and Compliance (GRC): Develop and implement information security policies, procedures, and standards aligned with industry best practices. Ensure compliance with relevant regulations, including ISO27001, ISO 9001 and GDPR. Engaging with key company stakeholders, assessing and actively managing risk through effective mitigation strategies. 5. … ISO27001 & ISO 9001 Compliance: Lead ISO27001 & ISO 9001 compliance activities. Maintain our integrated management systems for information security and quality management. Monitor and audit controls to ensure ongoing compliance. Qualifications Proven experience in information security management. … Strong knowledge of information security frameworks and regulations such as, ISO27001, NIST 800 series, NERC-CIP, NIS and GDPR requirements. Knowledge and experience of quality management systems, especially in an ISO 9001 certified environment. Desirable Qualifications Degree in Information Security, Computer Science, or more »
Glasgow, Lanarkshire, Scotland, United Kingdom Hybrid / WFH Options
3173 Group
Based from Glasgow / Belfast / Manchester or Remote based on circumstance Founded in 2000, 3173 has a number of serviced offices spread across the UK, with offices in Belfast, Glasgow, London, Manchester, Birmingham, Bristol and Leeds. 3173 has several different companies within the group, including Dalriada Trustees … all Stakeholders in order to assess the suitability and resilience of our Key Suppliers. Contribute to the monitoring of an effective Business Continuity Plan / Disaster recovery plan by working with Stakeholders to update the plan and to ensure the plan is tested at least annually. Contribute to the … Required for the Role A strong quality management background obtained from significant and relevant experience in a similar role. Competence and experience in implementing / assessing / monitoring ISO management standards, ISO 9001:2015 and or ISO 27001. Experience in auditing and more »
Glasgow, Lanarkshire, Scotland, United Kingdom Hybrid / WFH Options
Sanderson Recruitment
through our risk management framework and ensuring key risks are reported to the CISO. Performing regular internal security audits aligned to ISO/IEC27001 and SOC2 controls. Developing our security awareness training programme aligned with internal security policies. Comfortable engaging with customers … NCSC CAF), supporting processes and toolsets. Ability to breakdown and solve complex problems across multiple domains and successfully lead the recovery of major and / or complex security incidents. Knowledge and experience of threat hunting and problem-solving through reviewing logs and identifying anomalous activities (Desirable). For any more »
Edinburgh, Scotland, United Kingdom Hybrid / WFH Options
Gresham Hunt
successful candidate will have: Extensive experience within Risk Management within the Financial Services industry. Experience in IT and Cloud controls testing is essential. Knowledge / experience with major cloud service providers, preferably AWS. Knowledge of various industry frameworks and controls such as ITIL, NIST, COBIT, ISO27001 … / 2. A broad, high-level IT or Cybersecurity background with exposure to areas such as cloud security, security architecture, IT infrastructure and security governance would be beneficial. Hold relevant industry certifications such as CCSP, CCSK, GCSA, CRISC Excellent communication skills with the ability to liaise with senior stakeholders more »
workload, and work as part of a small team. Self-motivation and an eagerness to take on new challenges. Experience of working in an ISO27001/ IOS 9001 environment and using ITIL and Agile working practices Compensation and Benefits Competitive salary, dependent upon experience 33 days holiday (inclusive of more »
IT supplier and contract data. Ensure IT contracts comply with GDPR and ISO 27001. Manage IT purchasing within budget Essential Criteria: HNC / HND or equivalent experience Previous experience in an IT-related procurement / administration (would be advantageous). Strong organisational and communication abilities Experience … in IT-related procurement and administration (advantageous) Desirable Criteria: Intermediate Excel skills Supplier engagement / management experience ITIL v4 is beneficial but not essential In return: Hybrid environment Exceptional learning & development opportunities. Excellent salary plus excellent benefits including: 35 hours per week. Non-contributory pension scheme (12.5%) 30 days … following job titles or key skills: IT Procurement, IT Administration, 1st line support, This is a forward-thinking organisation that offers Equal Employment Opportunity / Affirmative Action Employer, promoting diversity and inclusion. How to Apply: Send your CV to joanne.fletcher@edenscott.com. For alternative formats or accommodations, call 07471353279 for more »
Glasgow, Lanarkshire, Scotland, United Kingdom Hybrid / WFH Options
Cathcart Technology
The business is currently embarking on a digital journey , so you will be working alongside the digital team to work on initiatives and current / upcoming projects. You will use your strong knowledge and experience to apply best practices and regulatory requirements to assess and mitigate security risks across … audits, ensuring compliance with policies and regulatory requirements , and providing security awareness training and guidance to all staff. You will have the following skills / experience: - ** Experience within a similar role ** Knowledge of regulatory requirements / data protection - GDPR, CCPA ** Certifications such as CISA and CISM , or similar … would be preferred ** Extensive knowledge of information security principles, best practices, and standards - ISO27001 A really exciting time to join the company as they continue their digital journey, a chance to put your strong skill set and knowledge to use, as well as learning cross more »
infrastructure and pipelines, ensuring seamless integration of security measures throughout their web and mobile application development lifecycle. Key Responsibilities: Architect and maintain robust CI / CD pipelines for web and mobile (iOS and Android) applications, incorporating industry-leading security practices Champion Infrastructure as Code (IaC) principles to automate cloud … paced environment Bonus Points: Experience in the automotive or gas & oil industry, understanding specific security challenges and compliance requirements Knowledge of compliance frameworks (ISO27001, NIST Cybersecurity Framework) Certifications in cloud security or DevSecOps (AWS Certified Security - Specialty, Certified Kubernetes Security Specialist) Why This Role is more »
Stirling, Causewayhead, Stirling and Falkirk, United Kingdom Hybrid / WFH Options
Lorien
knowledge of security controls, identifying risk areas, risk treatment and control mitigation, focussing on driving process and change, making sure policies are compliant with ISO27001 and GDPR. The position: Roles and responsibilities for this role include: Audit and develop the existing network systems and infrastructure, focusing on policies and processes … Validation (CSV) requirements A background developing and executing business IT solutions An understanding of (at least one or more) compliance programs such as GDPR, ISO27001, SOC 2, PCI, NIST 800-53, FEDRAMP, or other security / privacy frameworks Security certifications such as Security+, CISM, CISA, CISSP, etc Benefits: In more »
Glasgow, Lanarkshire, Scotland, United Kingdom Hybrid / WFH Options
SDL Solutions Limited
IT Security / Cyber Engineer This is a great opportunity to work with a fast-growing organisation. They are looking for an IT Security / Cyber Engineer to join their team. They are keen to build the team within the Glasgow office, although the role is hybrid with … Ideally experience with Microsoft Defender stack Knowledge of essential cybersecurity principles and practices Excellent communication, stakeholder management, and collaboration skills Information Management Standards for ISO27001, Cyber Essentials+, and AAF 1 / 20 certification and accreditations Salary up to £50,000 and is offering: - pension, life / private medical … lots of additional benefits. THIS ROLE DOES NOT OFFER SPONSORSHIP AND IS CURRENTLY ONLY ACCEPTING APPLICANTS ELIGIBLE TO WORK IN THE UK. IT Security / Cyber Engineer more »
Glasgow, Lanarkshire, Scotland, United Kingdom Hybrid / WFH Options
SDL Solutions Limited
Ideally experience with Microsoft Defender stack Knowledge of essential cybersecurity principles and practices Excellent communication, stakeholder management, and collaboration skills Information Management Standards for ISO27001, Cyber Essentials+, and AAF 1 / 20 certification and accreditations Salary up to £50,000 and is offering: - pension, life / private medical more »