16 of 16 Permanent NIST Jobs in Birmingham

accurately recorded and managed. Help maintain the Cyber Risk Management Framework and assess risks against recognised standards, including SPF, NCSC guidance, ISO 27001 and NIST-aligned approaches. Produce cyber risk reports, analysis and briefings for senior leaders and assurance forums. Support cyber assurance activities across digital change programmes, cloud services ...

Design and validate Zero Trust architectures across identity, device, network, application, and data layers. Define enterprise security architecture guardrails, controls, and patterns aligned to NIST, CIS, ISO 27001, Zero Trust, and industry regulations. Support architecture governance boards, ensuring all designs adhere to security standards. Identify systemic, long-term structural risks ...

and communication skills. Ability to interpret security operational outputs and reporting. Experience developing governance documentation, process guidance, and assurance materials. Desirable Skills Knowledge of: NIST Cyber Security Framework (CSF) Secure by Design principles UK Government and NCSC security guidance Experience in highly regulated or security-sensitive environments. Experience supporting operational ...

strong cloud security and governance expertise, you will: Security Architecture Translate business, data protection and security requirements into practical architectural designs leveraging industry frameworks (NIST, ISO 27001, CIS). Design and maintain cloud‐native security architectures , with deep expertise in GCP architecture, security services, and secure workload design . Establish … standards. Support compliance assessments and audits, including cloud‐specific controls and emerging AI regulatory frameworks. Ensure alignment to governance standards such as ISO 27001, NIST 800‐53/CSF, NIS2, DORA, and industry cloud security benchmarks. Technology Evaluation & Continuous Improvement Conduct cloud and AI security architecture reviews, including: Cloud configuration ...

Identity, Secure Development, Third-Party risk, Incident Management Desirable: CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor/Implementer or equivalent experience. Knowledge of NIST CSF, ISO/IEC 27001, COBIT, CIS Controls or enterprise risk frameworks. Experience with SQL, JSON/CSV, APIs, Power BI or data quality controls. ...

Head of IT Security, Head of Cyber Security, ISO27001, NIST, CISM, CISO, Birmingham Head of IT Security required to work for an exciting Law Firm based in Birmingham. This will be a hybrid role where you will be expected to be in the office circa 2 days per week, along ...

Head of IT Security, Head of Cyber Security, ISO27001, NIST, CISM, CISO, Birmingham Head of IT Security required to work for an exciting Law Firm based in Birmingham. This will be a hybrid role where you will be expected to be in the office circa 2 days per week, along ...

from a security standpoint. Expertise in Continuous Security, Continuous Integration and Continuous Delivery techniques Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc. Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and ...

system designs or products, including recommending sensible mitigations that balance cost, risk and usability. Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). Deep architectural xxperience in one of the following specialisms: AI/ML Security/Cloud/M365/DevSecOps Security Architecture Experience ...

access controls. ✔️ Develop, update, and enforce cybersecurity policies. ✔️ Collaborate with IT teams on patching and vulnerability management. ✔️ Track compliance with ISO 27001, GDPR, and NIST frameworks. ✔️ Develop cybersecurity awareness programs for employees. ✔️ Manage identity and access control systems. ✔️ Prepare risk assessment and mitigation reports. ✔️ Support external audits and third‐party ...

stakeholders. Support governance, reporting, audit readiness and continuous improvement. Implement automation and operational best practices where applicable. Required Experience - 9+ years Technical Skills - CVSS, NIST, DORA, ISO 27001, Cyber Defence Preferred Skills Enterprise-scale operations experience, stakeholder management, automation mindset, strong analytical and problem-solving capabilities. Benefits A supportive, diverse ...

Management: Establish robust cyber security governance frameworks tailored to OT environments. Spearhead comprehensive security risk assessments and gap analyses using industry frameworks such as NIST CSF and IEC 62443. Based on these assessments, identify the most cost-effective security controls in line with the client’s risk appetite, balancing risk … industrial control systems and SCADA environments is expected. Standards & Regulatory Knowledge: Strong familiarity with OT security standards and frameworks such as IEC 62443 and NIST CSF, and with relevant regulations like the NIS Regulations and HSE OG-0086. Ability to apply these frameworks in practice and guide organisations through compliance ...

live industrial sites. You will design secure OT architectures, implement segmentation and risk-based controls, and apply frameworks such as IEC 62443 and NIST CSF. Travel across the UK and UK security clearance readiness are expected. #J-18808-Ljbffr ...

platform security and work across engineering, operations and stakeholders to ensure audit readiness. The role requires 9+ years of experience and expertise in CVSS, NIST, DORA, ISO 27001 and cyber defence, with a focus on automation and process improvement. #J-18808-Ljbffr ...

Transfer Partnership (KTP) project will develop and embed an in-house cyber security compliance capability at G&O Springs, equipping the business to meet NIST SP 800-171, CMMC readiness requirements and ISO 27001 expectations across both office and factory environments. You will work within G&O Springs, collaborating with … defence and aerospace supply-chain opportunities. What you will gain: Develop and implement advanced cybersecurity and digital resilience frameworks (including ISO 27001 and NIST 800-171) within a live aerospace and defence manufacturing environment Gain hands‐on experience embedding governance, risk management, incidentresponseand continuous improvement processes across complex digital and ...

outcomes outlined in HMGs Security Policy Framework, National Cyber Security Centre (NCSC), Cyber Assessment Framework (CAF) and or National Institute of Standards and Technology (NIST), to Cyber and related governance models and supporting the reporting of these to DfT and Cabinet Office. - With responsibility for direct reports, you will demonstrate ...