17 of 17 Permanent NIST Jobs in Birmingham

defence infrastructure projects, or government contractors . Knowledge of JSP 440, DEFCON 76, Secure by Design, Cyber Essentials Plus, ISO 27001, and NIST frameworks . Key Attributes We're looking for someone who demonstrates: Integrity, professionalism, and discretion. Strong risk awareness and sound judgement. Excellent analytical and problem-solving skills. ...

securing web applications and cloud platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical expert, but you must be able to understand and articulate ...

securing web applications and cloud platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical expert, but you must be able to understand and articulate ...

Cyber Risk Management Framework Assist in assessing cyber risks against: Government Security Policy Framework (SPF) DSPT Cyber Assurance Framework NCSC guidance ISO 27001/NIST aligned approaches Promote a proportionate, risk-based approach to cyber security across the organisation Governance & Reporting Contribute to cyber risk reporting for senior management and ...

environments, including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems.Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent.GenAI security: experience assessing and mitigating risks ...

existing system designs, including recommending sensible mitigations that balance cost, risk and usability.• Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR).• Experience in one of the following specialisms: AI/ML/Data/Cloud/M365/Security Architecture• Experience in application architecture ...

from a security standpoint. - Expertise in Continuous Security, Continuous Integration and Continuous Delivery techniques - Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc. - Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and ...

system designs or products, including recommending sensible mitigations that balance cost, risk and usability. • Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR).• Deep architectural xxperience in one of the following specialisms: AI/ML Security/Cloud/M365/DevSecOps Security Architecture• Experience ...

Splunk, Log Rhythm, Qualys Implementing security technology controls, secure config and implementation of security projects Information security risks management, controls and frameworks (NIST, CIS, PCI-DSS) IT Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM ...

environment, for example technology risk, data governance, model risk, operational risk, or information security.Familiarity with external AI frameworks or regulatory guidance such as ISO42001, NIST AI RMF, EU AI Act, industry standards or ethics principles relating to technology, data or AI.Knowledge of artificial intelligence concepts and risks, for example model ...

operations, security and business stakeholders. Support governance, reporting, audit readiness and continuous improvement. Implement automation and operational best practices where applicable. Technical Skills : CVSS, NIST, DORA, ISO 27001, Cyber Defence Preferred Skills : Enterprise-scale operations experience, stakeholder management, automation mindset, strong analytical and problem-solving capabilities. ...

stakeholders. • Support governance, reporting, audit readiness and continuous improvement. • Implement automation and operational best practices where applicable. Required Experience - 9+ years Technical Skills - CVSS, NIST, DORA, ISO 27001, Cyber Defence Preferred Skills Enterprise-scale operations experience, stakeholder management, automation mindset, strong analytical and problem-solving capabilities. Benefits A supportive, diverse ...

coordinating third-party security providers such as managed SOC or security service partners. Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF or similar. Experience in an engineering or manufacturing business delivering long-lived systems would be helpful. Experience in high-trust, regulated or mission-critical ...

sectors, ensuring high-quality outcomes and practical recommendations 3. Act as a subject matter expert across recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF and Defence Cyber Certification requirements 4. Design and implement governance frameworks, policies, processes and controls that help clients manage cyber risk effectively 5. … and Compliance, ideally within cyber security, information security or technology risk 2. Good working knowledge of recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF, Cyber Essentials and related assurance or certification schemes 3. Experience leading risk assessments, control reviews, audit preparation, compliance programmes or security maturity assessments ...

technical audiences at various hierarchical levels.Deep knowledge of common information security management frameworks and standards, such as ISO/IEC 27001/27002, NIST 800-53, and the NIST Cybersecurity Framework.Soft skills: collaboration, teamwork, persuasion, attention to detail, time management, prioritization, resourcefulness.Advanced proficiency with MS Office products, primarily MS Word ...

chain management and perform cyber security auditsExperience in producing Zones and Conduits Partitioning Diagrams, Cyber Security Requirements definition and cyber security AssuranceISO 27005/NIST 800-82/NIST 800-53 KnowledgeDesirable requirements for the role includeNIS/NIS2 knowledgeRailway industry experience and TS 50701 KnowledgeUnderstanding of Railway frameworks (e.g. ...

Access mentoring, knowledge sharing and professional development opportunities to support your career growth Expand your understanding of industry standards and frameworks including IEC 62443, NIST CSF and NIS/NIS2 Progress through clearly defined technical and professional development pathways as your experience grows Benefits A global network of expertise and … both IT and OT networks (e.g., endpoint protection tools, firewalls, intrusion detection systems). Familiarity with key standards, frameworks, and regulations, including IEC 62443, NIST CSF, the ISO 27000 series, MITRE ATT&CK, and NIS/NIS2. Excellent stakeholder engagement and communication skills, with the ability to articulate threat-based ...