1 to 25 of 287 NCSC Jobs in the UK

Secure by Design Principles DevSecOps Methodologies Security Operations & Incident Response Identity & Access Management (IAM) Data Protection & Privacy Controls Enterprise Security Architecture Frameworks Familiarity with: NCSC Cloud Security Principles ISO 27001 NIST Cybersecurity Framework CIS Controls OWASP Technical Experience Cloud Platforms AWS Microsoft Azure Google Cloud Platform (GCP) Security Technologies Microsoft ...

related compliance frameworks. Security frameworks and standards including ISO 27001, NIST Cyber Security Framework and CIS Controls v8. UK Government and NCSC security policies, guidance and best practices. Cloud security architecture, particularly AWS services such as IAM, KMS and ECS. Event-driven and microservices-based architectures. Cloud Security Posture Management ...

security. Compliance & Governance: ensure Thales on-premises and cloud environments comply with government policies, such as Cyber Essentials, DefStan 05-138, UK GDPR, NCSC guidelines and other applicable contractual and regulatory frameworks. Evidence Continual Security Assurance: Creation, Maintenance and Review of all IS/IT technical security documentation, policy ...

security. Compliance & Governance: ensure Thales on-premises and cloud environments comply with government policies, such as Cyber Essentials, DefStan 05-138, UK GDPR, NCSC guidelines and other applicable contractual and regulatory frameworks. Evidence Continual Security Assurance: Creation, Maintenance and Review of all IS/IT technical security documentation, policy ...

public sector/government agencies . Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling – Kill Chain ...

defence, financial services or enterprise environmentsAgile and Waterfall project deliveryClient-facing consulting and stakeholder managementKnowledge of security frameworks such as NIST CSF, ISO 27001, NCSC CAF, GDPR and NIS2 is essential.DesirableExperience across cloud security, vulnerability management, threat management or IAM.Professional certifications such as CISSP, CISM, CISA, M.Inst.ISP or equivalent.Eligibility ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

desirable but not essential Experience designing and implementation solutions with AWS beneficial Experience and knowledge of Microsoft, ZeroTrust, NCSC, NIST, ISO27001 and Cyber Essentials frameworks and best practice and how they translate to controls, policies and configuration baselines valuable Strong understanding of software development lifecycle and methodologies such as Agile ...

scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+, CEH, CKS, CKA or similar certifications Please note: Active SC Clearance is essential for this position, along with ...

infrastructure operations.Experience supporting government, defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors.Familiarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards.Experience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations, or large ...

operations. Experience supporting government, defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors. Familiarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards. Experience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations ...

delivery, including IT/OT convergence Advanced Visio skills and fluency with TOGAF or equivalent architecture methods. Working knowledge of NIST CSF, IEC 62443, NCSC CAF, EU NIS2, cloud and network fundamentals Willingness to travel for client delivery (domestic and international as required). Ideally, You’ll Also Have Experience ...

Excellent stakeholder management, communication, and influencing skills, with experience engaging with senior stakeholders. Thorough understanding of government digital service standards (GDS), security principles (e.g., NCSC), and data protection regulations (GDPR). Experience in managing third-party suppliers and navigating public sector procurement processes. Strong leadership potential, with a track record ...

Excellent stakeholder management, communication, and influencing skills, with experience engaging with senior stakeholders. Thorough understanding of government digital service standards (GDS), security principles (e.g., NCSC), and data protection regulations (GDPR). Experience in managing third-party suppliers and navigating public sector procurement processes. Strong leadership potential, with a track record ...

Excellent stakeholder management, communication, and influencing skills, with experience engaging with senior stakeholders. Thorough understanding of government digital service standards (GDS), security principles (e.g., NCSC), and data protection regulations (GDPR). Experience in managing third-party suppliers and navigating public sector procurement processes. Strong leadership potential, with a track record ...

Excellent stakeholder management, communication, and influencing skills, with experience engaging with senior stakeholders. Thorough understanding of government digital service standards (GDS), security principles (e.g., NCSC), and data protection regulations (GDPR). Experience in managing third-party suppliers and navigating public sector procurement processes. Strong leadership potential, with a track record ...