101 to 125 of 217 NCSC Jobs in England

threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

proposing mitigations to improve security posture Compliance & Governance: Assist in ensuring that the Thales cloud environments comply with government policies, such as GDPR, NCSC guidelines, and other relevant frameworks Collaboration with Development Teams: Work alongside cloud architects, developers, and engineers to ensure security is integrated into all stages of development ...

IT. It’s a specialist discipline. Saepio is one of the UK’s most recognised cyber specialists and a NCSC Assured Service Provider. We work with over 1,000 organisations to cut through noise and see real risk, align policy, people and technology, mature security operations, build resilience and provide ...

scope Supporting IT and business teams with secure-by-design principles and security best practices Driving compliance with key frameworks including Safran ISS policy, NCSC CAF, ITAR, Export Control and IGI 1300 Managing and responding to security alerts and incidents, working closely with SOC/CERT teams Supporting industrial ...

resilience within regulated environments. Desirable: Government, Energy or Critical National Infrastructure (CNI) experience. Knowledge of Operational Technology (OT) and IT security . Experience with NCSC CAF, IEC 62443 or ISO 27001 . Knowledge of the NIS Regulations 2018 and UK cyber resilience landscape. Experience developing security governance, assurance or onboarding ...

work as required Input into the development of Bridewell security methodologies. You will need to have experience in: Implementing security standards such as ISO27001, NCSC CAF, NIST Conducting Cyber Security risk assessments and managing risk management activities Good general knowledge of IT systems covering traditional infrastructure, cloud platforms and SaaS ...

Strong experience in cyber assurance, audit, risk management, or control testing within a regulated environment In-depth understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Domain-specific knowledge in at least one of: OT, technical architecture, or supply chain security Strong analytical, reporting ...

Strong experience in cyber assurance, audit, risk management, or control testing within a regulated environment In-depth understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Domain-specific knowledge in at least one of: OT, technical architecture, or supply chain security Strong analytical, reporting ...

analytical and problem-solving skills Knowledge of delivering and maintaining compliance and security standards – such as GDPR, ISO 27001, and those published by the NCSC Strong knowledge of security technologies, including MFA, RADIUS, NGFW (Next Gen Firewall), WAF (Web Application Firewall), IPS (intrusion prevention), IDS (intrusion detection) Qualifications: Relevant certifications ...

looking for Experience in cyber security, audit, risk management, or assurance within a regulated or technical environment Understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Strong attention to detail and ability to follow structured assurance processes Good communication and documentation skills Degree ...

control effectiveness. About you: Degree or equivalent experience in Governance, Risk, Compliance (GRC), Assurance, Cybersecurity, technology or related field. Strong understanding of NIS Regulations, NCSC CAF, and security regulatory requirements for OES entities. Strong understanding of controls frameworks. Experience performing security control testing or assurance activities within 1st/ ...

navigating UK central government architectural governance and Technical Design Authority (approval processes. Understanding of Data Protection Impact Assessments (DPIAs), cyber security assurance, and relevant NCSC standards. Familiarity with Secure by Design, Cloud Security Principles, GDS guidance, and Government Functional Standards. Desirable Experience Previous experience working within central government, defence ...

vendor-endorsed best practices. Relevant certifications at the expert/practitioner level. Knowledge of UK public sector technology guidance and frameworks, such as NCSC’s Cyber Assessment Framework (CAF) and the Technology Code of Practice (TCoP). Job Benefits We believe we can use tech to make public services better. ...

vendor-endorsed best practices. Relevant certifications at the expert/practitioner level. Knowledge of UK public sector technology guidance and frameworks, such as NCSC’s Cyber Assessment Framework (CAF) and the Technology Code of Practice (TCoP). Job Benefits We believe we can use tech to make public services better. ...

Responsibilities Lead the architecture, design and implementation of endpoint and platform security solutions. Design security controls aligned with MOD policies, NIST Cybersecurity Framework and NCSC guidance. Design and deliver vulnerability management capabilities, including scanning, risk prioritisation, remediation and reporting. Develop security solutions for offline and air-gapped environments, including controlled ...

through controlled, repeatable code. Monitoring and enforcement: Use telemetry and automated controls to detect, contain and respond to anomalies. Core Technical Skills : Zero Trust: NCSC and NIST frameworks, micro-segmentation, software-defined perimeters and context-aware access. Cloud and infrastructure security: Azure, AWS, and on-premises virtualised infrastructure. Infrastructure ...

through controlled, repeatable code. Monitoring and enforcement: Use telemetry and automated controls to detect, contain and respond to anomalies. Core Technical Skills : Zero Trust: NCSC and NIST frameworks, micro-segmentation, software-defined perimeters and context-aware access. Cloud and infrastructure security: Azure, AWS, and on-premises virtualised infrastructure. Infrastructure ...

security scanning and compliance checks. Manage platform security, including secrets, certificates, tokens and access controls. Apply secure-by-design principles and align solutions with NCSC guidance. Identify security risks and vulnerabilities and implement appropriate mitigations. Monitor infrastructure, applications and security tooling to detect threats and issues. Work with engineering, architecture ...

role Working knowledge of technical and cyber security standards Working knowledge of industry best practices (such as NIST Framework, OWASP top ten, SANS and NCSC Guidance) Technical knowledge of information systems, infrastructure, and networks Security monitoring and testing technologies such as vulnerability scanning, penetration testing, SIEM, IDS Experience with vulnerability ...

e.g., NCA or internal Dark Web team) to disrupt online criminal markets and dismantle offender networks. Collaborate with national and regional cybercrime partners (e.g., NCSC, NCA, RCCUs, ROCUs, City of London Police) to share intelligence and coordinate cross-jurisdictional investigations. Maintain accurate records and manage concurrent cases, prioritising workloads under ...

regulatory experience including - EU NIS Directive, ISA/IEC 62443 Series/ISO 27000 Series, MITRE ATT&CK, NIST Cyber Security Framework (CSF), NCSC CAF, Office for Nuclear Regulation (ONR) Security Assessment Principles, Technical Assessment Guides, and supplementary guidance. Our Culture: Our values stand on a foundation of safety, integrity ...

cyber risk management, ideally within a regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk Manager). Desirable Experience ...

permissions, reducing oversharing and applying sensitivity labels. Plan and implement improvements to security controls, applying recognised frameworks and guidance such as Zero Trust and NCSC guidance, and maintain a security improvement plan for your area. Complete security questionnaires from funders, partners and corporate donors. Act as the security specialist ...

permissions, reducing oversharing and applying sensitivity labels. Plan and implement improvements to security controls, applying recognised frameworks and guidance such as Zero Trust and NCSC guidance, and maintain a security improvement plan for your area. Complete security questionnaires from funders, partners and corporate donors. Act as the security specialist ...

designing scalable microservices, modular architectures, APIs and vendor-neutral integration solutions. Government Governance: Understanding of Technical Design Authority (TDA), DPIAs, cyber security assurance and NCSC security standards. Technical Leadership: Ability to make strategic architecture decisions, influence senior stakeholders and lead technical teams. ...