176 to 200 of 223 NCSC Jobs in England

documentation and evidence relied on for release decisions.A self-starter comfortable engaging both technical and non-technical stakeholders.DesirableFramework literacy: IEC 62443, NIS/CAF, NCSC guidance.Certifications such as GICSP, IEC 62443, ISTQB (Advanced Test Manager welcome).Direct electricity distribution/network operator experience.Testing of network device infrastructure upgrades (firmware, configuration ...

ITSM tooling ecosystems (ServiceNow or equivalent); experience designing enterprise architectures within UK central government; understanding of GDS technology standards and cloud security principles (NCSC 14); ability to translate strategy into actionable design decisions. ...

modernising Access/SQL‐based systems Familiarity with audit‐sensitive or highly controlled environments Experience working with organisations in regulated sectors Security & compliance awareness NCSC Cloud Security Principles Security considerations for defence or sensitive‐sector clients Duration This role is as much about technical judgement and systems thinking ...

into customers. 1. TechnicalDelivery(OT Cyber Security) Perform OT risk assessments, threat modelling, and vulnerability assessments. Assess and/or assure compliance withtheNIS Regulations, NCSC CAF, NIST CSF, IEC 62443, ISO 27001, and sector-specific guidance. Develop security measures and designs to deliver security improvements Provideexpert guidance oncommon OT cyber … Skilled in IC S/SCADA protocol analysis (Modbus, DNP3,Profinet, OPC-UA, CIP). Experience of OT relevant frameworks such as IEC62443 and NCSC CAF – both assessment and program delivery. Strong understanding of OT system design, industrial networks, PLCs, HMIs, and safety systemsand a familiarity withcurrentsecurity tooling ...

security architecture in environments where safety and availability constraints shape the design. Experience handling sensitive defence or client information in line with UK MOD, NCSC, client security and data protection requirements. Strong experience in a security architecture role covering both operational technology and IT environments. Experience designing network segmentation, industrial … position, navigation and timing resilience. Experience with data diodes, unidirectional gateways or equivalent high‐assurance boundary protection. Experience with MOD Secure by Design, NCSC CAF, NIST SP 800‐82, ISO 27001 or Def Stan 05‐138. Experience of physical and electronic security convergence, including protection of equipment spaces and cable ...

Experience working across multiple government departments or programmes simultaneously Familiarity with TOGAF, ArchiMate or other enterprise architecture frameworks Experience of security architecture principles including NCSC guidelines and secure-by-design frameworks Knowledge of data architecture, data governance and data platform design within government contexts Experience supporting or leading GDS service … equivalent Technical Skills Cloud Platforms: AWS, Azure, GCP Architecture Frameworks: TOGAF, ArchiMate, C4 Model Integration: REST APIs, event-driven architecture, message queuing, microservices Security: NCSC guidelines, secure-by-design, identity and access management Tooling: Confluence, Jira, Miro, Azure DevOps, Lucidchart or equivalent Standards: GDS Service Standard, TCoP, GDPR, WCAG 2.2 ...

security services, Moore Kingston Smith is seeking an experienced Cyber Security Consultant to join our Risk Advisory team. You will be part of an NCSC-recognised cyber security practice, operating within our wider business, technology and compliance risk advisory team, helping clients strengthen their cyber resilience and manage evolving security … risk advisory roles.Experience in delivering client-facing cyber risk advisory services.Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR.Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. Experience planning ...

security services, Moore Kingston Smith is seeking an experienced Cyber Security Consultant to join our Risk Advisory team. You will be part of an NCSC-recognised cyber security practice, operating within our wider business, technology and compliance risk advisory team, helping clients strengthen their cyber resilience and manage evolving security … advisory roles. Experience in delivering client-facing cyber risk advisory services. Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR.Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. Experience planning ...

Kingston Smith is seeking an experienced Cyber Security Consultant specialising in penetration testing to join our client-facing advisory team. You will join an NCSC-recognised cyber security team within our Risk Advisory practice, supporting a diverse portfolio of clients across multiple sectors.This is a hands-on role focused … CK.Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting clients through to certification in line with current NCSC and IASME scheme requirements.Deliver wider technical security assessments, including vulnerability assessments, cloud security reviews, and build and configuration reviews against CIS Benchmarks and vendor hardening ...

Kingston Smith is seeking an experienced Cyber Security Consultant specialising in penetration testing to join our client-facing advisory team. You will join an NCSC-recognised cyber security team within our Risk Advisory practice, supporting a diverse portfolio of clients across multiple sectors. This is a hands-on role focused … CK.Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting clients through to certification in line with current NCSC and IASME scheme requirements. Deliver wider technical security assessments, including vulnerability assessments, cloud security reviews, and build and configuration reviews against CIS Benchmarks and vendor ...

area. Once settled into the team, you'll have genuine, supported pathways to progress into: 2nd and 3rd line support Cyber Security, working towards NCSC Cyber Advisor or Cyber Essentials Assessor status, with early exposure to triaging security alerts from the Se click apply for full job details ...

security assurance across large, complex transformation programmes involving multiple suppliers and stakeholders. Strong knowledge of government security policies and frameworks, including Secure by Design, NCSC guidance and related standards. Experience conducting security assessments, audits and assurance reviews. Experience reviewing technical security architectures and providing constructive challenge to delivery teams. Strong … Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within highly regulated public sector or government environments. What's on Offer ...

playbooks for cloud environments.Collaborate with the SOC to operationalise detection rules and incident handling.Compliance & AuditSupport GRC in meeting evidence and compliance requirements for ISO27001, NCSC Cloud Security Principles, and SOC2.Reviewing the outputs from security tools and security practices. You will filter and prioritise these into security stories that … material where appropriate.Required Skills & ExperiencePrevious experience in cloud security engineering or related roles.Working knowledge of industry cloud security frameworks and best practice (CSA STAR, NCSC Cloud Security Principles).Experience with automation and scripting (Python, PowerShell, Bash).Proficiency with:Azure security services: Defender for Cloud, Entra ID, Sentinel etc.AWS security services ...

cloud environments. Collaborate with the SOC to operationalise detection rules and incident handling. Compliance & AuditSupport GRC in meeting evidence and compliance requirements for ISO27001, NCSC Cloud Security Principles, and SOC2.Reviewing the outputs from security tools and security practices. You will filter and prioritise these into security stories that … appropriate. Required Skills & ExperiencePrevious experience in cloud security engineering or related roles. Working knowledge of industry cloud security frameworks and best practice (CSA STAR, NCSC Cloud Security Principles).Experience with automation and scripting (Python, PowerShell, Bash).Proficiency with: Azure security services: Defender for Cloud, Entra ID, Sentinel etc. AWS security ...

issues, providing clear recommendations and guidance. - Build and maintain strong relationships with security stakeholders across UKHSA, the Cabinet Office, the National Cyber Security Centre (NCSC) and wider government. - Ensure alignment with DSPT-CAF requirements and maintain the security architecture framework, including standards, patterns and blueprints. Essential criteria - Can demonstrate cyber ...

Fargate environments. Working directly with lead architecture teams, you will ensure that cloud infrastructure aligns with stringent public sector security guidelines, NCSC principles, and national security compliance frameworks. Key Responsibilities Secure Solution Architecture: Design and deploy high-availability, fault-tolerant containerized applications on AWS (EKS, ECS, Fargate) adhering to strict … public sector security standards. Security and Compliance: Enforce public sector standards (NCSC Cloud Security Principles, ISO 27001, GDPR) through tight IAM governance, strict VPC network policies, and robust secrets management. EKS and ECS Leadership: Lead cluster configuration, deployment, operational security, and multi-tenant management across AWS Kubernetes environments. Infrastructure ...

Framework & Standards Support the maintenance of UKHSAs Cyber Risk Management Framework Assist in assessing cyber risks against: Government Security Policy Framework (SPF) DSPT Cyber Assurance Framework NCSC guidance ISO 27001/NIST aligned approaches Promote a proportionate, risk-based approach to cyber security across the organisation Governance & Reporting Contribute … concisely Strong written and verbal communication skills Willingness to provide constructive challenge while building effective working relationships Desirable Criteria Knowledge of: Government Security Policy Framework NCSC principles Risk registers and assurance reporting DSPT Cyber Assessment Framework Industrial Automated Control Systems Selection Process Details This vacancy is using Success Profiles Success ...

large-scale infrastructure, transformation or integration programmesPractical knowledge and understanding of industry security frameworks and guidance such as NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelinesIn-depth knowledge of modern security concepts, common attack vectors, malware, security analytics and threat intelligence.Minimum of 10 years of experience ...

large-scale infrastructure, transformation or integration programmesPractical knowledge and understanding of industry security frameworks and guidance such as NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelinesExperience identifying sales opportunities and supporting Public Sector RFP/RFI/tender responses.Good knowledge of networking (switching, routing, firewalls)Experience with ...

applications align with appropriate security standards and best practice Work with frameworks and standards including Cyber Essentials, ISO 27001, SOC 2, GDPR and NCSC guidance Apply security principles across network infrastructure, applications and systems Monitor and improve system resilience, performance and operational integrity Support log management, archiving and retention processes … with vulnerability management, patching and security remediation Knowledge of the MITRE ATT&CK Framework and common attack techniques Experience applying security standards such as NCSC guidance, CIS benchmarks or Microsoft Security Baselines Understanding of data classification, secure storage and access controls Experience working within an ITIL-aligned environment Strong networking ...

lifecycle. Liaise with internal and external security assurance authorities to demonstrate compliance with relevant security frameworks. Work collaboratively with external security authorities, including the NCSC , where required to support security assurance. Manage security activities across development, testing and manufacturing environments. Advise engineering teams on platform lockdown, secure configuration and security … postgraduate qualification in Engineering, Computer Science, Cyber Security or a related scientific/technical discipline , or equivalent professional experience. Professional membership of an NCSC-recognised security organisation such as CIISec, ISC2 or ISACA . ...

gapped or low-bandwidth environments. High-Assurance Security Architecture: Implement Zero-Trust network topologies, Private Google Access, Service Controls, and IAM policies aligned with NCSC Cloud Security Principles , JSP 604 , and MoD Secure by Design (SbD) frameworks. Air-Gapped & Edge Deployments: Operate fully disconnected, sovereign cloud nodes ( GDC air-gapped … Defence (MoD, CSOC, DE&S), Intelligence, or National Security environments. Working knowledge of UK Government Security Classifications (OFFICIAL-SENSITIVE/SECRET/TOP SECRET), NCSC guidelines, and JSP 604 accreditation loops. 2. GCP & Infrastructure Automation 3+ years of production experience operating Google Cloud Platform (GCP) . Expertise in Terraform ...

supportive, inclusive environment. Your Role Design secure, scalable multi-cloud solutions tailored to clients including UK government requirements, ensuring compliance with standards such as NCSC and GDPR. Lead the technical aspects of pre-sales engagements, including opportunity qualification, solution design, and client presentations. Stay current with cloud technologies and industry … sector. Certifications & Knowledge: Familiarity with cloud certifications and a strong understanding of cloud platforms. Security & Compliance Awareness: Knowledge of UK government frameworks such as NCSC and GDPR, with a focus on secure design. Communication Skills: Ability to explain complex technical concepts to both technical and non-technical audiences. Client Engagement ...

clients on securing and governing AI Awareness of the operational resilience and regulatory agenda, including DORA, the UK Cyber Security and Resilience Bill and NCSC CAF A willingness to build your profile in the market - points of view, speaking and content that open specific client conversations Comfort teaming across sectors … building tooling and automation – for example agentic AI, Power BI, Power Apps, risk quantification or digital twins. Even Better If Certifications in CISSP, ISO27001, NCSC CCP, GCISP, PRINCE2 (or equivalent), AI governance (e.g. AIGP), cloud security (CCSP or CCSK), business continuity and resilience (e.g. BCI), and post-quantum or cryptography ...

ensuring high-quality outcomes and practical recommendations 3. Act as a subject matter expert across recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF and Defence Cyber Certification requirements 4. Design and implement governance frameworks, policies, processes and controls that help clients manage cyber risk effectively 5. Lead … Compliance, ideally within cyber security, information security or technology risk 2. Good working knowledge of recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF, Cyber Essentials and related assurance or certification schemes 3. Experience leading risk assessments, control reviews, audit preparation, compliance programmes or security maturity assessments 4. ...