22 of 22 ISO/IEC 27005 Jobs in England

schemes, including: * Defence Cyber Certification (DCC) up to and including Level 2 (with support to Level 3 progression) * Cyber Essentials * ISO / IEC 27001 and supporting standards (e.g. ISO / IEC 27002, ISO / IEC … clear commitment to completing, a recognised audit chartership pathway • Lead auditor or assessor experience against frameworks such as ISO / IEC 27001, NIST, Cyber Essentials, and defence-oriented assurance schemes. • Ability to communicate clearly and authoritatively in writing and verbally, including presenting findings to senior ...

including the head of product security and Product Cyber Resilience Managers to support ongoing Security Assurance. What you’ll bring: Practical experience of ISO27001 / 27004 / 27005 and / or NIST Risk Management Framework(RMF). Experience of supporting asecurity riskmanagement system for highly … Penetration Test Reports and support remediation activities. Awareness of UK Government Assurance Processes (such as the MoD Secure by Design Framework (through JSP 453 / ISN2023 / 09 and through legacy JSP 604 Assurance or the CAF GovAssure processes). Professional recognition in security governance and risk management ...

including the head of product security and Product Cyber Resilience Managers to support ongoing Security Assurance. What you’ll bring: Practical experience of ISO27001 / 27004 / 27005 and / or NIST Risk Management Framework(RMF). Experience of supporting asecurity riskmanagement system for highly … Penetration Test Reports and support remediation activities. Awareness of UK Government Assurance Processes (such as the MoD Secure by Design Framework (through JSP 453 / ISN2023 / 09 and through legacy JSP 604 Assurance or the CAF GovAssure processes). Professional recognition in security governance and risk management ...

Cyber and Information Assurance Consultant Job Title Cyber and Information Assurance Consultant Hours Per Week 37 Reporting to Reporting to Principal Cyber Consultant / Head of Services Location Location Remote-first, with attendance at Nexor’s Nottingham office and customer locations as required. Regular UK travel may form part … lifecycle principles. Residual risk and risk acceptance. Assurance evidence and traceability. Frameworks and Standards Working knowledge of some of the following: ISO / IEC 27001. ISO / IEC 27005. NCSC Cyber Assessment Framework. NIST Cybersecurity Framework. MOD Defence Standard ...

across Humanoid's HMND 01 platform family — the Alpha Wheeled industrial robot and the Alpha Bipedal home robot — both powered by our KinetIQ VLM / VLA-based AI framework. Working alongside product, firmware, autonomy, and hardware teams as part of the Systems Engineering and Architecture Team, you will define … resilient. Contribute to the continual improvement of security engineering capability across the organisation. Ensure compliance with cybersecurity obligations under the EU Machinery Regulation 2023 / 1230 where cyber controls intersect with safety-critical functions and compliance to IEC 62443 (for industrial / OT product security ...

Resilience Managers and the Head of Product Security, to deliver effective security assurance and risk management. What you'll bring: Practical experience of ISO27001 / 27004 / 27005 and NIST Risk Management Framework (RMF). Experience of supporting a security risk management system for highly regulated … could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: https: / / careers.uk.leonardo.com / gb / en / security-and-vetting Why join us At Leonardo, our people ...

27005 frameworks. Operational Technology (OT) Security: Collaborate with OT Security Manager to enhance security within control systems and manufacturing networks (ICS / SCADA). Policy & Governance: Support the development, review, and communication of cyber security policies, standards, and procedures. Security Awareness & Culture: Promote cyber security awareness … cyber or information security, within a regulated or critical infrastructure environment. Working knowledge of:o NCSC Cyber Assessment Framework (CAF)o ISO / IEC 27001 Information Security Managemento NISR Regulations and ONR SyAPso Network security principles of IT systems Hands-on experience with SIEM tools ...

supporting multiple projects and programmes by defining and championing information security solutions. The role will work closely with systems and project engineers, developers, internal / external business stakeholders and project managers within various departments to assess risk and deliver pragmatic, flexible and sustainable security that includes people, process … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile / DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube ...

supporting multiple projects and programmes by defining and championing information security solutions. The role will work closely with systems and project engineers, developers, internal / external business stakeholders and project managers within various departments to assess risk and deliver pragmatic, flexible and sustainable security that includes people, process … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile / DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube ...

sector, including: NCSC NIS Guidance and CAF, ISO 27001 and ISO 27005, NERC CIP, ISA‐99 / IEC 62443, NIST CSF. All PA people are required to undergo background checks and to achieve the Baseline Personnel Security Standard; some UK roles ...

approaches and its relationship to threat and vulnerability.* Varied experience of assessing, defining and implementing security governance frameworks.* A confident understanding of TCP / IP based networking concepts across the OSI model layer as well as the common protocols and their risks.This is not an exhaustive list … could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: https: / / careers.uk.leonardo.com / gb / en / security-and-vetting**Why join us**At Leonardo, our people ...

simulations, and quantified risk models Practical experience using AI tools for risk analysis and scenario generation, with strong prompt engineering skills Advanced Excel; Python / R and CRQ tools (desirable) Familiarity with threat intelligence, incident datasets (VERIS), and control frameworks (NIST, ISO) Ability to translate quantitative outputs … into clear business narratives Desirable: nuclear / CNI experience; ONR SyAPs, NISR 2003, HMG SPF 38 years in cyber risk, security, or analytical roles What's on offer Annual bonus of up to 15% Defined contribution pension company matches up to 13.5% for a 7% employee contribution 30 days ...

Cyber Security Technical Assurance Specialist £85 p / h | Outside IR35 | 12 Months | 1 Day a week Travel to the North West We're looking for an experienced Technical Assurance Specialist to support the delivery of cyber assurance activities across complex OT and Cloud environments . This role requires … assess technical controls, challenge stakeholders, and provide pragmatic cyber security guidance across the business. Key Experience: NCSC Cyber Assessment Framework (CAF) Cyber Essentials / Cyber Essentials Plus Technical Security Assurance Cyber Risk Assessments OT (Operational Technology) environments Cloud Security & Assurance Third-Party / Supplier Assurance Internal & External Audits ...

Knowledge, Skills & Experience Essential Experience in cyber risk management, ideally within a regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g. … CRISC, CISSP, ISO 27005 Risk Manager). Desirable Experience in the nuclear or CNI sector. Familiarity with ONR SyAPs, NISR 2003, and HMG SPF. Experience with risk quantification or risk tooling platforms. Context and Challenges This role operates within a complex, highly regulated, and security-critical ...

Cyber Security Assurance Specialist £630 p / d | Outside IR35 | 12 Months | Manchester (1 day per week on site) Join a major cyber transformation programme within a highly regulated environment where you'll play a key role in strengthening security assurance across critical Operational Technology (OT) and cloud platforms. … track record leading audits from planning through to remediation Knowledge of Cyber Essentials, ISO 27001, ISO 27005 and / or NIST Why Apply? Outside IR35 Long-term 12-month engagement High-profile cyber transformation programme Exposure to both Cloud and OT security challenges ...

Data Protection Act ISO 27001:2022, ISO 27005 and ISO 31000 PCI DSS NIST 800-30 / 53 CIS Top 18 and OWASP Top 10 Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse ...

Role: Cyber and Information Assurance Consultant – Mid, Senior & Principal Levels Location: Nottingham / Remote-first Working Arrangement: Remote-first, with travel to Nottingham and customer sites as required Salary: £65,000–£120,000 Are you a cyber security or information assurance professional who enjoys working with customers, getting into … such as cyber risk management, security controls, threat and vulnerability assessment, security governance and risk acceptance is important. Experience with frameworks such as ISO 27001, ISO 27005, the NCSC Cyber Assessment Framework, NIST or MOD security standards would be beneficial. Experience within defence, government ...

Information Systems (NIS) guidance and Cyber Assessment Framework (CAF). ISO 27001 and ISO 27005. NERC CIP. ISA-99 / IEC 62443. NIST Cybersecurity Framework (CSF). ...

collaborative team tackling complex challenges. You don’t need to tick every box, but we’re particularly interested in people with skills / experience as described below. Essential experience includes: Experience of working on risk assessments using industry approved methodologies (such as NIST, ISO 27005 … . Producing clear, actionable risk treatment plans aligned to security objectives to treat / mitigate the identified risks. Experience supporting compliance and assurance activities, including audits, control testing, and evidence gathering Creation of security documentation to support the development of an information system, these could include: Security Aspects ...

product lifecycle. You will define security requirements and guide cross‐functional teams to embed security by design. You will bring experience with ISO27001 / 27004 / 27005 and NIST RMF, and you will work within a hybrid setup in the UK, contributing to resilient, compliant security ...

Onsite or Hybrid: OnSite Job Title: Cyber Security Lead Compensation: £57,300 - £71,600 Depending on Experience + Benefits Role Type: Full time / Permanent Role ID: SF73469 At Babcock we’re working to create a safe and secure world, together, and if you join us, you can play … cyber security assurance activities Proven ability to conduct threat modelling and risk assessments In-depth knowledge of cyber security frameworks such as NIST, ISO 27001, and ISO 27005 Experience influencing multidisciplinary teams including engineering and DevOps functions Experience working within defence, government, or highly ...

supporting existing business-as-usual teams. Perform handover of security secretmaterials, including cryptographic keys and certificates, devices andaccess control credentials to the customer and / or successor operator. Provide reporting to the RCC Handbackleadership team. May be required to work across customer,TfL, successor operator sites and data centres. … Brokers Knowledge of cryptographic services,products and HSM devices. Knowledge of wider security, audit, riskand compliance standards including: PCI-P2PE PCI-POI-PTS ISO27701 ISO27005 ISO31000 NIST GDPR Governance,Risk and Compliance tools Experience with quality managementsystems and external audit standards such as ISO 9001. #J-18808-Ljbffr ...