working that improve product security maturity over time. Support wider assurance and certification activity, including ISO 27001 or other relevant standards, with evidence of how our softwareis securely built. Requirements - Product Security Engineer - not exhaustive: A strong software ...

security in design, code and backlog decisions. Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI / CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security … Contribute to security standards, metrics and ways of working that improve product security maturity over time. Support wider assurance and certification activity, including ISO 27001 or other relevant standards, with evidence of how our softwareis securely built. Requirements - Product Security Engineer - not exhaustive: A strong software ...

security in design, code and backlog decisions. Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI / CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security … Contribute to security standards, metrics and ways of working that improve product security maturity over time. Support wider assurance and certification activity, including ISO 27001 or other relevant standards, with evidence of how our softwareis securely built. Requirements - Product Security Engineer - not exhaustive: A strong software ...

lead security risk and assurance activities, derive product security requirements and ensure appropriate security controls are incorporated into product design. This is a Product / Systems Security Engineering role rather than a corporate IT or enterprise cyber security position. Key Responsibilities Undertake security risk assessments and develop risk mitigation … assessment, risk mitigation and technical assurance experience. Experience deriving and managing technical security requirements for products or systems. Experience producing Security Cases, RMADS and / or comparable security assurance documentation. Knowledge of UK MOD and Government security standards and frameworks, including GovS 007, HMG IS1 & IS2 and relevant JSPs ...

La-Fosse-1 is seeking a Security Framework & Controls SME for a contract engagement in the United Kingdom. The role focuses on designing, developing and implementing security control frameworks across a large, federated organisation. The ...

cloud environments in a client-facing role. You will lead assessments, architecture reviews, and security strategy aligned with ISO 27001 / 27002 and NIST standards. Location is on-site with a customer in Central London, with hybrid working options. You will guide security framework development ...

Role: Director of Platform Engineering Location: London / Hybrid (2 days in person) Salary: £100K - £120K Job brief We are seeking a Director of Platform Engineering for a disruptive Insurtech. Requirements Experienced platform engineering leader, building an engineering platform on a cloud based infrastructure preferably withAWS using Kubernetes Expert … enjoyment from making peoples lives easier. Experienced in a regulated environments, ideally working with standards such as ISO 27001 / SOC2 and know how to structure a platform and process to meet the needs of those standards. Engaging internal risk and compliance teams and acting ...

Reference: SBM / AR / 070570Job Type: Full-time, PermanentSalary: 80,000Location: LondonSector: ITPosted: 2026-08-25Do you have a background in Application Security, DevSecOps or Product Security, with hands-on experience embedding application security into the SDLC? If so, this could be an opportunity worth considering.Join … engineering, architecture and cloud teams to integrate security throughout the software development lifecycle.Microsoft Azure and KQL experience are essential, alongside relevant experience in CI / CD, Kubernetes, API security, security-as-code and security automation. This is a hands-on application security role focused on secure design, application security ...

employees specializing in engineering and IT services. Domain Expert Role Overview Location: UK-based, hybrid working Regular travel may berequiredto client sites, Methodsofficesand practice / community events. Domain Expert— Data Governance, Stewardship & Information Management Role summary The Data Governance, Stewardship & Information Management Specialist helps clients create the data foundationsrequiredfor … readiness propositions. Essential experience 8+ years’ experience in data governance, information management, data quality, master data management, metadata management, data strategy, informationgovernanceor related consulting / advisory work. Evidence of measurable impact, such as improved data quality, reduced reporting risk, better regulatory compliance, improved data sharing, successful data platform adoption ...

Desirable Skills Previous Central Government or wider UK Public Sector security and identity experience. Knowledge of NCSC guidance, Government Security Framework and government digital / security standards. Experience with technologies such as Microsoft Entra ID (Azure AD), Active Directory, PAM and modern identity platforms. Experience supporting Zero Trust, cloud … transformation, identity modernisation or legacy migration programmes. Knowledge of Cyber Essentials, ISO 27001 and / or NIST security frameworks. Experience operating within multi-supplier and cross-government environments. Relevant certifications such as CISSP, CISM, ITIL, Microsoft Security / Identity or equivalent. Security Clearance: Willing ...

experience managing external peering and transit relationships. Solid experience with tunnelling technologies such as GRE and VXLAN, and Layer 2 networking including HSRP / VRRP / VARP, VLANs and trunking, STP, and ARP / NDP. Working knowledge of VPN technologies and IPsec, and a security-conscious approach … network design including ACLs and IDS / IDP. Hands-on firewall configuration and management experience, including with virtualised firewalls such as pfSense, and exposure to next-generation firewall platforms such as Palo Alto, Fortinet, or Checkpoint. Hands-on configuration and troubleshooting experience across major networking vendors, with particular depth ...

data protection, and other regulatory frameworks.You will support projects and BAU change across a broad Network landscape, including:Mobile Radio Access Networks (2G / 4G / 5G)Core, transport and IP network infrastructureOperations Support Systems (OSS) and network management platformsNetwork automation, orchestration and SDN / NFV technologiesNetwork … security and resilience platformsCloud, edge and virtualised network infrastructureNetwork analytics, assurance and service quality platformsEnterprise, IoT and converged fixed / mobile network servicesWho you are7+ years’ experience in cyber security roles, with strong architecture focusProven experience delivering complex, cross domain Network security architecturesStrong understanding of security risks, threat modelling ...

embed security into how engineers work every day. You’ll report directly to the CTO and have broad scope across the platform (from CI / CD pipelines to multi‐tenant APIs to incident response on authentication flows). Responsibilities Own the secure SDLC: drive SAST, dependency scanning, secrets detection … LLMs and agents to accelerate security workflows (triage, code review, evidence gathering) with guardrails you trust and help secure and monitor the (code / application / device) fleet. Support compliance work where it intersects security engineering: SOC 2, ISO 27001, customer security reviews ...

large-scale updates to processes and systems across multiple departments, such as Business Resilience and Risk ManagementProcess translation: Act as a liaison between security / legal / compliance functions and other Rightmove Departments, translating GRC requirements into clear technical specifications, user stories, and actionable tickets Risk assessments & audits … embedding automated compliance practices into workflows Process integration: Work closely with various teams to integrate compliance requirements into existing ways of working (e.g. Agile / Jira), ensuring a frictionless approach to GRC System resilience: Support due diligence on software, technical partners, and business continuity processes to strengthen system resilience ...

scale updates to processes and systems across multiple departments, such as Business Resilience and Risk Management Process translation: Act as a liaison between security / legal / compliance functions and other Rightmove Departments, translating GRC requirements into clear technical specifications, user stories, and actionable tickets Risk assessments & audits … embedding automated compliance practices into workflows Process integration: Work closely with various teams to integrate compliance requirements into existing ways of working (e.g. Agile / Jira), ensuring a frictionless approach to GRC System resilience: Support due diligence on software, technical partners, and business continuity processes to strengthen system resilience ...

Proven experience delivering Information Assurance, risk management, and security assurance within Defence, Government, Intelligence, or other highly regulated environments. Strong understanding of NIST RMF / CSF, ISO 27001, and Government security frameworks, with experience developing assurance artefacts such as SyOPs, RMADs, Security Impact Assessments, risk … CISSP, CRISC) or equivalent demonstrable experience. Technology Skills Strong understanding of enterprise security architectures and controls, including network security, secure boundaries, endpoint protection, IDS / IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing ...

Proven experience delivering Information Assurance, risk management, and security assurance within Defence, Government, Intelligence, or other highly regulated environments. Strong understanding of NIST RMF / CSF, ISO 27001, and Government security frameworks, with experience developing assurance artefacts such as SyOPs, RMADs, Security Impact Assessments, risk … CISSP, CRISC) or equivalent demonstrable experience. Technology Skills Strong understanding of enterprise security architectures and controls, including network security, secure boundaries, endpoint protection, IDS / IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing ...