1 to 25 of 79 NCSC Jobs in England

Container & DevSecOps - Kubernetes (EKS, Tanzu), Terraform, Ansible, CI/CD security, image scanning, container hardening Architecture Frameworks - TOGAF, ArchiMate, SABSA, Zachman, MODAF, JSP standards, NCSC architectural patterns HLD/LLD authoring, Security Patterns, Reference Architectures, Bill of Materials, Crypto Plans and JSP-compliant documentation Design Authority leadership, Technical Security Boards ...

across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

security qualification such as CISSP, CCSK or CCSP. It would be great if you had: Knowledge of security architecture frameworks and methodologies, including: NIST. NCSC guidance. SABSA. Understanding of Secure by Design principles. Experience across one or more security domains, such as: Identity & Access Management (IAM). Infrastructure. Security. Data ...

Manage and maintain entity-level cyber risk registers, ensuring clear visibility, prioritisation, and mitigation progress. Ensure alignment with key standards and regulatory frameworks including: NCSC guidance and CAF ISO 27001 NIST CSF Cyber Essentials Plus Secure by Design principles Work with procurement to ensure cyber requirements are appropriately flowed down ...

Conduct security assessments, vulnerability reviews, and compliance audits against corporate and government security standards. Support risk treatment planning and remediation activities. Ensure alignment with NCSC, MoD, JSP, NIST, and Lockheed Martin security policies and standards where applicable. Support incident response investigations affecting classified systems. Assist with vulnerability management, patch management ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

Looking For: Proven experience within Cyber Security Governance, Risk & Compliance (GRC) environments. Strong knowledge of NIST CSF, NIST 800-53, ISO 27001, and NCSC CAF . Experience conducting risk assessments and security control reviews. Ability to interpret regulatory or contractual requirements and translate them into actionable security controls. Excellent stakeholder ...

security qualification such as CISSP, CCSK or CCSP. It would be great if you had: Knowledge of security architecture frameworks and methodologies, including: NIST. NCSC guidance. SABSA. Understanding of Secure by Design principles. Experience across one or more security domains, such as: Identity & Access Management (IAM). Infrastructure. Security. Data ...

following: Cyber Governance, Risk & Compliance (GRC) Delivering security consulting engagements Implementing or assessing controls against recognised frameworks including: ISO 27001 NIST NIS NCSC Cyber Assessment Framework (CAF) DORA TISAX IEC 62443 Conducting cyber risk assessments and governance reviews Developing security policies, standards and procedures Building business cases and regulatory compliance ...

doing so play a key role in nationally critical projects which make a real difference to people’s everyday lives. We are a National Cyber Security Centre Assured Cyber Security Consultancy. Locations: London, Guildford, Bristol, M4 corridor Roles and Responsibilities Working either individually or as part of a larger Actica ...

Chartered Institute of Information Security (CIISec) - highly desirable. · Chartered or Principal status via the UK Cyber Security Council for Secure Systems Architecture. · NCSC Certified Cyber Professional in Security Architecture. · IEng or CEng registered with UK Engineering body. · Chartership through the British Computer Society. · SABSA Chartered Security Architect Other Information Market ...

Chartered Institute of Information Security (CIISec) - highly desirable. Chartered or Principal status via the UK Cyber Security Council for Secure Systems Architecture. NCSC Certified Cyber Professional in Security Architecture. IEng or CEng registered with UK Engineering body. Chartership through the British Computer Society. SABSA Chartered Security Architect. Other Information Market ...

programs, such as AWS APN and Azure Partners Experience with well-architected frameworks Knowledge of UK public sector technology guidance and frameworks, such as NCSC's Cyber Assessment Framework (CAF) and the Technology Code of Practice (TCoP) Familiarity with Python, Bash and JavaScript Agile practices such as Scrum ...

architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire to work ...

architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire to work ...

architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire to work ...

/PAM) Secure-by-Design principles Threat modelling and security risk assessment Experience producing security architecture artefacts and supporting accreditation activities. Knowledge of NCSC guidance, JSP 440, Secure by Design and defence security standards. Security certifications such as CISSP, SABSA, TOGAF or equivalent desirable. Please note: Due to the highly ...

issues in existing system designs or products, including recommending sensible mitigations that balance cost, risk and usability. Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). Deep architectural xxperience in one of the following specialisms: AI/ML Security/Cloud/M365/DevSecOps ...

tools, and frameworks. Develop overall technology standards and practices, setting governance standards across the portfolio. Understand security such as GDPR, ISO 27001, Cyber Essentials, NCSC framework. Working as a key member of the Bid Factory management, aiding with bids/tenders. Assess opportunities with B2B leads, starting from enquiries into ...

Essential experience Strong experience in cyber or information security operations within large-scale programmes or critical national infrastructure. Knowledge of UK government security standards, NCSC guidance and security risk frameworks. Experience of incident response and vulnerability management in multi-supplier environments. Strong stakeholder management and communication skills. Ability to manage ...

across technical, operational and executive audiences. Coaching, mentoring and developing cyber security professionals. Experience in one or more of the following would be advantageous: NCSC guidance, UK Cyber Security Council frameworks and CIISec professional standards. Defence, Government, Critical National Infrastructure or other highly regulated sectors. Security governance, risk and compliance ...

collaboratively within a team environment. It would be great if you had: • Exposure to security frameworks such as ISO 27001, Cyber Essentials or National Cyber Security Centre guidance. • Understanding of third-party risk management concepts. • Experience working with structured processes such as onboarding, compliance or risk assessments. • Awareness of data ...

multiple user-research led agile product teams. Experience of working with Government Digital Service standards, GOV.UK services (Notify, One Login, Pay) and National Cyber Security Centre guidelines and security standards. Experience of guiding and documenting cloud and API solution architectures including design solutions using AWS API Gateway and Lambdas. Proficiency ...

technical reports for clients Supporting and collaborating with a wider team of cyber security consultants on varied projects Maintaining testing activities in line with NCSC CHECK and CREST methodologies What They're Looking For: Active SC Clearance (essential) Current CHECK Team Member status (essential) Proven experience delivering penetration testing engagements ...