126 Security Policy Development jobs in the United Kingdom
Lead_Analyst Information Security Governance Risk Compliance
Posted 11 days ago
Job Viewed
Job Description
**Title:** Lead Analyst, Information, Security, Governance, Risk and Compliance
**Location:** Remote-UK
**Salary:** £60,000 / annually
**About PSI**
We are PSI Services. We power world leading tests. Delivered with trusted science and the very best test taker experience. PSI supports test-takers on their journey to pursuing dreams and gaining certifications that are important to them. They believe that their dreams are worth working for; that their dreams are worth the effort. And we believe that too. This is our core purpose, to empower people to achieve their dreams. We do this by being the best provider of workforce solutions, which foster both technology and science to deliver the best solutions for our test takers.
We are searching for top talent to join our PSI team and help grow our products and services. We have a creative, supportive and inclusive culture where we empower people in their careers to be their authentic self and make the most of their great talent.
At PSI, we are committed to helping people meet their potential and we believe that promoting diversity, equity and inclusion is critical to our success. That's why you'll find these ideals are intrinsic to our company culture and applied throughout the employee lifecycle.
Learn more about what we do at: the Role**
The Lead Analyst, Information Security - GRC plays a key role in supporting PSI's commitment to data security, privacy, and compliance. This role is responsible for driving core activities across quality, risk management, Information Security, data protection, and audit readiness to ensure the organization meets ISO, PCI, SOC 2, and other relevant standards. The position helps deliver assurance to stakeholders that PSI prioritizes the security and privacy of its data and systems.
This is a full-time, permanent role, Monday to Friday, with flexible working hours around a standard 09:00 - 17:30 schedule. The role reports to the Snr Director of Information Security, Governance, Risk and Compliance and may be performed remotely, with occasional travel to offices and test centres as required for audits and assessments.
**Role Responsibilities**
+ Act as the primary point of contact for implementing and maintaining the security GRC framework.
+ Collaborate with internal teams to support an integrated end-to-end GRC approach across the organization.
+ Collaborate with internal teams to ensure documentation of security control in the form of system architecture diagrams, data flow diagrams and Information System Continuity Plans are in place.
+ Maintain and update security policies, standards, procedures, and guidelines, ensuring they align with current business and IT practices.
+ Monitor and assess the effectiveness of security controls across business systems and processes.
+ Ensure alignment with client, regulatory, and internal compliance requirements.
+ Support the automation and continual improvement of GRC processes and tools.
+ Generate and present GRC-related metrics and reports to internal stakeholders and executive leadership.
+ Support and coordinate internal and external audits (e.g., ISO27001, SOC2, etc.), including gathering evidence and managing responses.
+ Assist in third-party and entity-level risk assessments, identifying and mitigating risks through effective controls.
+ Build and maintain cross-functional relationships with teams such as Legal, IT, Audit, Finance, and Business Operations to ensure GRC practices support overall business objectives.
+ Support ongoing compliance initiatives, including security incident reviews, risk memos, and policy exceptions.
+ Deliver training and awareness programs related to information security, policies, and best practices.
+ Participate in the development of operational reports, metrics dashboards, and trend analysis related to security and compliance activities.
+ Prepare and support audit plans and compliance documentation for internal or external stakeholders.
+ Conduct vetting for access to sensitive systems and data, including continuous monitoring and clearance reviews.
**Knowledge, Skills and Experience Requirements**
+ Experience working within, achieving and/or maintaining ISO standards such as ISO 27001, 9001, 14001 and 2000 (essential).
+ Experience in implementing and maintaining externally awarded certifications such as ISO27001 is essential.
+ Proficient with MS Office
+ Solid understanding of common security tools (e.g., vulnerability scanners, firewalls, IDS/IPS, AV software) strongly recommended
+ Extensive training and experience in computer disciplines such as application and data security, systems programming, systems design, computer technology or software disciplines
+ Familiarity with OneTrust or ServiceNow GRC and Privacy tools desired
+ Certified training in security management, risk and compliance solutions and practices. CISSP, CISA, CISM, GSEC, CRISC, or related certification(s) desirable.
+ Experience in a fast-paced GRC/ISO function (desirable).
**Benefits & Culture**
At PSI, our culture is to be transparent and fair. That's why all of our roles have been benchmarked at a competitive rate against the local market they are based in. To be transparent all of our adverts now include the salary so you can see if we align with your expectations when looking for your next role.
In addition to a competitive salary, we offer a comprehensive benefits package and supportive culture when you join us. This includes:
+ 401k/Pension/Retirement Plan - with country specific employer %
+ Enhanced PTO/Annual Leave
+ Medical insurance - country specific
+ Dental, Vision, Life and Short-Term Disability for US
+ Flexible Spending Accounts - for the US
+ Medical Cashback plan covering vision, dental and income protection for UK
+ Employee Assistance Programme
+ Commitment and understanding of work/life balance
+ A culture of embracing wellness, including regular global initiatives
+ Access to supportive and professional mechanisms to help you plan for your future
+ Volunteer Day and a culture of giving back to our community and industry through volunteering opportunities
Security Governance Manager
Posted 561 days ago
Job Viewed
Job Description
Security Governance Manager
Reports to: Head of Information Security
Location: Hybrid (Newmarket) and or Remote
Hours: 32 hours across a 4-day week (no salary sacrifice)
Salary: £50,000 - £60,000
Product: Group level - Wonde, Evouchers & Secure Schools
Who we are and what is important to us:
Beyond unifies three technology-driven brands, Wonde, Evouchers and Secure Schools.
Each brand shares a vision to reduce the friction of adapting technology, to help customers navigate an often overwhelming area and provide powerful solutions that make their everyday life easier.
The three brands run independently with the autonomy to continue to prosper although as part of the Beyond team, you’ll join a wider, supportive environment where you’ll be able to pull on the expertise and capabilities of the group.
We do not limit ourselves to standing still. We look ahead and strive to disrupt the sector we operate in. We believe technology should not be complicated or overwhelming. It should do what it says - quickly, safely and efficiently.
Job snapshot:
As Security Governance Manager, you will be responsible for ensuring the effectiveness of security policies and control frameworks. You will support the group in adopting a security mindset using a combination of coaching, supporting and leading by example.
This is a newly created position where you will be provided with a genuine opportunity to create impact and drive the best security practices across the group.
What you’ll be doing:
- Management and maintenance of the central Information Security Management System
- Maintain and certify new products to ISO
- Create, consult and operationalise security policies
- Organise, lead and manage all security-related audit activity
- Track and manage audit findings from conception through to delivery
- Coordinate, monitor and measure activities to ensure the ISMS continues to operate as expected
- Support and manage the supplier security assurance process
- Manage the security awareness and training programme
- Manage the continuous improvement process to ensure improvements and efficiencies within Security are achieved
Requirements
What we’re hoping you’ll bring:
- Previous experience in a security-focused role, particularly focusing on the implementation and management of an information security management system supporting ISO
- A qualified ISO 27001 Lead Implementer or auditor (a nice to have)
- Excellent written and oral communication skills
- Natural capabilities to communicate with a diverse range of stakeholders
- Ability to influence and coach technical and non-technical stakeholders
- Ambition and initiative to drive change in an evolving sector
- Self-motivation with the confidence and enthusiasm to take the initiative and get things done
- Ability to prioritise workflow and ensure deadlines are met
- The willingness to learn and adapt in an ever-changing environment
Benefits
What you’ll get:
Beyond is much more than just a place to work. It is a place to grow, innovate, excel and learn. We have tech people, creative people and people people, all focused on providing a superior customer experience.
We value, support and champion those we work with - promoting personal growth and happiness. We get that our success is dependent on the collective energy, intelligence and contributions of all our team members and we are committed to ensuring our work environment is the best it can be.
We value your commitment and have worked hard to create adaptable and comprehensive benefits packages to suit individual needs, although you can expect the below as standard:
- 4-day working week
- Flexible working schedule/work-from-home opportunities
- Onsite gym and well-being (quiet room) facilities
- Buying and selling holiday scheme
- Additional holiday for length of service
- Annual allowance for volunteering days
- Onsite trained mental health and well-being champions
- Monthly lunch club (on us)
- Comprehensive wellness programmes (think meditation retreats and continuous access to well-being apps/initiatives)
- Enhanced maternity, paternity and adoption benefits
- Electric car scheme
- Cycle to Work Scheme
- Eye examination scheme
- Financial contribution to the set up of work-from-home environments
- Use of new and leading technology in the form of apple products
- Frequent company-funded social events
- Office closure between Christmas & New Year
- Access to continuous learning and development opportunities
- Comprehensive employee referral scheme
- Casual Dress Code
In addition to the above, you’ll have access to our ‘take your pick’ benefits scheme which is tailored specifically to you!
Beyond is an equal-opportunity employer. We encourage interest from all candidates and do not discriminate against any non-merit factors. If you require any adjustments to the application or selection process please call or email us so we can ensure you have the correct support: careers@wonde.com/ .
Security Governance and Service Management Specialist
Posted 9 days ago
Job Viewed
Job Description
Job Opportunity: Security Governance and Service Management Specialist
Are you passionate about security governance and service management? Do you want to make a difference in the financial sector? If so, we have an exciting temporary position for you in the heart of London!
Location: City of London
Contract Type: Temporary
Commute: Just a 1-minute walk from Liverpool Street train station!
Join our dynamic team at a leading financial institution and insurance provider! We're looking for a dedicated Security Governance and Service Management Specialist to help us enhance our security posture and ensure top-notch service delivery.
What You'll Do:
Develop and implement security governance frameworks to safeguard our assets.
Collaborate with cross-functional teams to ensure compliance with regulatory requirements.
Monitor and manage security incidents, providing timely reporting and resolution.
Conduct risk assessments and audits to identify vulnerabilities.
Assist in the formulation of security policies and procedures.
Provide training and support to staff on security best practises.
What We're Looking For:
Proven experience in security governance and service management.
Strong understanding of financial regulations and compliance.
Excellent problem-solving skills and attention to detail.
Ability to communicate effectively with stakeholders at all levels.
A proactive approach to identifying and mitigating risks.
Why You'll Love Working Here:
Vibrant Team Culture: Be part of a cheerful and professional environment where your contributions are valued!
Career Growth: This is a fantastic opportunity to gain experience in a leading financial institution.
Central Location: Enjoy the convenience of being based in the City, with easy access to transport links, shops, and eateries!
Flexible Working: We promote a healthy work-life balance to help you thrive both personally and professionally.
Ready to Make an Impact?
If you are excited about shaping the future of security governance and service management, we want to hear from you! Join us in creating a safer and more secure financial landscape.
How to Apply:
Send us your CV along with a cover letter detailing your relevant experience and why you're the perfect fit for this role.
Don't miss this opportunity to elevate your career while contributing to the security of a major financial institution! Apply today and be part of our journey toward excellence!
Let's secure the future together!
Adecco is a disability-confident employer. It is important to us that we run an inclusive and accessible recruitment process to support candidates of all backgrounds and all abilities to apply. Adecco is committed to building a supportive environment for you to explore the next steps in your career. If you require reasonable adjustments at any stage, please let us know and we will be happy to support you.
Security Governance and Service Management Specialist
Posted 9 days ago
Job Viewed
Job Description
My Banking client is seeking to recruit a Security Governance and Service Management Specialist on an initial 6 month contract for a Financial Services client based in London. It is hybrid and will require 3x days onsite per week.
Role Purpose:
- Enhance the Security Intra group Governance and Service Management process for EU entities in line with ECB expectations
- Maintain and update the intra group governance framework, processes and procedures and standard suite, across Information and Cyber Security within EMEA.
- Manage the intragroup relationships across AD and EMEA for Information and Cyber Security, ensuring service levels are met for all services received and/or provided.
Accountabilities & Responsibilities :
- Define intra group security governance and service management framework
- Enhance and embed the operating/engagement model and service level agreement to ensure continuous oversight and service management
- Define and maintain EU specific entity level reporting template, including metrics to support the service performance management and service operations management.
- Embed a centralised ticketing module within ServiceNow for EMEA region. Use cases relevant to security service management, service request and service issue management.
- Coordinate the relevant reporting data points from Information and Cyber Security Committees relevant to EU, including inputs to and actions arising from the committees, the preparation of Security Performance Dashboards, and tracking of improvements.
- Consistently look for improvements in the efficiency and effectiveness of Information and Cyber Security intra group Governance and Compliance reporting
Skills required:
- SME experience in third party service management including developing and maintaining service level agreements, metrics and compliance requirements.
- In depth knowledge of third-party regulations across UK and EU such as ECB's EBA, DORA and related standards
- Information and Cyber Security Frameworks and industry Standards (e.g., NIST/ISO 27001/COBIT/ITIL)
- Experience creating and delivering presentations and concise writing skills to produce clear documentation (security policy, senior management posture reports)
- Excellent inter-personal communication skills, able to liaise with all levels of the business across all regions including key stakeholders and senior management.
Security Governance and Service Management Specialist
Posted 9 days ago
Job Viewed
Job Description
Job Opportunity: Security Governance and Service Management Specialist
Are you passionate about security governance and service management? Do you want to make a difference in the financial sector? If so, we have an exciting temporary position for you in the heart of London!
Location: City of London
Contract Type: Temporary
Commute: Just a 1-minute walk from Liverpool Street train station!
Join our dynamic team at a leading financial institution and insurance provider! We're looking for a dedicated Security Governance and Service Management Specialist to help us enhance our security posture and ensure top-notch service delivery.
What You'll Do:
Develop and implement security governance frameworks to safeguard our assets.
Collaborate with cross-functional teams to ensure compliance with regulatory requirements.
Monitor and manage security incidents, providing timely reporting and resolution.
Conduct risk assessments and audits to identify vulnerabilities.
Assist in the formulation of security policies and procedures.
Provide training and support to staff on security best practises.
What We're Looking For:
Proven experience in security governance and service management.
Strong understanding of financial regulations and compliance.
Excellent problem-solving skills and attention to detail.
Ability to communicate effectively with stakeholders at all levels.
A proactive approach to identifying and mitigating risks.
Why You'll Love Working Here:
Vibrant Team Culture: Be part of a cheerful and professional environment where your contributions are valued!
Career Growth: This is a fantastic opportunity to gain experience in a leading financial institution.
Central Location: Enjoy the convenience of being based in the City, with easy access to transport links, shops, and eateries!
Flexible Working: We promote a healthy work-life balance to help you thrive both personally and professionally.
Ready to Make an Impact?
If you are excited about shaping the future of security governance and service management, we want to hear from you! Join us in creating a safer and more secure financial landscape.
How to Apply:
Send us your CV along with a cover letter detailing your relevant experience and why you're the perfect fit for this role.
Don't miss this opportunity to elevate your career while contributing to the security of a major financial institution! Apply today and be part of our journey toward excellence!
Let's secure the future together!
Adecco is a disability-confident employer. It is important to us that we run an inclusive and accessible recruitment process to support candidates of all backgrounds and all abilities to apply. Adecco is committed to building a supportive environment for you to explore the next steps in your career. If you require reasonable adjustments at any stage, please let us know and we will be happy to support you.
Security Governance and Service Management Specialist
Posted 9 days ago
Job Viewed
Job Description
My Banking client is seeking to recruit a Security Governance and Service Management Specialist on an initial 6 month contract for a Financial Services client based in London. It is hybrid and will require 3x days onsite per week.
Role Purpose:
- Enhance the Security Intra group Governance and Service Management process for EU entities in line with ECB expectations
- Maintain and update the intra group governance framework, processes and procedures and standard suite, across Information and Cyber Security within EMEA.
- Manage the intragroup relationships across AD and EMEA for Information and Cyber Security, ensuring service levels are met for all services received and/or provided.
Accountabilities & Responsibilities :
- Define intra group security governance and service management framework
- Enhance and embed the operating/engagement model and service level agreement to ensure continuous oversight and service management
- Define and maintain EU specific entity level reporting template, including metrics to support the service performance management and service operations management.
- Embed a centralised ticketing module within ServiceNow for EMEA region. Use cases relevant to security service management, service request and service issue management.
- Coordinate the relevant reporting data points from Information and Cyber Security Committees relevant to EU, including inputs to and actions arising from the committees, the preparation of Security Performance Dashboards, and tracking of improvements.
- Consistently look for improvements in the efficiency and effectiveness of Information and Cyber Security intra group Governance and Compliance reporting
Skills required:
- SME experience in third party service management including developing and maintaining service level agreements, metrics and compliance requirements.
- In depth knowledge of third-party regulations across UK and EU such as ECB's EBA, DORA and related standards
- Information and Cyber Security Frameworks and industry Standards (e.g., NIST/ISO 27001/COBIT/ITIL)
- Experience creating and delivering presentations and concise writing skills to produce clear documentation (security policy, senior management posture reports)
- Excellent inter-personal communication skills, able to liaise with all levels of the business across all regions including key stakeholders and senior management.
Security Controller,Governance,Risk & Assurance
Posted 11 days ago
Job Viewed
Job Description
Amazon Web Services (AWS) is the leading cloud provider, providing virtualized infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWSu2019 multi-tenant infrastructure
Amazon Security are looking for a security practitioner to manage secure facilities, maintain UK Government security accreditation and build strong relationships with Public Sector account management teams. Working with personnel security, information security and insider risk teams, ensure a security first approach to the delivery of services and solutions to our customers.
Key job responsibilities
Responsible for the operation and strategic development of secure facilities. Maintain and improve policies and procedure to ensure compliance with UK Government security standards. Work with our people to continuously improve our security culture through training and briefings. Give advice and guidance where needed. Oversee security investigations and report to the relevant authority as required. Work with internal and external customers to advise on new and existing contracts from a security perspective. Own and develop regular meetings and reporting to demonstrate compliance to our assurance team and stakeholders
A day in the life
Working with internal teams to guide them through actions to take to have security cleared staff available for their programmes. Review requests for maintenance or carry out changes to facilities.
Oversee day to day running of facilities and operations. Review all incidents raised against facilities, staff and visitors, making improvements and updating policies as necessary. Liaise with government departments to understand and implement latest security initiatives. Work alongside our security teams to improve all aspects of security.
About the team
The Amazon Security team consists of personnel security, information security, insider risk and assurance. They combine to provide secure facilities, security cleared staff who can work in our facilities or our customers to deliver AWS solutions and services.
About Amazon Security
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasnu2019t followed a traditional path, or includes alternative experiences, donu2019t let it stop you from applying.
Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazonu2019s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
Inclusive Team Culture
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.
Training & Career Growth
Weu2019re continuously raising our performance bar as we strive to become Earthu2019s Best Employer. Thatu2019s why youu2019ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, thereu2019s nothing we canu2019t achieve.
Basic Qualifications
Have a minimum of 5 years working in or with UK accredited secure facilities. Have a good understanding of the UK security vetting system and UK Government Classification System.
Experience in maintaining UK Government IPSA and FSC accreditations.
Experience with and knowledge of IT infrastructure (networking, servers, cabling). Building infrastructure/services. Experience in Risk Management - identifying and managing. Creation of policies, procedures and bringing to life. Logical and physical security of systems. Stakeholder management and ability to run meetings. Ability to create management reporting - monthly documents and six page business cases to justify future initiatives. Demonstrate delivery across complex stakeholder arrangements (multiple customers and internal stakeholders)
Preferred Qualifications
Previous Security Controller with minimum 5 years experience and has successfully maintained IPSA and FSC accreditation after audit.
Project Management experience delivering secure IT projects. Established relationships with UK government departments and industry partners. Basic certification in a hyperscale cloud vendors technology - ideally AWS.
Holds a current UK security clearance. 5 years experience working with account management teams, solution architects and professional services. Recognised security certifications
Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( ) to know more about how we collect, use and transfer the personal data of our candidates.
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit for more information. If the country/region youu2019re applying in isnu2019t listed, please contact your Recruiting Partner.
Be The First To Know
About the latest Security policy development Jobs in United Kingdom !
Security Controller,Governance,Risk & Assurance
Posted 11 days ago
Job Viewed
Job Description
Amazon Web Services (AWS) is the leading cloud provider, providing virtualized infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWSu2019 multi-tenant infrastructure
Amazon Security are looking for a security practitioner to manage secure facilities, maintain UK Government security accreditation and build strong relationships with Public Sector account management teams. Working with personnel security, information security and insider risk teams, ensure a security first approach to the delivery of services and solutions to our customers.
Key job responsibilities
Responsible for the operation and strategic development of secure facilities. Maintain and improve policies and procedure to ensure compliance with UK Government security standards. Work with our people to continuously improve our security culture through training and briefings. Give advice and guidance where needed. Oversee security investigations and report to the relevant authority as required. Work with internal and external customers to advise on new and existing contracts from a security perspective. Own and develop regular meetings and reporting to demonstrate compliance to our assurance team and stakeholders
A day in the life
Working with internal teams to guide them through actions to take to have security cleared staff available for their programmes. Review requests for maintenance or carry out changes to facilities.
Oversee day to day running of facilities and operations. Review all incidents raised against facilities, staff and visitors, making improvements and updating policies as necessary. Liaise with government departments to understand and implement latest security initiatives. Work alongside our security teams to improve all aspects of security.
About the team
The Amazon Security team consists of personnel security, information security, insider risk and assurance. They combine to provide secure facilities, security cleared staff who can work in our facilities or our customers to deliver AWS solutions and services.
About Amazon Security
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasnu2019t followed a traditional path, or includes alternative experiences, donu2019t let it stop you from applying.
Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazonu2019s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
Inclusive Team Culture
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.
Training & Career Growth
Weu2019re continuously raising our performance bar as we strive to become Earthu2019s Best Employer. Thatu2019s why youu2019ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, thereu2019s nothing we canu2019t achieve.
Basic Qualifications
Have a minimum of 5 years working in or with UK accredited secure facilities. Have a good understanding of the UK security vetting system and UK Government Classification System.
Experience in maintaining UK Government IPSA and FSC accreditations.
Experience with and knowledge of IT infrastructure (networking, servers, cabling). Building infrastructure/services. Experience in Risk Management - identifying and managing. Creation of policies, procedures and bringing to life. Logical and physical security of systems. Stakeholder management and ability to run meetings. Ability to create management reporting - monthly documents and six page business cases to justify future initiatives. Demonstrate delivery across complex stakeholder arrangements (multiple customers and internal stakeholders)
Preferred Qualifications
Previous Security Controller with minimum 5 years experience and has successfully maintained IPSA and FSC accreditation after audit.
Project Management experience delivering secure IT projects. Established relationships with UK government departments and industry partners. Basic certification in a hyperscale cloud vendors technology - ideally AWS.
Holds a current UK security clearance. 5 years experience working with account management teams, solution architects and professional services. Recognised security certifications
Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( ) to know more about how we collect, use and transfer the personal data of our candidates.
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit for more information. If the country/region youu2019re applying in isnu2019t listed, please contact your Recruiting Partner.
Security Controller, Governance, Risk & Assurance
Posted 11 days ago
Job Viewed
Job Description
Amazon Web Services (AWS) is the leading cloud provider, providing virtualized infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS' multi-tenant infrastructure
Amazon Security are looking for a security practitioner to manage secure facilities, maintain UK Government security accreditation and build strong relationships with Public Sector account management teams. Working with personnel security, information security and insider risk teams, ensure a security first approach to the delivery of services and solutions to our customers.
Key job responsibilities
Responsible for the operation and strategic development of secure facilities. Maintain and improve policies and procedure to ensure compliance with UK Government security standards. Work with our people to continuously improve our security culture through training and briefings. Give advice and guidance where needed. Oversee security investigations and report to the relevant authority as required. Work with internal and external customers to advise on new and existing contracts from a security perspective. Own and develop regular meetings and reporting to demonstrate compliance to our assurance team and stakeholders
A day in the life
Working with internal teams to guide them through actions to take to have security cleared staff available for their programmes. Review requests for maintenance or carry out changes to facilities.
Oversee day to day running of facilities and operations. Review all incidents raised against facilities, staff and visitors, making improvements and updating policies as necessary. Liaise with government departments to understand and implement latest security initiatives. Work alongside our security teams to improve all aspects of security.
About the team
The Amazon Security team consists of personnel security, information security, insider risk and assurance. They combine to provide secure facilities, security cleared staff who can work in our facilities or our customers to deliver AWS solutions and services.
About Amazon Security
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.
Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
Inclusive Team Culture
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.
Training & Career Growth
We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there's nothing we can't achieve.
Basic Qualifications
Have a minimum of 5 years working in or with UK accredited secure facilities. Have a good understanding of the UK security vetting system and UK Government Classification System.
Experience in maintaining UK Government IPSA and FSC accreditations.
Experience with and knowledge of IT infrastructure (networking, servers, cabling). Building infrastructure/services. Experience in Risk Management - identifying and managing. Creation of policies, procedures and bringing to life. Logical and physical security of systems. Stakeholder management and ability to run meetings. Ability to create management reporting - monthly documents and six page business cases to justify future initiatives. Demonstrate delivery across complex stakeholder arrangements (multiple customers and internal stakeholders)
Preferred Qualifications
Previous Security Controller with minimum 5 years experience and has successfully maintained IPSA and FSC accreditation after audit.
Project Management experience delivering secure IT projects. Established relationships with UK government departments and industry partners. Basic certification in a hyperscale cloud vendors technology - ideally AWS.
Holds a current UK security clearance. 5 years experience working with account management teams, solution architects and professional services. Recognised security certifications
Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( ) to know more about how we collect, use and transfer the personal data of our candidates.
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit for more information. If the country/region you're applying in isn't listed, please contact your Recruiting Partner.
Information Security Manager
Posted 6 days ago
Job Viewed
Job Description
Information Security Manager
Location: London, Hybrid
Salary: Up to 75,000
Reports to: Head of Cyber Security
A well regarded Managed Service Provider is seeking an experienced Information Security Manager to join its team on a permanent basis. This role offers the opportunity to lead and deliver strategic security initiatives across a varied client base, with a strong focus on governance, risk, and compliance.
The successful candidate will have a proven background within an MSP or MSSP environment, hold CISSP certification, and demonstrate deep expertise in GRC frameworks, particularly ISO27001. Experience acting as a virtual Chief Information Security Officer (vCISO) is essential.
This business has made significant investment into its SOC-as-a-Service offering, positioning itself at the forefront of managed security solutions and enabling clients to benefit from cutting-edge threat detection and response capabilities.
Key Responsibilities:
- Serve as a vCISO for clients, providing strategic guidance on security posture and compliance
- Lead the development and implementation of security policies, procedures, and controls
- Manage ISO27001 compliance, including internal and external audits
- Conduct risk assessments and oversee incident response planning
- Collaborate with technical teams to ensure security is embedded across services
- Advise on regulatory requirements and emerging threats
Candidate Profile:
- Extensive experience in information security within an MSP or MSSP
- CISSP certified
- Strong working knowledge of GRC frameworks, including ISO27001
- Demonstrated experience in a vCISO capacity
- Excellent stakeholder engagement and communication skills
- Ability to lead complex security programmes across multiple environments
This role offers flexible working arrangements (hybrid), exposure to a wide range of industries and technologies, and the chance to join a collaborative team within a forward-thinking MSP committed to professional development.
Only candidates with the right to work in the UK will be considered .
London - Hybrid
Paying up to 75,000, depending on experience.