Iso 27001 Jobs

This full-time Senior Associate role within PwC's infrastructure team focuses on ServiceNow deployment, platform engineering, and cloud operations. The position involves managing IT service management modules, overseeing cloud infrastructure across AWS, Azure, or GCP, and implementing DevSecOps transformations to optimize system performance. Key responsibilities include troubleshooting complex technical issues, re-engineering IT processes, and advising clients on governance frameworks and asset management. The role is appealing for its emphasis on professional growth, allowing individuals to build meaningful client relationships and develop thought leadership in a collaborative environment. While the position offers a hybrid work arrangement, it requires significant travel of up to 80% to support diverse client needs.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division, focusing on integrating security by design into the product lifecycle. The position requires collaboration with engineering groups to establish and refine security processes, serve as a subject matter expert on cyber risks, and manage pre-market and post-market compliance activities including threat modeling and vulnerability management. The role appeals to candidates seeking to directly impact patient safety while working in a collaborative, patient-first culture. The position is based in Danvers, Massachusetts or Raritan, New Jersey, with a hybrid work arrangement requiring office presence at least three days per week.

This full-time Cyber Security Engineer role supports mission-critical national security and defense programs for Maximus in San Antonio, Texas. The position requires an active TS/SCI clearance and involves implementing cybersecurity controls, conducting risk assessments, and responding to security incidents within DoD environments. Key responsibilities include performing vulnerability scans, ensuring compliance with RMF and NIST standards, and collaborating with engineering teams to maintain system security. The role appeals to professionals seeking high-impact work in a fast-paced government setting with a focus on accountability and results. Candidates must be available to work onsite five days a week and possess five years of experience with DoD frameworks and security technologies.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and generating critical documentation such as threat models and risk management plans. The role also involves guiding compliance certification activities and advising on balancing business needs with medical device security objectives. This opportunity appeals to candidates seeking to directly impact patient lives within a Patient First culture. The position is based in Danvers, MA or Raritan, NJ, with a hybrid work arrangement requiring office presence at least three days per week.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and delivering critical documentation such as threat models and risk management plans for regulatory compliance. The role appeals to candidates seeking to directly impact patient lives by shaping industry standards in a collaborative, patient-first culture. While the position is primarily based in Danvers, MA or Raritan, NJ with a requirement to be in-office at least three days per week, remote work options may be considered on a case-by-case basis.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and delivering critical documentation such as threat models and risk management plans. The role also involves guiding compliance certification activities and advising development teams on balancing business needs with medical device security objectives. This opportunity appeals to candidates seeking to directly impact patient lives within a collaborative, patient-first culture. The position is based in Danvers, MA or Raritan, NJ, with a hybrid work arrangement requiring office presence at least three days per week.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and delivering critical documentation such as threat models and risk management plans. The role appeals to candidates seeking to directly impact patient lives by shaping industry standards and ensuring compliance with rigorous regulatory frameworks like FDA, ISO 27001, and SOC2. The position is based in Danvers, MA, or Raritan, NJ, with a hybrid work arrangement requiring office presence three days per week, offering a collaborative environment within a Patient First culture.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division, focusing on integrating security by design into the product lifecycle. The position requires partnering with engineering groups to enforce security policies, develop risk management documentation, and guide teams through pre-market and post-market compliance activities. Key responsibilities include creating security processes, acting as a subject matter expert on cyber threats, and supporting certifications such as SOC2 and ISO 27001. The role is based in Danvers, MA, with a hybrid schedule requiring three days in the office, though remote options may be considered. The position appeals to candidates seeking to impact patient safety directly within a collaborative, patient-first culture while shaping industry standards for medical device security.

This Principal Product Security Engineer role is part of the Technology Enterprise Strategy & Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design into the product development lifecycle, partnering with engineering groups to ensure adherence to security policies and regulatory standards. Key responsibilities include creating and improving security processes, acting as a subject matter expert on cyber security matters, and delivering critical documentation for pre-market activities and compliance certifications such as SOC2 and ISO 27001. The role appeals to candidates seeking to directly impact patient lives through innovative security solutions in a regulated environment. The position is based in Danvers, MA, with a hybrid work arrangement requiring office presence three days per week, though remote options may be considered on a case-by-case basis.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and delivering critical documentation such as threat models and risk management plans. The role also involves guiding compliance certification activities and advising development teams on balancing business needs with medical device security objectives. This opportunity appeals to candidates seeking to directly impact patient lives within a Patient First culture. The position is based in Danvers, MA, with a hybrid work arrangement requiring office presence three days per week, though remote options may be considered case-by-case.

This Principal Product Security Engineer role resides within the Technology Enterprise Strategy & Security team at Johnson & Johnson, focusing on securing medical device products. The position involves partnering with engineering groups to embed security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include creating and refining security processes, acting as a subject matter expert on cyber threats, and delivering critical documentation for regulatory compliance such as SOC2 and ISO 27001. The opportunity is appealing for its chance to directly impact patient safety while shaping industry standards in a Patient First culture. The role is based in Danvers, MA or Raritan, NJ, with a hybrid work arrangement requiring office presence three days per week.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and delivering critical documentation such as threat models and risk management plans. The role appeals to candidates seeking to directly impact patient lives by shaping industry standards and ensuring compliance with rigorous frameworks like ISO 27001 and FDA regulations. The position is based in Danvers, MA or Raritan, NJ, with a hybrid work arrangement requiring office presence three days per week, offering a collaborative environment within a Patient First culture.

This full-time Cybersecurity Engineer role at KLA focuses on endpoint detection and protection within the semiconductor manufacturing ecosystem. The position serves as a subject matter expert responsible for configuring, tuning, and optimizing enterprise EDR and EPM platforms across Windows, macOS, and Linux environments. Key duties include designing detection policies aligned with MITRE ATT&CK frameworks, collaborating with the SOC to reduce false positives, and leading incident response investigations using endpoint telemetry. The role appeals to candidates seeking to solve complex security challenges in a culture that invests heavily in innovation and R&D. The position is based in Ann Arbor, Michigan, and offers opportunities for professional growth through exposure to cutting-edge threat hunting and advanced security tooling.

The Security Engineer (DLP) role is based in the Columbus office within Benesch's cybersecurity team, focusing on protecting sensitive data and enhancing the firm's security posture. Key responsibilities include deploying and tuning Data Loss Prevention and Cloud Access Security Broker solutions, managing endpoint detection and response initiatives, and leading incident response efforts using SIEM platforms. The position also involves supporting secure cloud architecture across major providers and ensuring compliance with industry frameworks. This opportunity appeals to candidates seeking a hybrid work arrangement with flexibility, offering a collaborative environment recognized as a top workplace. The role provides significant growth potential within a rapidly expanding firm that values diversity, transparent leadership, and professional development.

The Principal Enterprise Security Architect - Director role serves as a global strategic authority within SMBC Group's Americas division, responsible for shaping the Enterprise Security Architecture strategy for a top-tier financial institution. Key duties include defining multi-year security roadmaps that integrate cloud resilience, zero trust principles, and emerging AI/agentic system safeguards while ensuring alignment with global regulatory frameworks. The position involves advising C-suite leaders, governing enterprise-wide security standards, and mentoring future architects to drive innovation. This opportunity appeals to candidates seeking to lead high-impact security initiatives in a collaborative, hybrid work environment with a prestigious global organization known for its 400-year history and commitment to future-proofing financial services.

This full-time Data Scientist role supports a large Federal agency by delivering advanced analytics to optimize contact center and field office operations. The position involves designing predictive models for workforce management, building robust data pipelines for complex datasets, and collaborating with stakeholders to present strategic insights to executive leadership. The role offers a hybrid work arrangement in Woodlawn, MD, within a supportive culture that prioritizes professional growth through education reimbursement and continuous development. Candidates will join a recognized, fast-growing company known for its collaborative environment, commitment to innovation, and focus on making a positive community impact.

The Senior Analyst - ISO Security Governance role supports Federal and DoD customers by managing complex information assurance requirements and security governance frameworks. Key responsibilities include performing risk assessments, advising system owners on compliance with NIST and FedRAMP standards, and collaborating with ISSO teams to align organizational policies with federal regulations. The position involves maintaining risk registers, mapping security controls, and recommending enhancements to the security posture. This opportunity appeals to professionals seeking to work with advanced GRC tools in a fast-paced environment while contributing to critical national security initiatives. The role requires a bachelor's degree and seven or more years of experience in security governance, with certifications like CISSP or CISM being advantageous.

This senior analyst role focuses on ISO security governance within a team supporting Federal and Department of Defense customers. The position involves performing complex risk assessments, establishing information assurance requirements, and advising system owners on security policies. Key responsibilities include aligning organizational governance with federal standards such as NIST and FISMA, collaborating with ISSO teams on shared services, and managing governance activities like vendor assessments and risk registers. The role appeals to professionals seeking to apply their expertise in FedRAMP and RMF frameworks within a mission-driven environment. Candidates will work in a fast-paced setting that values initiative and collaboration, requiring strong communication skills to translate technical security concepts into business terms.

This senior analyst role focuses on ISO security governance within a team supporting Federal and Department of Defense customers. The position involves performing complex risk assessments, establishing information assurance requirements, and advising system owners on security policies. Key responsibilities include aligning organizational governance with federal standards such as NIST and FISMA, collaborating with enterprise and project ISSOs, and managing governance activities like vendor assessments and risk registers. The role appeals to professionals seeking to work with advanced security frameworks and tools in a fast-paced environment. It requires strong communication skills to translate technical security language into business terms and offers the opportunity to enhance security posture for high-stakes government contracts.

This senior analyst role focuses on ISO security governance within a team supporting Federal and Department of Defense customers. The position involves conducting complex risk assessments, establishing information assurance requirements, and advising system owners on security policies. Key responsibilities include aligning organizational governance with federal standards such as NIST and FISMA, collaborating with ISSO teams on shared services, and managing governance activities like vendor assessments and risk registers. The role appeals to professionals seeking to leverage their expertise in security frameworks and GRC tools while working in a fast-paced environment. It offers the opportunity to influence security posture for high-stakes government contracts and requires strong communication skills to translate technical requirements into business terms.

This senior analyst role focuses on ISO security governance within a team supporting Federal and Department of Defense customers. The position involves performing complex risk assessments, establishing information assurance requirements, and advising system owners on security policies. Key responsibilities include aligning organizational governance with federal regulations like NIST and FISMA, collaborating with ISSO teams on shared services, and managing governance activities such as vendor assessments and risk registers. The role appeals to professionals seeking to work with advanced security frameworks and tools in a fast-paced environment. It offers the opportunity to apply specialized knowledge in a mission-critical setting while developing solutions for complex security challenges.

This senior analyst role focuses on ISO security governance within a team supporting Federal and Department of Defense customers. The position involves performing complex risk assessments, establishing information assurance requirements, and advising system owners on security policies. Key responsibilities include aligning organizational governance with federal regulations such as NIST and FISMA, collaborating with ISSO teams, and managing governance activities like vendor assessments and risk registers. The role appeals to professionals seeking to leverage their expertise in FedRAMP, RMF, and GRC tools within a fast-paced environment. It offers the opportunity to work with cutting-edge security technologies and requires strong communication skills to translate technical requirements into business terms. The position is based on-site with potential travel requirements.