25 of 25 NCSC Jobs in London

across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

following: Cyber Governance, Risk & Compliance (GRC) Delivering security consulting engagements Implementing or assessing controls against recognised frameworks including: ISO 27001 NIST NIS NCSC Cyber Assessment Framework (CAF) DORA TISAX IEC 62443 Conducting cyber risk assessments and governance reviews Developing security policies, standards and procedures Building business cases and regulatory compliance ...

doing so play a key role in nationally critical projects which make a real difference to people’s everyday lives. We are a National Cyber Security Centre Assured Cyber Security Consultancy. Locations: London, Guildford, Bristol, M4 corridor Roles and Responsibilities Working either individually or as part of a larger Actica ...

architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire to work ...

architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire to work ...

architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire to work ...

Proven experience as a Security Assurance Lead, Security Assurance Manager or Accreditor within Government, telecoms or other complex regulated environments. Strong knowledge of NCSC guidance, Secure by Design, HMG security standards and risk management . Experience working across large, complex programmes with multiple suppliers. Confident engaging with senior stakeholders ...

Essential experience Strong experience in cyber or information security operations within large-scale programmes or critical national infrastructure. Knowledge of UK government security standards, NCSC guidance and security risk frameworks. Experience of incident response and vulnerability management in multi-supplier environments. Strong stakeholder management and communication skills. Ability to manage ...

engage senior stakeholders and explain complex technical issues clearly to both technical and non-technical audiences. A recognised cyber security qualification (such as an NCSC-certified Master's degree, CISSP or equivalent Level 6 qualification), professional membership and/or chartership, and the ability to achieve and maintain Developed Vetting ...

security monitoring Familiarity with security frameworks and standards such as: NIST Cyber Security Framework, ISO 27001/ISO 27005, IEC 62443/ISA-99, NCSC CAF/NIS Guidance, NERC CIP Experience working within one or more critical infrastructure sectors such as Energy, Utilities, Transport, Water, Oil & Gas or Nuclear ...

hands-on, client-facing role covering: OT/ICS security assessments SCADA and control system environment reviews IEC 62443, NIST SP 800-82 and NCSC CAF aligned work IT/OT convergence, segmentation and remote access reviews OT-aware vulnerability assessments using non-disruptive approaches Reporting and briefings for both ...

Water Civil Nuclear Transport (including aviation, rail, maritime, road and autonomous vehicles) Wider critical infrastructure Security standards relating to the sector, including: NCSC NIS Guidance and CAF ISO 27001 and ISO 27005 NERC CIP ISA‐99/IEC 62443 NIST CSF Benefits Health and lifestyle perks accompanying private healthcare ...

pending renewal beyond a standard update. CAF Skills and Experience You will possess a strong understanding of the National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF) and its application within regulated and business-critical environments. They will have experience assessing, designing and assuring security controls against CAF objectives, including … such as CAF, NIST and ISO 27001, and supporting audit, assurance and regulatory activities, would be highly desirable. Essential Criteria: Practical experience applying the NCSC Cyber Assessment Framework (CAF). Security architecture design and assurance. Threat modelling and cyber risk assessment. Secure-by-Design and Secure SDLC practices. Identity ...

advisory roles. - Experience in delivering client-facing cyber risk advisory services. - Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR. - Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. - Experience ...

cyber risk management, ideally within a regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk Manager). Desirable Experience ...

Azure architecture experience or certification Experience delivering within government or law enforcement environments Familiarity with government technical standards and assurance frameworks (e.g. GDS, NIST, NCSC) How to Apply If you are interested in this opportunity and meet the requirements above, please get in touch as soon as possible with: Your ...

candidates must have an active SC level of security clearance to be considered. Technical Knowledge Security frameworks including ISO 27001, NIST CSF, CIS and NCSC guidance Regulatory landscape including GDPR and PCI DSS Familiarity with HMG and NCSC standards Modern technology environments: Cloud platforms such as Azure, AWS and Google ...

security requirements management and pragmatic risk treatment in fast-moving projects You have experience working with security control standards and frameworks e.g. ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others You have demonstrable continuous personal development, supported by relevant certifications and accreditations You have good interpersonal skills ...

Deep experience with Microsoft Sentinel , Defender suite , and KQL Strong scripting/automation skills ( PowerShell, Python, Logic Apps ) Solid understanding of MITRE ATT&CK , NCSC CAF , NIST CSF Stakeholder management able to translate technical complexity to non-technical audiences Degree in Computer Science, Cyber Security, or equivalent Desirable ...

review of cloud, on-premise and hybrid architectures perform threat modelling and identify vulnerabilities. Ensure solutions adhere to security frameworks such as ISO27001, NCSC standards and GDPR and incorporate secure by design principles. Policy and assurance: Draft and maintain security policies and procedures to meet ISO27001 and BS10008 requirements. Develop … hybrid architectures, threat modelling, identity and access management, networking and cryptography. Risk and compliance: Experience applying governance, risk and compliance frameworks (ISO27001, NIST, NCSC) and translating the CIA triad into practical controls. Communication and leadership: Able to articulate complex security concepts to stakeholders and influence decisions collaborate across multidisciplinary teams ...

Design, NIST 800 series and security risk assessments. Experience producing security documentation and managing security assurance activities. Familiarity with Defence Security Standards and NCSC/CESG guidance is desirable. Desirable Skills: DevSecOps Risk Management Defence or MOD experience ...

major technology company, or relevant government department. Ability to engage credibly with, executive stakeholders across UK government departments (e.g. DSIT, MOD, NCSC, Cabinet Office), NATO, Five Eyes partners, and key European counterparts. Excellent written and verbal communication skills, with the ability to translate complex technical concepts for policy audiences ...

available to enable decision making Engage with IAG group peers, the wider aviation industry and UK critical infrastructure and government bodies such as NCSC Manage and deliver on threat intelligence requirements and end to end intelligence lifecycle Engage collaboratively and pragmatically with BA/IAG stakeholders to undertake cyber threat ...

across multiple critical systems Specify, interpret and assess compliance with technical and organisational security controls Conduct and support cyber security risk assessments Apply the NCSC Cyber Assessment Framework and relevant government assurance standards Support GovAssure activities, including evidence gathering and compliance assessment Produce clear risk reports, assurance documentation and recommendations … hands-on engineer Current SC or DV clearance You will be customer facing Desirable Experience Critical National Infrastructure, government, defence or national security experience NCSC Cyber Assessment Framework GovAssure Security accreditation methodologies and documentation Cloud security across Microsoft Azure or AWS Secure architecture and enterprise security frameworks Useful qualifications ...

delivering experience with leading security and healthcare assurance frameworks, including the NHS Data Security and Protection Toolkit and Cyber Assessment Framework (DSPT-CAF), National Cyber Security Centre Cyber Assessment Framework (NCSC CAF), ISO27001:2013/2022, NIST Cyber Security Framework and other relevant regulatory or assurance requirements. Advising healthcare organisations ...