2,202 Iss jobs in the United Kingdom

• Design, implement, and maintain security controls for cloud infrastructure (AWS, Azure, GCP).
• Monitor cloud environments for security threats, vulnerabilities, and suspicious activities using SIEM and other security tools.
• Conduct security assessments and penetration testing to identify and remediate weaknesses.
• Develop and enforce cloud security policies, standards, and procedures.
• Respond to and investigate security incidents, performing root cause analysis and implementing corrective actions.
• Manage identity and access management (IAM) solutions for cloud platforms.
• Collaborate with IT and development teams to ensure security is integrated into the software development lifecycle (DevSecOps).
• Stay up-to-date with the latest cloud security threats, vulnerabilities, and industry best practices.
• Develop and deliver security awareness training to employees.
• Manage security documentation and compliance requirements (e.g., ISO 27001, SOC 2).
• Participate in incident response planning and tabletop exercises.
• Evaluate and recommend new security technologies and solutions.
• Provide technical guidance and mentorship to junior security team members.

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• Minimum of 5 years of experience in information security, with at least 3 years focused on cloud security.
• In-depth knowledge of AWS, Azure, or GCP security services and best practices.
• Experience with SIEM tools (e.g., Splunk, LogRhythm), IDS/IPS, firewalls, and endpoint security solutions.
• Proficiency in scripting languages such as Python or PowerShell for security automation.
• Strong understanding of network security, cryptography, and secure coding principles.
• Experience with vulnerability management and penetration testing methodologies.
• Relevant security certifications such as CISSP, CCSP, or cloud-specific security certifications are highly desirable.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong communication and interpersonal skills, with the ability to work effectively in a team environment.
• Experience with incident response procedures and forensic analysis is a plus.

• Design, implement, and manage security controls and architectures for cloud environments (AWS, Azure, GCP).
• Develop and enforce cloud security policies, standards, and best practices.
• Monitor cloud environments for security threats, vulnerabilities, and incidents using SIEM and other security tools.
• Conduct regular security assessments, penetration testing, and vulnerability scans of cloud infrastructure.
• Respond to and investigate security incidents, performing forensic analysis and implementing remediation actions.
• Collaborate with engineering and operations teams to integrate security into the CI/CD pipeline and development lifecycle.
• Develop and maintain incident response plans and disaster recovery procedures for cloud services.
• Provide security expertise and guidance on cloud adoption and migration projects.
• Stay current with emerging cloud security threats, vulnerabilities, and technologies, and recommend appropriate countermeasures.
• Develop and deliver security awareness training for technical teams.
• Manage security tooling and automation for cloud environments.
• Ensure compliance with relevant security regulations and standards (e.g., ISO 27001, GDPR, SOC 2).

• Bachelor's degree in Computer Science, Information Security, or a related field; Master's degree preferred.
• Minimum of 5 years of experience in information security, with at least 3 years focused on cloud security.
• In-depth knowledge of major cloud platforms (AWS, Azure, GCP) and their security services.
• Hands-on experience with cloud security tools, including SIEM, IDS/IPS, WAF, and endpoint security solutions.
• Strong understanding of network security principles, cryptography, identity and access management (IAM), and data loss prevention (DLP).
• Experience with security automation and scripting (e.g., Python, PowerShell).
• Proficiency in conducting security risk assessments and vulnerability management.
• Experience with incident response and digital forensics in cloud environments.
• Relevant security certifications such as CISSP, CCSP, AWS Certified Security - Specialty, or Azure Security Engineer Associate are highly desirable.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and collaboratively in a remote, distributed team environment.

As our Information Security Management Specialist (m/f/d) , you'll provide experienced support in the implementation and management of the Information Security Management System (ISMS) framework in alignment of current ISO 27001 standard and guidelines. With a focus on cybersecurity, this role involves leading risk assessments, ensuring alignment with industry standards and regulations, and following information security practices and policies.

What you will do

• Contribute to implementation, maintenance along with continuous improvement and associated instructional documentation of ISMS and its controls in line with the requirements of ISO 27001:2022 and similar standards.
li>Ensure compliance and maintenance of ISO 27001:2022 standard as well as all Information Security requirements with respect to laws, regulations, client requirements, NTT DATA and Group requirements including active participation in internal and external ISMS audits.
• Support in information security audits, performed by organization or third-party personnel.
• Ensure that IT systems are assessed against Information Security criteria and operate in compliance with the instructional Information Security documentation.
• Conduct company-wide gap assessment of ISMS clauses and control implementation.
• Ensure vulnerability management, tracking and reporting.
• Collaborate with the IT department to set Information security standard for Cyber Security 
li>Support in preparing management Information Security reports and dashboards.
• Review and respond to customer Service Agreements/RFPs/RFIs with respect to Information Security related clauses/questionnaires.
• Actively participate in Information Security External certification audits, internal audits, and gap assessments.
• Perform other security related task as required.

What we are looking for

• Bachelor’s degree or equivalent in Information Technology or Computer Science degree or related field.
< i>Information Security certifications such as ISO 27001 Lead Auditor/Implementer, CISM, CISA, CRISC, CISSP, CEH, COBIT or equivalent preferred.
• Fluent in English, Multilingual skills are an advantage.
• Skilled proficiency in conducting risk assessments, analyzing security controls, and policy management.
• Excellent communication and interpersonal skills for collaborating with various stakeholders.
• Strong project management skills for handling security initiatives.
• Strong familiarity with aspects related to information security.
• Strong knowledge of ISO 27001 and further relevant standards.

What we offer you

• An agile company culture with short decision-making paths and plenty of opportunities to show personal initiative
• Flexible working time models and mobile working (depending on your role)
• Allowance for the use of public transport and job bikes
• Allowance for the use of health and wellness
• Individual training and development opportunities
• Numerous other additional benefits such as birthday vouchers, employee advisory program, employee referral scheme, lunch allowance, company events, etc.

We look forward to hearing from you!

About the Global Data Centers division of NTT DATA
Global Data Centers is a division of NTT DATA. Our global platform is one of the largest in the world. NTT is ranked as one of the top three leaders worldwide by IDC in their Colocation and Interconnection Services MarketScape, spanning more than 20 countries and regions including North America, Europe, Africa, India and APAC. 

As a neutral operator, we offer access to multiple cloud providers, a large variety of Internet Exchanges and telecommunication network providers including our own IPv6 compliant, tier 1 global IP network. Our clients benefit from tailored infrastructure and experience consistent best practices in design and operations across all of our reliable, scalable and customizable data centers. 

Working at NTT Global Data Centers
At NTT Global Data Centers, we stand as one of the largest data center providers, dedicated to powering the digital infrastructure of tomorrow. Innovation is in our DNA. We thrive on pushing boundaries, exploring new possibilities, and embracing emerging technologies to continuously ensuring that every interaction, every solution, and every outcome exceeds our clients’ expectations. Our values are the guiding principles that shape our culture, define our identity, and propel us forward as one of the industry leaders. 

Interested in becoming part of an agile international team and actively shaping the digital infrastructure of tomorrow?
Join our team by submitting your application today!