51 to 75 of 732 Remote/Hybrid ISO/IEC 27001 Jobs

security. Certification such as Certified Information Systems Security Professional (CISSP) strongly preferred. Deep understanding of cybersecurity principles, frameworks (such as NIST, ISO / IEC 27001), and compliance standards. Experience with financial service regulations and regulations such as FCA, SEC, MAS, DORA. Proficient knowledge … network security principles and controls such as Firewalls, IPS / IPD, TCP / IP, DHCP, and DNS Extensive experience in securing Operating Systems such as Windows, UNIX / Linux and Mac systems. This includes security access rights, implementing configuration best practicesKnowledge of cloud service models (IaaS, PaaS ...

assurance across Microsoft, AWS, and Databricks environments. You will collaborate with our managed SOC, investigate alerts, close monitoring gaps, and ensure ISO / IEC 27001:2022 controls are backed by complete, audit-ready evidence and responses to client security questionnaires. Role involves monitoring ...

security operating procedures. Liaison with Security Accreditors and Security Assurance Coordinators in support of security Accreditation. What you’ll bring: Practical experience of ISO27001 / 27004 / 27005 and NIST Risk Management Framework (RMF). Experience working with a security risk management system for highly regulated products based … could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: https: / / careers.uk.leonardo.com / gb / en / security-and-vetting Why join us Time to Recharge: Enjoy generous leave with ...

vendor, multi-cloud, hybrid data center networks at scale while driving network performance & resiliencyDeploy and manage cloud constructs such as subnet allocations, routing-tables / associations, VPCs, VPC-peering / PrivateLink, Hub-spoke topologies, gateways, direct connectsDevelop and maintain IaC (ansible, Terraform) and automation tooling throughout CI / … network solutions meeting regional compliance and data sovereignty requirements (ISO 27001, Cyber Essentials Plus, UK G-Cloud, EU data residency / GDPR, PCI-DSS)What You Need:Proven track record in driving agile cross-functional projects to completion independently with minimal supervision7+ years expert design ...

including when required, leading project technical support specialists, liaise with third parties and other project architects, service and project managers. Author or critically peer / quality review technical content of proposals and design documents for complex solution developments, incorporating strategic level risks and remedies. Ensure all testable requirements (functional … functional, derived) are identified captured in a RCTM / VVCM and are suitable for passing into the test function. Develop IT strategies and secure, highly resilient architecture solutions for significant areas of the customers’ business, can work with customers to understand their business strategy and propose technology solutions ...

Notified Body audits, with a focus on Design and Development aspects. Champion compliance in software development by translating complex and opaque IEC / ISO standards into clear, actionable processes that engineering teams can follow. What we will look for SaMD Experience : Prior experience working … rest easy knowing you’re doing the defining work of your career. We offer comprehensive private medical and dental cover through Bupa, 24 / 7 mental health, coaching and wellbeing support through Sonder, a £100 / month Healthy Heidi's wellness stipend, a £500 home office budget ...

multi-cloud, hybrid data center networks at scale while driving network performance & resiliency Deploy and manage cloud constructs such as subnet allocations, routing-tables / associations, VPCs, VPC-peering / PrivateLink, Hub-spoke topologies, gateways, direct connects Develop and maintain IaC (ansible, Terraform) and automation tooling throughout … / CD pipeline (Python, Go) to provision networks at scale, while improving the efficiency and velocity of network deployments Troubleshoot complex production issues and contribute to incident root-cause analysis Participate in on-call rotations Implement network solutions meeting regional compliance and data sovereignty requirements (ISO 27001 ...

Line Azure Cloud Engineer Location: London (hybrid: typically 2 days on-site; opportunities to work from Croydon / London area and possible moves towards Corsham / Farnborough based on project needs) Duration: 3 month initial + extensions Clearance : SC preffered / eligable candidates UMBRELLA ONLY … with dependable 3rd line support. What you'll be doing: * Build and manage cloud infrastructure in Microsoft Azure (IaaS-first, with exposure to SaaS / PaaS as needed) * Provide 3rd line infrastructure support for cloud and on-premises services and business applications * Support ongoing business projects-configuring and rolling ...

understand business requirements and convert them into technical specifications and solutions. Experience working alongside functional consultants and business stakeholders. Familiarity with SAP S / 4HANA development concepts and frameworks. Exposure to SAP BTP and modern SAP development tools. Experience working within Agile delivery methodologies. Strong analytical and problem-solving … Fiori, SAP UI5, and OData development. Exposure to CDS Views and RAP development frameworks. Experience working within consultancy or client-facing project environments. Location / Working Pattern Based in Slough, UK Hybrid working arrangement. Required onsite in Slough Tuesday to Thursday each week. Remote working available on remaining working ...

best practices.Perform security code reviews and act as a technical SME for engineering and compliance teams.Security Testing & DevSecOpsDeploy and manage automated security tools (SCA / SBOM, SAST, DAST, Secret Scanning) within CI / CD pipelines.Apply manual network / application testing, custom scripting, and unit test cases … incident response, including root cause analysis, mitigation strategies, and creation of technical runbooks.Apply Detection Engineering principles, setting baseline app security parameters and maintaining IDS / IPS rules.Conduct post-incident analysis and lessons learned and refine response strategies.Monitor emerging threats proactively integrate new protections and ensure compliance with standards (OWASP ...

distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling — https: / / enginebystarling.com / careers / engineering / We're looking for a Senior Infrastructure Engineer to help us design, build … including cryptographic key ceremonies Experience designing hybrid connectivity from GCP to co‐located Payment HSMs using Network Connectivity Center (NCC), Cloud VPN and Dedicated / Partner Interconnect Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI / CD Experience with observability tooling ...

distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling — https: / / enginebystarling.com / careers / engineering / We're looking for a Senior Infrastructure Engineer to help us design, build … including cryptographic key ceremonies Experience designing hybrid connectivity from GCP to co‐located Payment HSMs using Network Connectivity Center (NCC), Cloud VPN and Dedicated / Partner Interconnect Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI / CD Experience with observability tooling ...

distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling — https: / / enginebystarling.com / careers / engineering / We're looking for a Staff Infrastructure Engineer to help us design, build … including cryptographic key ceremonies Experience designing hybrid connectivity from GCP to co-located Payment HSMs using Network Connectivity Center (NCC), Cloud VPN and Dedicated / Partner Interconnect Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI / CD Experience with observability tooling ...

distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling — https: / / enginebystarling.com / careers / engineering / We're looking for a Staff Infrastructure Engineer to help us design, build … including cryptographic key ceremonies Experience designing hybrid connectivity from GCP to co-located Payment HSMs using Network Connectivity Center (NCC), Cloud VPN and Dedicated / Partner Interconnect Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI / CD Experience with observability tooling ...

Perform security code reviews and act as a technical SME for engineering and compliance teams. Security Testing & DevSecOpsDeploy and manage automated security tools (SCA / SBOM, SAST, DAST, Secret Scanning) within CI / CD pipelines. Apply manual network / application testing, custom scripting, and unit test cases … response, including root cause analysis, mitigation strategies, and creation of technical runbooks. Apply Detection Engineering principles, setting baseline app security parameters and maintaining IDS / IPS rules. Conduct post-incident analysis and lessons learned and refine response strategies. Monitor emerging threats proactively integrate new protections and ensure compliance with ...

This includes: NCSC NIS Guidance NCSC Cyber Assessment Framework (CAF) ISO 27001 ISO 27005 NERC CIP ISA-99 / IEC 62443 NIST Cybersecurity Framework (NIST CSF) The successful candidate should be comfortable applying security standards and frameworks to real-world … knowledge sharing, coaching and mentoring. Work on projects where cybersecurity has a direct impact on the resilience and security of critical services. Reference: AMC / RHU / OT #ryhu ...

Auditor or Internal Auditor would be highly desirable. Experience carrying out ISO gap assessments, readiness assessments or control reviews. Strong programme management / PMO experience, with the ability to manage actions, risks, dependencies and deliverables. Comfortable working with senior stakeholders in a client-facing environment. Strong communication … European stakeholders or international organisations would be beneficial. Contract: Contract: Initial 4 months Hours: 20 hours per week Location: London - Hybrid Working Industry: Payments / Financial Services Working Pattern: Part-time contract Inside IR35 Robert Half Ltd acts as an employment business for temporary positions and an employment agency ...

Auditor or Internal Auditor would be highly desirable. Experience carrying out ISO gap assessments, readiness assessments or control reviews. Strong programme management / PMO experience, with the ability to manage actions, risks, dependencies and deliverables. Comfortable working with senior stakeholders in a client-facing environment. Strong communication … European stakeholders or international organisations would be beneficial. Contract: Contract: Initial 4 months Hours: 20 hours per week Location: London - Hybrid Working Industry: Payments / Financial Services Working Pattern: Part-time contract Inside IR35 Robert Half Ltd acts as an employment business for temporary positions and an employment agency ...

seeking a Senior Identity Security Engineer to design, implement and enhance large‐scale identity environments across Microsoft Active Directory, Entra ID, PKI / ADCS and modern hybrid platforms. This role combines hands‐on engineering with leadership in security design, implementation and assessment, requiring someone who can resolve complex identity … providing outstanding client experience and delivering exceptional results that are aligned with business priorities. Our commitment to security and quality is reinforced by our ISO27001 and ISO9001 certifications (UKAS), as well as our CREST approved penetration testing and SOC capabilities. Additionally, we are an IASME Cyber Essentials Certification Body ...

Party Security ManagerInternal AuditRisk and Compliance FunctionsData Privacy and DPO FunctionTechnology and Change TeamsHuman ResourcesLearning & DevelopmentBusiness UnitsExternal Auditors and AssessorsOperational Resilience FunctionPerson SpecificationKnowledge / Experience / Skills:Strong experience in cyber security operations, incident response or security monitoring.Experience managing security service providers, SOC or MDR capabilities.Knowledge of cyber … NIST CSF, FCA / PRA expectations and operational resilience requirements.Strong stakeholder management, communication and reporting skills.Qualifications:Minimum of one below is required:ISO27001 Lead Implementer or Lead AuditorDesirable: CISSP (Certified Information Systems Security Professional)CISM (Certified Information Security Manager)GIAC Incident Handler (GCIH)Certified Cyber Defender (CCD) or equivalentISO ...

combine strong technical security knowledge with excellent governance, risk management and stakeholder-management skills. Skills and Experience: Experience leading cyber security, information security and / or compliance activities within a medium-to-large enterprise environment. Strong experience managing an enterprise information / cyber security risk register. Strong practical … internal and external security audits. Strong knowledge of ISO 27002 and experience delivering against its requirements. Strong knowledge of Cyber Essentials / Cyber Essentials Plus. Experience working with NIST security frameworks. Knowledge of CAF / Cyber Assessment Framework and its application to organisational security. Understanding ...

confidenceDrive secure architecture at scale* Define and assure enterprise, solution, and system-level security architectures* Apply and tailor security frameworks such as NIST, ISO 27001, SABSA and Zero Trust principles* Ensure systems are secure by design, proportionate, and aligned to mission objectivesOwn risk and assurance outcomes … could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: https: / / careers.uk.leonardo.com / gb / en / security-and-vetting**Why join us**At Leonardo, our people ...

Cyber Security Consultant / Security Architect Salary: Up to £90,000 This is a client-facing role supporting MOD and public sector environments across secure design, cyber assurance, risk management and technical security architecture. We need someone who can review technical designs, understand security risk, advise on controls, support … acceptance. Help clients align with relevant frameworks and standards, including ISO 27001, NIST, CAF, GovAssure, Secure by Design and HMG / MOD assurance expectations. Strong background in Security Architecture, Cyber Security Consultancy, Security Assurance or Secure Design. Experience working in defence, MOD, public sector, government ...

enterprise‐grade product Experience working directly with large engineering teams on the roadmap, release planning, dependency mapping, and cross‐team sequencing Current programming / scripting experience and a familiarity with DevSecOps practices in order to drive automation without compromising quality or security Strong stakeholder communication skills when translating between … engineering, product, customer‐facing teams, and leadership Exposure to security and compliance frameworks (e.g. SOC 2 / ISO 9001 / ISO 27001) Ideally, you would also have: This is not an additional list of requirements; this reflects the tech stack currently used ...

visit www.hcltech.com Job Title : Senior Vulnerability Management Engineer Location: London, UK ( Hybrid mode at client location ) Experience: 3 – 6 years in vulnerability management / information security ROLE SUMMARY The L2 Senior Vulnerability Management Engineer owns the organisation's end-to-end vulnerability management programme, spanning EUC, Data Center, Network … technology domains (endpoints, servers, network devices, web applications, cloud). • Design and maintain scan policies, asset groups, and scanning schedules in Qualys VMDR / Tenable Security Centre / Rapid7 InsightVM to ensure full coverage. • Perform risk-based vulnerability prioritisation: correlate CVSS scores with asset criticality, exposure, threat intelligence ...