16 of 16 Permanent NIST Jobs in Birmingham

security, infrastructure security, network architecture, data protection and identity and access management. Experience with threat modelling methodologies and security frameworks such as SABSA, TOGAF, NIST Cybersecurity Framework, ISO 27001 or CIS Controls. Knowledge of secure software development, DevSecOps, vulnerability management and security testing practices. Experience assessing third-party suppliers, technology ...

risk into practical architectural solutions that support organisational objectives and digital transformation. Strong knowledge of security, regulatory and industry frameworks (e.g. including ISO 27001, NIST, GDPR and IEC 62443), with the ability to apply these across business, IT and OT environments. Demonstrable experience designing and evaluating secure Cloud and ...

ingestion strategies, detection engineering and security posture management. Strong working knowledge of Zero Trust architecture and the application of recognised security frameworks such as NIST CSF, ISO 27001, PCI DSS, DORA, MITRE ATT&CK and CSA guidance. Demonstrable experience operating within a Partner delivery model, including customer-facing consultancy, reference ...

2+ leading or supervising a team Hands‐on experience with risk assessment, incident management, and running projects Working knowledge of a recognized security framework (NIST, CMMC, CIS, or ISO 27001), including mapping controls and gathering evidence Practical experience with SIEM, EDR, vulnerability management, firewalls, email security, identity and access management ...

strong cloud security and governance expertise, you will: Security Architecture Translate business, data protection and security requirements into practical architectural designs leveraging industry frameworks (NIST, ISO 27001, CIS). Design and maintain cloud‐native security architectures , with deep expertise in GCP architecture, security services, and secure workload design . Establish … standards. Support compliance assessments and audits, including cloud‐specific controls and emerging AI regulatory frameworks. Ensure alignment to governance standards such as ISO 27001, NIST 800‐53/CSF, NIS2, DORA, and industry cloud security benchmarks. Technology Evaluation & Continuous Improvement Conduct cloud and AI security architecture reviews, including: Cloud configuration ...

What You’ll Need to be Considered AWS and/or Azure cloud-native security CSPM and CWPP platforms Threat modeling and secure coding NIST, ISO 27001, or CIS frameworks #J-18808-Ljbffr ...

access controls. ✔️ Develop, update, and enforce cybersecurity policies. ✔️ Collaborate with IT teams on patching and vulnerability management. ✔️ Track compliance with ISO 27001, GDPR, and NIST frameworks. ✔️ Develop cybersecurity awareness programs for employees. ✔️ Manage identity and access control systems. ✔️ Prepare risk assessment and mitigation reports. ✔️ Support external audits and third‐party ...

experience within Cyber Security, Information Security, Technology Risk, IT Audit, or Operational Risk. Knowledge of cyber security frameworks including: ISO 27001/27002/NIST Cybersecurity Framework/COBIT/CIS Controls Experience supporting clients through compliance assessments, control testing, remediation planning and governance reporting activities. Experience managing small teams ...

risk and compliance. The role emphasises strong stakeholder engagement and cross-framework expertise. Ideal candidates will have hands-on ISO 27001 audits, exposure to NIST CSF and CAF, and experience with GDPR and data protection considerations, all #J-18808-Ljbffr ...

Management: Establish robust cyber security governance frameworks tailored to OT environments. Spearhead comprehensive security risk assessments and gap analyses using industry frameworks such as NIST CSF and IEC 62443. Based on these assessments, identify the most cost-effective security controls in line with the client’s risk appetite, balancing risk … industrial control systems and SCADA environments is expected. Standards & Regulatory Knowledge: Strong familiarity with OT security standards and frameworks such as IEC 62443 and NIST CSF, and with relevant regulations like the NIS Regulations and HSE OG-0086. Ability to apply these frameworks in practice and guide organisations through compliance ...

live industrial sites. You will design secure OT architectures, implement segmentation and risk-based controls, and apply frameworks such as IEC 62443 and NIST CSF. Travel across the UK and UK security clearance readiness are expected. #J-18808-Ljbffr ...

and purple team activity into the wider assurance programme. Supporting security assurance against frameworks and standards including the NCSC Cyber Assessment Framework, ISO 27001, NIST CSF 2.0 and Cyber Essentials Plus. Communicating technical risk and control weaknesses clearly to senior stakeholders, balancing security improvement against cost, resilience and operational requirements. … effectiveness and drift, managing exceptions and driving remediation of identified weaknesses. Knowledge of the NCSC CAF and at least one of ISO 27001 or NIST CSF 2.0. Experience of zero trust and identity architecture, including conditional access and adaptive authentication. Experience scoping, commissioning or managing penetration testing. The ability ...

and purple team activity into the wider assurance programme. Supporting security assurance against frameworks and standards including the NCSC Cyber Assessment Framework, ISO 27001, NIST CSF 2.0 and Cyber Essentials Plus. Communicating technical risk and control weaknesses clearly to senior stakeholders, balancing security improvement against cost, resilience and operational requirements. … effectiveness and drift, managing exceptions and driving remediation of identified weaknesses. Knowledge of the NCSC CAF and at least one of ISO 27001 or NIST CSF 2.0. Experience of zero trust and identity architecture, including conditional access and adaptive authentication. Experience scoping, commissioning or managing penetration testing. The ability ...

implementation, maintenance and continuous improvement of Information Security Management Systems (ISMS). Lead and contribute to audits against ISO 27001, ISO 27701, ISO 9001, NIST CSF and IASME Governance. Conduct internal audits and provide recommendations for improvement. Support clients with information security governance, risk and compliance activities. Manage third-party … Experience Strong experience within Information Security Governance, Risk & Compliance (GRC). Hands-on experience implementing and auditing ISO 27001. Knowledge of other frameworks, including NIST CSF and HMG standards such as CAF. Experience working within a Business Management System (BMS) aligned to ISO standards. Good understanding of Cyber Essentials Plus ...

geographically dispersed teams Proven track record managing enterprise-scale vulnerability remediation programmes Experience operating within complex, global organisations Exposure to regulatory environments such as NIST SP 800-40, DORA, FCA/PRA requirements, ISO 27001 and NIST Cybersecurity Framework Strong understanding of risk-based vulnerability prioritization Proven ability to leverage ...

geographically dispersed teams Proven track record managing enterprise-scale vulnerability remediation programmes Experience operating within complex, global organisations Exposure to regulatory environments such as NIST SP 800-40, DORA, FCA/PRA requirements, ISO 27001 and NIST Cybersecurity Framework Strong understanding of risk-based vulnerability prioritization Proven ability to leverage ...