18 of 18 Permanent NIST Jobs in Birmingham

security, infrastructure security, network architecture, data protection and identity and access management. Experience with threat modelling methodologies and security frameworks such as SABSA, TOGAF, NIST Cybersecurity Framework, ISO 27001 or CIS Controls. Knowledge of secure software development, DevSecOps, vulnerability management and security testing practices. Experience assessing third-party suppliers, technology ...

analysis, SIEM tools, threat intelligence or incident response Governance and risk : Interest in security frameworks and standards such as ISO 27001, Cyber Essentials or NIST Offensive security : Capture the Flag (CTF) competitions, home labs or ethical hacking platforms We’re looking for individuals who enjoy solving real‐world problems, want ...

ingestion strategies, detection engineering and security posture management. Strong working knowledge of Zero Trust architecture and the application of recognised security frameworks such as NIST CSF, ISO 27001, PCI DSS, DORA, MITRE ATT&CK and CSA guidance. Demonstrable experience operating within a Partner delivery model, including customer-facing consultancy, reference ...

2+ leading or supervising a team Hands‐on experience with risk assessment, incident management, and running projects Working knowledge of a recognized security framework (NIST, CMMC, CIS, or ISO 27001), including mapping controls and gathering evidence Practical experience with SIEM, EDR, vulnerability management, firewalls, email security, identity and access management ...

strong cloud security and governance expertise, you will: Security Architecture Translate business, data protection and security requirements into practical architectural designs leveraging industry frameworks (NIST, ISO 27001, CIS). Design and maintain cloud‐native security architectures , with deep expertise in GCP architecture, security services, and secure workload design . Establish … standards. Support compliance assessments and audits, including cloud‐specific controls and emerging AI regulatory frameworks. Ensure alignment to governance standards such as ISO 27001, NIST 800‐53/CSF, NIS2, DORA, and industry cloud security benchmarks. Technology Evaluation & Continuous Improvement Conduct cloud and AI security architecture reviews, including: Cloud configuration ...

experience within Cyber Security, Information Security, Technology Risk, IT Audit, or Operational Risk. Knowledge of cyber security frameworks including: ISO 27001/27002/NIST Cybersecurity Framework/COBIT/CIS Controls Experience supporting clients through compliance assessments, control testing, remediation planning and governance reporting activities. Experience managing small teams ...

What You’ll Need to be Considered AWS and/or Azure cloud-native security CSPM and CWPP platforms Threat modeling and secure coding NIST, ISO 27001, or CIS frameworks #J-18808-Ljbffr ...

experience within Cyber Security, Information Security, Technology Risk, IT Audit, or Operational Risk. Knowledge of cyber security frameworks including: ISO 27001/27002/NIST Cybersecurity Framework/COBIT/CIS Controls Experience supporting clients through compliance assessments, control testing, remediation planning and governance reporting activities. Experience managing small teams ...

risk and compliance. The role emphasises strong stakeholder engagement and cross-framework expertise. Ideal candidates will have hands-on ISO 27001 audits, exposure to NIST CSF and CAF, and experience with GDPR and data protection considerations, all #J-18808-Ljbffr ...

Management: Establish robust cyber security governance frameworks tailored to OT environments. Spearhead comprehensive security risk assessments and gap analyses using industry frameworks such as NIST CSF and IEC 62443. Based on these assessments, identify the most cost-effective security controls in line with the client’s risk appetite, balancing risk … industrial control systems and SCADA environments is expected. Standards & Regulatory Knowledge: Strong familiarity with OT security standards and frameworks such as IEC 62443 and NIST CSF, and with relevant regulations like the NIS Regulations and HSE OG-0086. Ability to apply these frameworks in practice and guide organisations through compliance ...

coordinating third-party security providers such as managed SOC or security service partners. Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF or similar. Experience in an engineering or manufacturing business delivering long-lived systems would be helpful. Experience in high-trust, regulated or mission-critical ...

live industrial sites. You will design secure OT architectures, implement segmentation and risk-based controls, and apply frameworks such as IEC 62443 and NIST CSF. Travel across the UK and UK security clearance readiness are expected. #J-18808-Ljbffr ...

and purple team activity into the wider assurance programme. Supporting security assurance against frameworks and standards including the NCSC Cyber Assessment Framework, ISO 27001, NIST CSF 2.0 and Cyber Essentials Plus. Communicating technical risk and control weaknesses clearly to senior stakeholders, balancing security improvement against cost, resilience and operational requirements. … effectiveness and drift, managing exceptions and driving remediation of identified weaknesses. Knowledge of the NCSC CAF and at least one of ISO 27001 or NIST CSF 2.0. Experience of zero trust and identity architecture, including conditional access and adaptive authentication. Experience scoping, commissioning or managing penetration testing. The ability ...

and vulnerabilities using advanced security tools (SIEM, EDR, XDR). Lead risk assessments, penetration testing, and compliance audits to ensure alignment with industry standards (NIST, ISO 27001). Collaborate with IT, production, and leadership teams to foster a security-first culture across global operations. Drive incident response, forensic investigations, and … . Hands-on experience with firewalls, IDS/IPS, SIEM, EDR/XDR, IAM, and OT security solutions. Familiarity with cyber risk frameworks (NIST, CIS, ISO 27001, MITRE ATT&CK). Industry certifications such as CISSP, CISM, GICSP, CEH, or equivalent (preferred). A proactive, analytical mindset with the ability ...

and purple team activity into the wider assurance programme. Supporting security assurance against frameworks and standards including the NCSC Cyber Assessment Framework, ISO 27001, NIST CSF 2.0 and Cyber Essentials Plus. Communicating technical risk and control weaknesses clearly to senior stakeholders, balancing security improvement against cost, resilience and operational requirements. … effectiveness and drift, managing exceptions and driving remediation of identified weaknesses. Knowledge of the NCSC CAF and at least one of ISO 27001 or NIST CSF 2.0. Experience of zero trust and identity architecture, including conditional access and adaptive authentication. Experience scoping, commissioning or managing penetration testing. The ability ...

and purple team activity into the wider assurance programme. Supporting security assurance against frameworks and standards including the NCSC Cyber Assessment Framework, ISO 27001, NIST CSF 2.0 and Cyber Essentials Plus. Communicating technical risk and control weaknesses clearly to senior stakeholders, balancing security improvement against cost, resilience and operational requirements. … effectiveness and drift, managing exceptions and driving remediation of identified weaknesses. Knowledge of the NCSC CAF and at least one of ISO 27001 or NIST CSF 2.0. Experience of zero trust and identity architecture, including conditional access and adaptive authentication. Experience scoping, commissioning or managing penetration testing. The ability ...

implementation, maintenance and continuous improvement of Information Security Management Systems (ISMS). Lead and contribute to audits against ISO 27001, ISO 27701, ISO 9001, NIST CSF and IASME Governance. Conduct internal audits and provide recommendations for improvement. Support clients with information security governance, risk and compliance activities. Manage third-party … Experience Strong experience within Information Security Governance, Risk & Compliance (GRC). Hands-on experience implementing and auditing ISO 27001. Knowledge of other frameworks, including NIST CSF and HMG standards such as CAF. Experience working within a Business Management System (BMS) aligned to ISO standards. Good understanding of Cyber Essentials Plus ...

geographically dispersed teams Proven track record managing enterprise-scale vulnerability remediation programmes Experience operating within complex, global organisations Exposure to regulatory environments such as NIST SP 800-40, DORA, FCA/PRA requirements, ISO 27001 and NIST Cybersecurity Framework Strong understanding of risk-based vulnerability prioritization Proven ability to leverage ...