18 of 18 Permanent NIST Jobs in Birmingham

defence infrastructure projects, or government contractors . Knowledge of JSP 440, DEFCON 76, Secure by Design, Cyber Essentials Plus, ISO 27001, and NIST frameworks . Key Attributes We're looking for someone who demonstrates: Integrity, professionalism, and discretion. Strong risk awareness and sound judgement. Excellent analytical and problem-solving skills. ...

of work history such as:Information Security qualification (or equivalent) e.g. CISSP.In-depth knowledge of security frameworks, standards, and best practices (e.g., ISO 27001, NIST, CIS).Experience as a Security Architect or in a similar role, with a strong track record of designing and implementing security controls and/ ...

HIPAA) and Payment Card Industry/Data Security StandardKnowledge of common information security management frameworks, such as ISO/IEC 27001, COBIT, and NIST, including 800-53 and the Cybersecurity FrameworkStrong knowledge of cloud technologies, AWS, Azure, GCP, SAAS, PAAS, IAASAdvanced competency in Microsoft Office technologiesAbility to manage a global ...

environments, including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems.Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent.GenAI security: experience assessing and mitigating risks ...

securing web applications and cloud platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical expert, but you must be able to understand and articulate ...

strong cloud security and governance expertise, you will: Security Architecture Translate business, data protection and security requirements into practical architectural designs leveraging industry frameworks (NIST, ISO 27001, CIS).Design and maintain cloud‐native security architectures, with deep expertise in GCP architecture, security services, and secure workload design.Establish secure architectural patterns … policies and standards.Support compliance assessments and audits, including cloud‐specific controls and emerging AI regulatory frameworks.Ensure alignment to governance standards such as ISO 27001, NIST 800‐53/CSF, NIS2, DORA, and industry cloud security benchmarks. Technology Evaluation & Continuous Improvement Conduct cloud and AI security architecture reviews, including: Cloud configuration ...

migrated workloads. Define encryption standards (at rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. ...

existing system designs, including recommending sensible mitigations that balance cost, risk and usability.• Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR).• Experience in one of the following specialisms: AI/ML/Data/Cloud/M365/Security Architecture• Experience in application architecture ...

from a security standpoint.• Expertise in Continuous Security, Continuous Integration and Continuous Delivery techniques• Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc.• Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and ...

system designs or products, including recommending sensible mitigations that balance cost, risk and usability. • Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR).• Deep architectural xxperience in one of the following specialisms: AI/ML Security/Cloud/M365/DevSecOps Security Architecture• Experience ...

design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR, and PCI-DSS Working closely with engineers, architects, and stakeholders to embed security by design Contributing to Agile delivery teams and supporting continuous improvement About ...

communication skills, with the ability to turn technical security concerns into clear, actionable decisions. Familiarity with recognised frameworks or certifications such as ISO 27001, NIST CSF or similar would be helpful. Experience in a product, platform or SaaS business. Experience in high-trust, regulated or mission-critical environments would ...

bring: Mandatory skills Significant experience in Information Security and GRCStrong understanding of risk management methodologies and international security standards (e.g., ISO 27001, US NIST, TSA, etc.) and the ability to assess risks, identify vulnerabilities, etc.Familiarity with data privacy legislation such as EU GDPRExperience maintaining and auditing Information Security Management Systems ...

coordinating third-party security providers such as managed SOC or security service partners. Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF or similar. Experience in an engineering or manufacturing business delivering long-lived systems would be helpful. Experience in high-trust, regulated or mission-critical ...

Months £110k plus bens - UK REMOTE Senior SOAR Engineer | Splunk SOAR | Splunk Enterprise Security | Cyber Security | Security Automation | Python | MITRE ATT&CK | NIST An opportunity has arisen for an experienced Senior SOAR Engineer to join a high-performing Cyber Security Engineering team responsible for designing, developing and optimising secu... ...

sectors, ensuring high-quality outcomes and practical recommendations 3. Act as a subject matter expert across recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF and Defence Cyber Certification requirements 4. Design and implement governance frameworks, policies, processes and controls that help clients manage cyber risk effectively 5. … and Compliance, ideally within cyber security, information security or technology risk 2. Good working knowledge of recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF, Cyber Essentials and related assurance or certification schemes 3. Experience leading risk assessments, control reviews, audit preparation, compliance programmes or security maturity assessments ...

technical audiences at various hierarchical levels.Deep knowledge of common information security management frameworks and standards, such as ISO/IEC 27001/27002, NIST 800-53, and the NIST Cybersecurity Framework.Soft skills: collaboration, teamwork, persuasion, attention to detail, time management, prioritization, resourcefulness.Advanced proficiency with MS Office products, primarily MS Word ...

chain management and perform cyber security auditsExperience in producing Zones and Conduits Partitioning Diagrams, Cyber Security Requirements definition and cyber security AssuranceISO 27005/NIST 800-82/NIST 800-53 KnowledgeDesirable requirements for the role includeNIS/NIS2 knowledgeRailway industry experience and TS 50701 KnowledgeUnderstanding of Railway frameworks (e.g. ...