76 to 100 of 113 Permanent ISO/IEC 27001 Jobs in London

workflows, and investigate access incidents while monitoring logs for suspicious activity, ensuring IAM security with broad IT and security expertise, implementing frameworks like ISO 27001, COBIT, and NIST, with preferred certifications in CISSP and SANS. Ideal Hire Candidates should come from a professional services or end more »

Practical knowledge of technical security controls (e.g. SIEM, EDR, AV, Web + Email Gateways) Strong knowledge of endpoint and server operating systems and networking ISO27001 experience preferred. Desirable Certifications: ISC2 CISSP, CCSP, or SSCP COMPTIA CASP+, CySA+, or Security+ If you are interested please email your CV to megan.seymour@stottandmay.com more »

data Carrying out regular and consistent risk assessments What my client are looking for: Experienced in implementing security solutions and tools (Azure, Kubernetes) NIST & ISO27001 SQL-based data warehouse solutions Experience with PowerBI, Nessus, CrowdStrike, SonarCloud, Sentinel If keen please apply more »

data Carrying out regular and consistent risk assessments What my client are looking for: Experienced in implementing security solutions and tools (Azure, Kubernetes) NIST & ISO27001 SQL-based data warehouse solutions Experience with PowerBI, Nessus, CrowdStrike, SonarCloud, Sentinel If keen please apply more »

candidate. The initial key challenge is around supporting the Head of Technology Risk on the SOX 404 controls but will also encompass information security (ISO27001 standards) and will work closely with the service management and business continuity teams. Key accountabilities include: Facilitating and improving the Technology Risk Management process. Ensuring … are appropriate, facilitating reporting on Compliance to relevant internal stakeholders Supporting the development and embedding of underpinning process and procedure documentation, including assisting service / business / process owners with compliance to new policies and operationalising new working practices and procedures. Monitor and report on the performance of … in a technology risk role Experience of SOX 404 controls. Experience of IT risk management within a regulated environment Understanding of regulatory frameworks e.g ISO27001, ISO31000. Any ISO27001 certifications highly desirable Good communication and stakeholder management skills Role is based in London with a hybrid model on offer. Please apply more »

Senior Security Operations Centre / SOC Analyst London / WFH to £65k Are you an experienced Security Operations Centre / SOC Analyst with a strong knowledge of SIEM? You could be progressing you career in an impactful role at a tech company that provide cyber security products … and processes from the ground up, collaborating with senior stakeholders and other teams to drive adoption and quickly building a team around you. Location / WFH: You'll be joining a diverse, international team, working in a relaxed software house environment (i.e. non-corporate, casual dress, table football), in … able to recommend the right tool for the job You have a good understanding of IT security management, policies, procedures, standards and guidelines including ISO27001 and relevant security legislation You have excellent communication and collaboration skills, with leadership experience / qualities - keen to recruit, guide and mentor a SOC more »

Senior Security Operations Centre / SOC Analyst London / WFH to £65k Are you an experienced Security Operations Centre / SOC Analyst with a strong knowledge of SIEM? You could be progressing you career in an impactful role at a tech company that provide cyber security products … and processes from the ground up, collaborating with senior stakeholders and other teams to drive adoption and quickly building a team around you. Location / WFH: You'll be joining a diverse, international team, working in a relaxed software house environment (i.e. non-corporate, casual dress, table football), in … able to recommend the right tool for the job You have a good understanding of IT security management, policies, procedures, standards and guidelines including ISO27001 and relevant security legislation You have excellent communication and collaboration skills, with leadership experience / qualities - keen to recruit, guide and mentor a SOC more »

data protection. Update and maintain the information security management system (ISMS) and relevant standards, procedures and guidance. Create and execute a strategy to obtain ISO27001 certification. Create risk & compliance registers, including KPI’s to review during governance meetings. Engage directly with clients on information security requests. Build a strong internal more »

security tools like SIEM, IDPS, Cloud Security, and EDR is a big plus. Experience with Zscaler, CrowdStrike, or Qualys Web3 and DeFi Experience with ISO27001 and SOC2 If you are an experienced Security Engineer looking to step up into a Lead Security Engineer position at a rapidly growing digital assets more »

Responsibilities: Manage and fortify the Information Security Management System (ISMS). Identify and address internal and third-party security risks. Support external audits for ISO27001, ISO27017, ISO27701, ISO22301 and Cyber Essential Plus. Ensure that third-party suppliers or vendors meet certain security standards and requirements. Conduct internal audits and oversee … Skills: Experience in information security governance, risk and compliance. Cyber Essential Plus, GDPR and Data Protection Act 2018. Strong problem-solving and communication skills. ISO27001 Accredited You must be able to pass an SC Clearance What's in it for you? Flexible / hybrid working Private Healthcare Employee discount more »

Are you ready to take your IT expertise to the next level? A London-based Company is seeking an experienced IT Consultant / Engineer / IT Manager to become one of the team. They are a thriving and growing business specialising in IT Management, Device and Identity Management … ll work alongside fellow tech experts in a supportive environment. Your responsibilities will encompass: Consultancy Services : Conduct IT audits, risk assessments, and ensure compliance (ISO27001, SOC2, Cyber Essentials+), and formulate IT policies. IT Security: Manage malware, AV, password security, MFA, SSO, vulnerability scanning, penetration testing, and encryption. Device Management: Handle … Device Management (MDM) using Kandji, Apple Device Enrolment Program (DEP), and asset management. Business Continuity : Design fault-tolerant systems, ensure data protection, and create / manage business continuity plans. Technical Support : Provide end-user support, training, and documentation. Connectivity: Manage firewalls, routers, switches, wireless access points, DNS, telephony, broadband more »

look to add a new member to the Information Security team. Partnering with the Information Security Manager, you'll ensure the business aligns to ISO27001, conduct audits related to ISO27001 & NIST, generate InfoSec dashboards & metrics, as well as handle the onboarding of new suppliers. Due to the small size of … Onboard suppliers and perform risk assessments, third party questionnaires, due diligence, gap analysis and make suggestions accordingly Ensure Security best practice is followed and ISO27001 compliance is met Generate metrics / dashboard for management reviews Assist in overseeing the ISMS from a GRC perspective Provide Information Security awareness training … to tech & non-tech teams Plan audits, risk assessments and control implementations related to ISO27001 Provide a sound understanding of Cloud Security & Cloud Infrastructure principles / controls Assist the SecOps team with incident handling, response and escalations, as well as ensuring processes are documented in line with ISO27001 Manage more »

to participating in strategy development as a key leader within our clients security function. This would be a great opportunity for an experienced Cyber / Information Security Engineer who is looking to stay hands on technically, but have an element of leadership implemented into their next position! Main responsibilities … best practice and recommend necessary changes across our clients security function. To be considered for this role, you should have: Experience working in Information / Cyber Security, ideally in a technical hands on / engineering role. Hands-on experience with security tools such as firewalls, intrusion detection / … solutions. Experience with cloud security principles and practices with either AWS or Azure. Experience implementing policies and procedures in alignment with standards such as ISO27001, NIST, PCI-DSS, Cyber Essentials, and similar. Our client offers an attractive benefits package that includes a bonus scheme, private medical care, pension, life assurance more »

network, and applications. Maintain Windows server and Unix based servers, O365 and administer MS Azure. Implement and maintain information security controls in line with ISO27001, NIST and DORA standards. Support the Bank’s VMware and Citrix virtual infrastructure. Maintain the bank’s Business Continuity and Disaster recovery plan and procedure. … Knowledge Required: A minimum of 5 years Infrastructure, System, Network support experience Relevant certification such as, CCNA, CCNP, MCITP, VCP, or CCA, etc Banking / Financial sector experience is an advantage Very good VMware and Citrix administration experience Windows and Linux Servers administration and support skills Experience with scripting … Strong knowledge of implementing and effectively developing helpdesk and IT operations best practices, including experience of security, storage, data protection, and disaster recovery protocols ISO27001 experience is an advantage Very good virtualisation, Active Directory, GPO, Access control and LAN / WAN experience Analytical thinker and problem solver with excellent more »

Information Assurance Officer – 12 Month FTC - London - £70k - Legal ISO27001 | Cyber Essentials | Compliance | Risk Assessments | Documentation | Policies Salary: £70,000 Location: London Are you an Information Assurance professional, looking for a new challenge in your career? Do you have demonstrable experience of working with Information Security Management Systems and Security … Programmes? Have you previously worked in line with ISO27001:2022 standards? Interested in working for an innovative and award-winning company who support the development of your career? If so, I have a fantastic opportunity for you! I’m looking to speak with individuals who are comfortable producing and developing … Key Responsibilities Assist with the design, development and operation of the company’s Integrated Information Security Management System and Security Programme in line with ISO27001:22 Work with your immediate team and the wider business on compliance projects Produce policies and documentation to apply security requirements Collaborate with internal and more »

of the likes of CIS) Experience of Security Assurance Experience with managing Third Party relationships Knowledge of major compliance frameworks such as CIS and ISO27001 Experience with Data Privacy would be a big bonus Certifications such as CISSP, CISM, CRISC, ISO LI, ISO LA Sound interpersonal … throughout. You would be required to be on site 3 days per week at their Central London office and base salary is upto £95 / 100,000 for the right person. Get in touch if you would like to learn more. more »

The purpose for this new role is to support the Business Transformation, Resilience & Oversight Manager and the direct team in both: 1) the execution / ongoing management of the banks Cyber Resilience activities & also 2) the new Cyber Security and Digital Operational Resilience Act (DORA) related capabilities. This is … reviews on third parties' cyber resilience as part of the third-party risk management process. Act as cyber resilience SME and champion on projects / change initiatives. Experience Required: Around 5 years of experience within Financial Services or Consultancy (familiarity with banking products and services). Comprehensive understanding and … including experience in information security, business continuity planning, business impact assessments, crisis management and cyber security. Working knowledge and / or expertise of ISO27001, NIST, CAF or other industry standards. Knowledge and general understanding of EU Digital Operational Resilience Act (DORA) and Network and Information Security (NIS2) Directive. Knowledge more »

The purpose for this new role is to support the Business Transformation, Resilience & Oversight Manager and the direct team in both: 1) the execution / ongoing management of the banks Cyber Resilience activities & also 2) the new Cyber Security and Digital Operational Resilience Act (DORA) related capabilities. This is … reviews on third parties' cyber resilience as part of the third-party risk management process. Act as cyber resilience SME and champion on projects / change initiatives. Experience Required: Around 5 years of experience within Financial Services or Consultancy (familiarity with banking products and services). Comprehensive understanding and … including experience in information security, business continuity planning, business impact assessments, crisis management and cyber security. Working knowledge and / or expertise of ISO27001, NIST, CAF or other industry standards. Knowledge and general understanding of EU Digital Operational Resilience Act (DORA) and Network and Information Security (NIS2) Directive. Knowledge more »

solutions, including all the 3rd party managed services Maintain the overall security of Company network, systems, and data Monitor security access and manage IDS / IPS configurations Establishing and implementing security 'best-practice' standards as well as departmental policies and procedures Responsible for Security scanning and the efficient remediation … Developing and managing security plans with vendors Audit activities of administrators and conduct Security awareness training Must have: Bachelor's Degree in Computer Science / … Information Technology or equivalent experience Demonstrable skills and capability in Security leadership and 3rd party management experience CISSP certification preferred. Compliance knowledge required in ISO27001, PCI and GDPR. Possibly a certified ethical hacker Knowledge of Security technologies is essential, such as network appliances, firewall administration, AD, IAM, PAM, SIEM, UEBA more »

of security and risk frameworks, plus regulatory compliance frameworks e.g. NIST, Cobit, ISO 27001. Understanding of OWASP, MITRE, CVSS and other standards / frameworks relevant to application security and vulnerability management. Experience with cloud technologies, preferably Azure and AWS. Familiarity with security methodologies: Attack and Defensive, Threat more »

security vulnerabilities and attack vectors. Experience with vulnerability scanning tools such as Nessus, Qualys, or similar. Familiarity with industry standards and frameworks such as ISO27001, NIST, PCI-DSS, GDPR, or similar. Excellent communication and interpersonal skills, with the ability to effectively engage with stakeholders at all levels. Our client offers … pat leave, pension, life assurance, and much more! If this role is of interest, please apply or reach out to Madison – 0203 854 2230 / m.brookes@locke-mccloud.com Locke & McCloud are the UK’s leading cyber security & information security staffing company – through having a sole focus on the cyber more »

protection, including security information and event management (SIEM), user and entity behaviour analytics (UEBA), point products like anti-virus (AV) and intrusion detection system / intrusion prevention system (IDS / IPS) and penetration testing. The Service Delivery team consists of approximately 20 staff who support and operate the … including all the 3rd party managed services Maintain the overall security of Company's network, systems, and data Monitor security access and manage IDS / IPS configurations Establishing and implementing security 'best-practice' standards as well as departmental policies and procedures Responsible for Security scanning and the efficient remediation … conduct Security awareness training Requirements Demonstrable skills and capability in Security leadership and 3rd party management experience CISSP certification preferred. Compliance knowledge required in ISO27001, PCI and GDPR. Possibly a certified ethical hacker Knowledge of Security technologies is essential, such as network appliances, firewall administration, AD, IAM, PAM, SIEM, UEBA more »

Cyber Security GRC Specialist Salary - £130-150k + 40-60% Bonus Location – London (2 / 3 days per week in office) I’m currently working with one of the fastest growing and most established Crypto Trading and Market-Making firms worldwide, who are looking to hire a Cyber … driving the adoption and implementation of security best practices. Lead on all security assurance activities including all information security related audits, specifically focused on ISO27001 and NIST. Work with the Global CISO to develop and define a control framework to operate securely and ensure continuous assurance and monitoring. Required Skills … Significant knowledge of and experience implementing various security frameworks, particularly ISO27001 and NIST. Knowledge of and significant exposure to information security risk management frameworks and compliance practices. Prior experience leading on projects and managing third-party supplier relationships. Genuine drive and motivation – ability to successfully handle multiple tasks, working to more »

response management, including incident detection, analysis, and remediation. In-depth knowledge of network security principles, protocols, and technologies. Experience working with standards such as ISO27001, NIST, PCI-DSS, and similar. Our client offers an attractive benefits package that includes a bonus scheme, private medical care, pension, life assurance, gym membership … scheme, generous annual leave and more! If this role is of interest, please apply or reach out to Madison – 0203 854 2230 / m.brookes@locke-mccloud.com Locke & McCloud are the UK’s leading cyber security & information security staffing company – through having a sole focus on the cyber & information security more »

comfortably in a fast-paced environment, this person will have some or all of these skills: Previous experience in information security, cyber roles and / or technical domains. Ability and willingness to manage complex projects. Excellent presentational skills, written work and attention to detail. Prior consulting experience. Demonstrable knowledge … cyber knowledge, including: Cloud Security. Identity and Access Management. Software development lifecycle. Operational Technology. Industry accreditation such as SANS Institute, Security+, CISM, CISSP or ISO27001; OUR BENEFITS We offer thoughtful, balanced rewards and support to help our people do their best work and live their lives outside it, this includes more »