fast-growing Managed Service Provider (MSP). Youll generate new business, nurture relationships, and sell managed IT servicesthink ongoing IT support, Microsoft 365, cyber security, backup & disaster recovery, networks / Wi-Fi, and VoIPtailored to each clients goals. Youll own the end-to-end sales cycle, working closely with pre-sales and engineering to scope solutions and convert opportunities … networking, referrals and inbound leads; build a strong pipeline. Discovery & solutions:Understand each clients business needs and translate them into clear, value-led proposals. Present & demo:Run meetings (virtual / in-person), presentations and light demos; coordinate technical deep dives when needed. Full sales cycle:From first contact and proposal / SOW through to negotiation, close, and smooth … handover to service delivery. Land & expand:Run regular account reviews to identify upsell / cross-sell (security, backup / DR, VoIP, cloud). Forecasting & CRM:Keep pipeline, activity and forecasts accurate; report on performance and targets. What were looking for - Essentials MSP or B2B tech sales experience(selling recurring services or solutions), with a track record against targets. More ❯
Swansea, Neath Port Talbot, Wales, United Kingdom Hybrid / WFH Options
Talent Hire Group Ltd
fast-growing Managed Service Provider (MSP). Youll generate new business, nurture relationships, and sell managed IT servicesthink ongoing IT support, Microsoft 365, cyber security, backup & disaster recovery, networks / Wi-Fi, and VoIPtailored to each clients goals. Youll own the end-to-end sales cycle, working closely with pre-sales and engineering to scope solutions and convert opportunities … networking, referrals and inbound leads; build a strong pipeline. Discovery & solutions: Understand each clients business needs and translate them into clear, value-led proposals. Present & demo: Run meetings (virtual / in-person), presentations and light demos; coordinate technical deep dives when needed. Full sales cycle: From first contact and proposal / SOW through to negotiation, close, and smooth … handover to service delivery. Land & expand: Run regular account reviews to identify upsell / cross-sell (security, backup / DR, VoIP, cloud). Forecasting & CRM: Keep pipeline, activity and forecasts accurate; report on performance and targets. What were looking for - Essentials MSP or B2B tech sales experience(selling recurring services or solutions), with a track record against targets. More ❯
accounts and provide executive-level reporting. Collaborate cross-functionally with Product and Development teams to resolve issues and improve system performance. Drive automation, proactive monitoring, and alignment with ISO 13485, ISO27001, GDPR, HIPAA, and MDR standards. Skills & Experience Essential: Proven experience managing support and deployment teams in a healthcare IT or SaaS environment. … Agile, PRINCE2, PMP). Strong troubleshooting, leadership, and communication skills. Experience leading distributed teams across multiple time zones. Desirable: Knowledge of FHIR integrations and advanced visualization software (CT, PET / CT, Mammography). Familiarity with ISO 13485 /ISO27001 frameworks. Background in PACS, RIS, or teleradiology systems. Experience with automation tools More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Crimson
establishing structure, collaborating with technical and business teams, and supporting security and compliance initiatives within the organization. The position requires development and maintenance of security policies aligned with ISO27001, GDPR, HIPAA, and OWASP, as well as leading risk assessments and … managing the risk register. Key skills and responsibilities, Comprehensive knowledge of ISO27001, NIST CSF, GDPR, HIPAA, SOC 2, and OWASP frameworks. Senior Security Analyst / Senior Security Engineer background Proven experience collaborating with software development teams and implementing technical controls. Skilled in articulating technical risks in terms of business impact. Professional certifications such as … CISM, CISSP, CRISC, ISO27001 Lead Auditor, and hands-on experience with GRC tools (e.g., Vanta, Drata) are highly desirable. Responsible for developing and maintaining security policies in alignment with ISO27001, GDPR, HIPAA, and OWASP standards. Lead risk assessments and oversee the management of the organization's risk register. Support efforts More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Crimson
establishing structure, collaborating with technical and business teams, and supporting security and compliance initiatives within the organization. The position requires development and maintenance of security policies aligned with ISO27001, GDPR, HIPAA, and OWASP, as well as leading risk assessments and … managing the risk register. Key skills and responsibilities, Comprehensive knowledge of ISO27001, NIST CSF, GDPR, HIPAA, SOC 2, and OWASP frameworks. Senior Security Analyst / Senior Security Engineer background Proven experience collaborating with software development teams and implementing technical controls. Skilled in articulating technical risks in terms of business impact. Professional certifications such as … CISM, CISSP, CRISC, ISO27001 Lead Auditor, and hands-on experience with GRC tools (e.g., Vanta, Drata) are highly desirable. Responsible for developing and maintaining security policies in alignment with ISO27001, GDPR, HIPAA, and OWASP standards. Lead risk assessments and oversee the management of the organization's risk register. Support efforts More ❯
Woking, Surrey, England, United Kingdom Hybrid / WFH Options
Nomad Foods
a fast-paced environment, and want to make real impact at Europe’s leading frozen food company. Responsibilities: Overseeing cyber security governance efforts, ensuring alignment with frameworks like ISO27001, NIST, NIS2 and GDPR, and regulatory standards. Identify, assess, and mitigate security risks across the organisation. Implement and maintain risk management processes, ensuring effective controls are … experienced in operating a risk management framework across multiple entities and territories, including risk appetite and impact / likelihood calibration. Has familiarity with regulations and standards such as ISO27001, NIST CSF, NIS2, COBIT, ITIL, GDPR, and SOC2, including developing and maintaining frameworks, policies and guidance, and implementation and monitoring strategies. Some of the key skillset required for this position … are: Graduate level in Cyber Security, Computer Science or similar. CRISC, CISM, CRM, CISA, CCP Practitioner SIRA, ISO/IEC27001 Lead Auditor, or similar. 3-5 years’ experience in cyber governance, risk and compliance roles, preferably in the FMCG sector. What we can offer you: We’re on an exceptional adventure and More ❯
Leeds, West Yorkshire, England, United Kingdom Hybrid / WFH Options
4Square Recruitment Ltd
Information Security Manager (3 days / week, permanent pro-rata) Location: Leeds-hybrid (on-site 1-2 day / week, typically Mon / Tue) Reports to: VP, Information Security Team: 5 in security (within a wider UK tech org of ~25, multi-region) We’re looking for a hands-on InfoSec Manager to take pressure off the … shape the control environment, and keep the security operations and compliance moving at speed. You’ll blend GRC and technical oversight , working closely with two security engineers (vuln scanning / IDS, external pen-test liaison) and two GRC specialists. What you’ll do Drive and extend ISO27001 implementation / maintenance (UK certified; expanding … to Madrid and Manila ). Support SOC 2 Type 2 maintenance (already accredited)—expert level not required. Oversee SIEM operations with the tech team: ensure log ingestion / coverage , daily monitoring, and follow-up. Guide vulnerability management, alert triage (Alert Logic), and external pen-test cycles. Keep evidence flows tight: client questionnaires, audit responses, security awareness, and user access More ❯
Liverpool, England, United Kingdom Hybrid / WFH Options
S&W
risk assessments and due diligences on third parties and recommend mitigation actions to be implemented by third parties Assess third party adherence to the minimum-security standards and record / track deviations or concessions Operate a risk-based assurance approach to ensure key third parties continue to comply with the defined security requirements Generate MI and reporting on third … third-party vendor risk assessments and writing risk assessment reports Experience reviewing risk assessments, and SOC Type II reports for completeness and have worked with suppliers to address issues / concerns Experience managing audit returns from clients and regulators Supporting Legal and Procurement Teams with complex contract reviews / negotiations and communicating security risks / impacts to … various business (often non-technical) stakeholders Assisting writing Information Security related Policies, Processes and / or Procedures and analysing security controls Desired Experience in using good practice standards such as ISO27001, ISO 22301, ISO 9001, Cyber Essentials and NIST Experience in a Project Management Office Degree or equivalent in Information More ❯
birkenhead, north west england, united kingdom Hybrid / WFH Options
S&W
risk assessments and due diligences on third parties and recommend mitigation actions to be implemented by third parties Assess third party adherence to the minimum-security standards and record / track deviations or concessions Operate a risk-based assurance approach to ensure key third parties continue to comply with the defined security requirements Generate MI and reporting on third … third-party vendor risk assessments and writing risk assessment reports Experience reviewing risk assessments, and SOC Type II reports for completeness and have worked with suppliers to address issues / concerns Experience managing audit returns from clients and regulators Supporting Legal and Procurement Teams with complex contract reviews / negotiations and communicating security risks / impacts to … various business (often non-technical) stakeholders Assisting writing Information Security related Policies, Processes and / or Procedures and analysing security controls Desired Experience in using good practice standards such as ISO27001, ISO 22301, ISO 9001, Cyber Essentials and NIST Experience in a Project Management Office Degree or equivalent in Information More ❯
old swan, north west england, united kingdom Hybrid / WFH Options
S&W
risk assessments and due diligences on third parties and recommend mitigation actions to be implemented by third parties Assess third party adherence to the minimum-security standards and record / track deviations or concessions Operate a risk-based assurance approach to ensure key third parties continue to comply with the defined security requirements Generate MI and reporting on third … third-party vendor risk assessments and writing risk assessment reports Experience reviewing risk assessments, and SOC Type II reports for completeness and have worked with suppliers to address issues / concerns Experience managing audit returns from clients and regulators Supporting Legal and Procurement Teams with complex contract reviews / negotiations and communicating security risks / impacts to … various business (often non-technical) stakeholders Assisting writing Information Security related Policies, Processes and / or Procedures and analysing security controls Desired Experience in using good practice standards such as ISO27001, ISO 22301, ISO 9001, Cyber Essentials and NIST Experience in a Project Management Office Degree or equivalent in Information More ❯
warrington, cheshire, north west england, united kingdom Hybrid / WFH Options
S&W
risk assessments and due diligences on third parties and recommend mitigation actions to be implemented by third parties Assess third party adherence to the minimum-security standards and record / track deviations or concessions Operate a risk-based assurance approach to ensure key third parties continue to comply with the defined security requirements Generate MI and reporting on third … third-party vendor risk assessments and writing risk assessment reports Experience reviewing risk assessments, and SOC Type II reports for completeness and have worked with suppliers to address issues / concerns Experience managing audit returns from clients and regulators Supporting Legal and Procurement Teams with complex contract reviews / negotiations and communicating security risks / impacts to … various business (often non-technical) stakeholders Assisting writing Information Security related Policies, Processes and / or Procedures and analysing security controls Desired Experience in using good practice standards such as ISO27001, ISO 22301, ISO 9001, Cyber Essentials and NIST Experience in a Project Management Office Degree or equivalent in Information More ❯
One Global Experience, giving Visibility, Control and Security through expereoOne. Expereo believes in the power of Internet connectivity. As the world's largest provider of managed internet, SD-WAN / SASE, and Cloud connectivity solutions, we power enterprises and government sites worldwide, helping to enhance every business' productivity with flexible and optimal Internet performance. As a trusted partner of … and partners depends solely on the talented individuals who make Expereo a dynamic, effective, multicultural, and equitable environment. About the role Reports to: Chief Digital Officer (with quarterly Audit / Risk committee updates) The Enterprise & Network Security Director (ENS) is responsible for developing and implementing a holistic security strategy of the Expereo Enterprise Organization and the Network Products and … and key customers. Lead and mentor cross-functional security teams (Enterprise IT SecOps, Cloud Security, Network Security, Compliance, Identity). Oversee global security policies, risk management, and regulatory alignment (ISO27001, SOC2, GDPR, NIS2 / DORA, Telecom-specific regulations). Ensure security is embedded in product / service lifecycles (Internet access, SD-WAN, SASE, NaaS) and that they are More ❯
ISO27001, IT Risk, IT Compliance, IT Controls, IT Audit, Policy. Governance, Security, Surrey area Your new company A specialist organisation in the Health / Medical sector offers hybrid working in this role based in North Surrey area. Your new role You will be working in the Risk team and will design, implement & maintain the Information Security Management System (ISMS … in accordance with ISO27001 in a company that manages highly sensitive data. You will support the firm's governance, addressing areas of risk and supporting plans to address these risks, including the compilation of business continuity plans (BCP). You will work closely with colleagues in IT to enhance the technology & control frameworks regarding information security compliance & cyber threat security. … System Assurance. What you'll need to succeed You will ideally have the following experience and qualifications:Professional certifications such as ISO27001 Lead Implementer / Auditor as well as hands-on experience with auditing and maintaining accreditation for ISO27001:2022 You will have a strong background in enterprise risk More ❯
Salford, England, United Kingdom Hybrid / WFH Options
Intaso
the organisation’s GRC framework. Conduct and document risk assessments, identifying control gaps and recommending appropriate mitigations. Maintain and update internal policies and procedures to ensure compliance with ISO27001, GDPR, and other regulatory requirements. Assist with internal and external audits, including evidence gathering and control testing. Prepare and deliver compliance and risk reports for management … with stakeholders across all levels of the organisation. Essential Skills and Experience: Previous experience in a GRC, Risk, or Compliance Analyst position. Good knowledge of frameworks such as ISO27001, NIST, or COBIT. Understanding of data protection and … privacy regulations (e.g., GDPR). Excellent written, verbal, and interpersonal communication skills. Strong analytical and organisational abilities. Relevant professional certifications (e.g., ISO27001 Lead Implementer / Auditor, CISM, CRISC, CISSP) are desirable but not essential. More ❯
manchester, north west england, united kingdom Hybrid / WFH Options
Intaso
the organisation’s GRC framework. Conduct and document risk assessments, identifying control gaps and recommending appropriate mitigations. Maintain and update internal policies and procedures to ensure compliance with ISO27001, GDPR, and other regulatory requirements. Assist with internal and external audits, including evidence gathering and control testing. Prepare and deliver compliance and risk reports for management … with stakeholders across all levels of the organisation. Essential Skills and Experience: Previous experience in a GRC, Risk, or Compliance Analyst position. Good knowledge of frameworks such as ISO27001, NIST, or COBIT. Understanding of data protection and … privacy regulations (e.g., GDPR). Excellent written, verbal, and interpersonal communication skills. Strong analytical and organisational abilities. Relevant professional certifications (e.g., ISO27001 Lead Implementer / Auditor, CISM, CRISC, CISSP) are desirable but not essential. More ❯
Leeds, Yorkshire, United Kingdom Hybrid / WFH Options
PEXA Group
We encourage you to hit your personal and professional learning and development goals with our tailored programs and tools. Your wellness: We care about your holistic wellbeing Your work / life blend: We know that work is just one aspect of your life - we want to help you create your ideal work / life blend, rather than squeezing … lead our Security Operations (SOC), Security Engineering, and Information Security and Governance functions, covering everything from incident response and secure architecture to audits, lender assurance, and compliance with ISO27001 and FCA requirements.This is a senior leadership role offering the opportunity to define security strategy, strengthen governance, and protect critical systems, data, and operations. You'll … security governance, assurance frameworks, and audit processes (ISO27001, NIST, GDPR, Cyber Essentials Plus). Experience with modern security tooling such as:o Cortex XDR / Palo Alto Networkso Splunk (SIEM and dashboarding)o Abnormal Security (email security)o Prisma Cloud (cloud security posture management)o Airlock (application and API security)o Nucleus (vulnerability management More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Alexander Edward James Consulting Limited
Remote based The Role We are seeking a highly skilled DevOps / Infrastructure Engineer for a scaling SaaS firm within the Resource Management space. You will play a pivotal role in designing, automating, and managing secure, scalable, and resilient cloud infrastructure on Microsoft Azure , while ensuring round-the-clock service continuity and alignment with ISO27001 … scalability, and security. Develop and maintain infrastructure-as-code and automation frameworks to streamline deployment and operations. Lead and test disaster recovery and business continuity plans to guarantee 24 / 7 service resilience. Support compliance and governance initiatives, including ISO27001 security standards. Monitor system health, performance, and security; proactively identify and mitigate risks. Collaborate … DevOps. Participate in on-call rotations, providing rapid response to critical issues. Requirements Proven experience managing and scaling Azure cloud environments . Strong background in DevOps practices , automation, CI / CD, and setting up infrastructure-as-code (e.g., Terraform, ARM, Bicep) Hands-on expertise in disaster recovery planning and execution . Solid understanding of information security , including ISOMore ❯
and successful candidates will be considered temporary contingent employees. Duration of projects vary, and details will be communicated upon an offer of employment. Project details Desired Skills : qualified lawyer / paralegal Desired Language - Native / Fluent in : Albanian Anticipated Start Date: (to be confirmed) Estimated Duration : TBC (possible extension) Required Hours : 40 hours a week, Monday – Friday ( possible … overtime) Assignment rate: 40 £ / h Location: Remote Work No concurrent document review permitted for the duration of this project Qualifications & Requirements Bar Admission / active Attorney’s License in the UK Experience in electronically reviewing documents in complex litigation matters using our various review platforms including KLDiscovery, Nebula, EDR, and Relativity is preferred but not required Assist … a 2014 Ernst & Young Entrepreneur of the YearTM. Additionally, KLDiscovery is an Orange-level Relativity Best in Service Partner, a Relativity Premium Hosting Partner and maintains ISO/IEC27001 Certified data centers. KLDiscovery is an Equal Opportunity Employer. More ❯
Crewe, England, United Kingdom Hybrid / WFH Options
DCS Technology
the organisation’s security posture. You’ll collaborate closely with infrastructure, development, and compliance teams to maintain high standards of cyber resilience and uphold key frameworks such as ISO27001 and Cyber Essentials Plus . Key Responsibilities: • Lead threat detection, incident response, and vulnerability management activities • Strengthen cyber security posture across cloud, infrastructure, and applications • Provide … expert guidance to development teams on secure SDLC practices • Maintain compliance with ISO27001 and Cyber Essentials Plus standards • Mentor junior … analysts and support SOC process development Key Skills & Experience: • Strong technical background in cyber security • Experience with application, cloud (AWS) , and infrastructure security • Proven hands-on experience with EDR / NDR tools , particularly CrowdStrike • Proficient with Linux and databases such as MySQL , PostgreSQL , Apache , and PHP • Knowledge of ISO27001 , Cyber Essentials , and general security More ❯
warrington, cheshire, north west england, united kingdom Hybrid / WFH Options
DCS Technology
the organisation’s security posture. You’ll collaborate closely with infrastructure, development, and compliance teams to maintain high standards of cyber resilience and uphold key frameworks such as ISO27001 and Cyber Essentials Plus . Key Responsibilities: • Lead threat detection, incident response, and vulnerability management activities • Strengthen cyber security posture across cloud, infrastructure, and applications • Provide … expert guidance to development teams on secure SDLC practices • Maintain compliance with ISO27001 and Cyber Essentials Plus standards • Mentor junior … analysts and support SOC process development Key Skills & Experience: • Strong technical background in cyber security • Experience with application, cloud (AWS) , and infrastructure security • Proven hands-on experience with EDR / NDR tools , particularly CrowdStrike • Proficient with Linux and databases such as MySQL , PostgreSQL , Apache , and PHP • Knowledge of ISO27001 , Cyber Essentials , and general security More ❯
Crewe, Cheshire, England, United Kingdom Hybrid / WFH Options
DCS Recruitment
the organisation's security posture. You'll collaborate closely with infrastructure, development, and compliance teams to maintain high standards of cyber resilience and uphold key frameworks such as ISO27001 and Cyber Essentials Plus . Key Responsibilities: * Lead threat detection, incident response, and vulnerability management activities * Strengthen cyber security posture across cloud, infrastructure, and applications * Provide … expert guidance to development teams on secure SDLC practices * Maintain compliance with ISO27001 and Cyber Essentials Plus standards * Mentor junior … analysts and support SOC process development Key Skills & Experience: * Strong technical background in cyber security * Experience with application, cloud (AWS) , and infrastructure security * Proven hands-on experience with EDR / NDR tools , particularly CrowdStrike * Proficient with Linux and databases such as MySQL , PostgreSQL , Apache , and PHP * Knowledge of ISO27001 , Cyber Essentials , and general security More ❯
Provide consultancy on risk mitigation, incident response planning, and disaster recovery. Analyse security events, incidents, and potential threats. Policy Development And Compliance Develop security documentation in accordance with ISO27001, CIS Controls, and other relevant standards. Ensure ongoing compliance with industry regulations and internal governance requirements. Threat Intelligence And Vulnerability Management Stay current on new threats … vulnerabilities, and regulatory changes (e.g., GDPR, ISO27001). Conduct threat modelling assessments for new interconnected technologies. What We’re Looking For Strong ability to identify, assess, and prioritise security risks across systems, applications, and third-party vendors. CISSP qualification Strong understanding of ISO27001, CIS Controls, GDPR and familiarity with NIST. More ❯
Information / Cyber Security Engineer – Lead the Future of Cyber, Governance & Digital Health Innovation 🌍 Location: Remote-first (Bristol, Bournemouth, London offices – 1–2 days a month onsite) Salary: Up to £75,000 + Private Healthcare + Amazing Holidays + Pension + Birthday Off Reporting to: The CTO (a visionary leader shaping the future of digital health) Interviews: This week … day one. 🌳 Threat Modelling & Vulnerability Management – Proactively identify, assess, and mitigate risks. 🌳 ISMS Ownership – Lead and maintain the Information Security Management System end-to-end. 🌳 Certifications & Compliance – Drive ISO27001, Cyber Essentials Plus & SOC 2 readiness, certification, and ongoing compliance. 🌳 Incident Response Leadership – Build, refine, and lead incident response & security operations. 🌳 Security Culture & Training – Develop training … Lead security change management & governance reporting, spotting trends to inform leadership decisions. 🌳 Stakeholder Partnership – Be the security conscience for internal & external teams, giving clear, actionable guidance. Key Deliverables 🌳 ISO27001 & Cyber Essentials Plus certification & recertification 🌳 SOC 2 Type I & Type II readiness & audits 🌳 Up-to-date security risk register & treatment plans 🌳 Regular internal security audits & training More ❯
which is responsible for delivering secure IT services in an international context. This role supports various ongoing security operations and new initiatives, with a strong focus on administering the ISO27001-certified Information Security Management System (ISMS). You will also contribute to the design and execution of future security programs as a member of the Global IT Security Team. Location … e.g., CISM, CISSP) and have knowledge of ISO27001 and ISAE 3402; You are familiar with security technologies such as XDR, EDR, SIEM, NAC, IDS / IPS, and SASE; You have experience with incident response, risk assessment, and security policy development; You have excellent command of both Dutch and English, in spoken and written communication. … which is responsible for delivering secure IT services in an international context. This role supports various ongoing security operations and new initiatives, with a strong focus on administering the ISO27001-certified Information Security Management System (ISMS). You will also contribute to the design and execution of future security programs as a member of the Global IT Security Team. Location More ❯
Hereford, Herefordshire, England, United Kingdom Hybrid / WFH Options
IMT Resourcing Solutions
Benefits: Professional development, and a collaborative culture Our client, a leading technology services provider, is seeking an IT Security Analyst to strengthen its information security framework and support ISO27001 compliance activities. This role is ideal for someone with a strong understanding of security standards who enjoys embedding best practice across the business. What you’ll … do Support and maintain compliance with ISO27001 standards Conduct and coordinate internal audits, risk assessments, and remediation activities Develop and update security policies, procedures, and documentation Work closely with technical teams to ensure security controls are implemented effectively Monitor and report on security metrics and compliance performance You’ll work closely with IT, compliance, and … leadership teams to maintain a strong security posture and drive continuous improvement across the organisation. What we’re looking for Experience working with ISO27001 frameworks and audits Knowledge of IT security controls, governance, and risk management Strong analytical and documentation skills Excellent communication and stakeholder engagement abilities A proactive mindset with attention to detail and More ❯