101 to 125 of 131 NCSC Jobs in the UK

expectations into practical control actions and partner with engineering, security and operations to evidence strong security controls. You will work on framework alignment with NCSC CAF, ISO 27001 and other standards, review third‐party security contracts, and report to the Risk Committee. #J-18808-Ljbffr ...

GCHQ is seeking an International Technical Director within the NCSC’s Office of the Chief Technical Officer. You will drive high-impact technical work on an international stage, mentoring colleagues and advising senior leaders on complex cyber security challenges. Expect frequent international travel and engagement with partners to shape resilient ...

GCHQ is seeking an International Technical Director within the NCSC’s Office of the Chief Technical Officer. You will drive high-impact technical work on an international stage, mentoring colleagues and advising senior leaders on complex cyber security challenges. Expect frequent international travel and engagement with partners to shape resilient ...

GCHQ is seeking an International Technical Director within the NCSC’s Office of the Chief Technical Officer. You will drive high-impact technical work on an international stage, mentoring colleagues and advising senior leaders on complex cyber security challenges. Expect frequent international travel and engagement with partners to shape resilient ...

clearly framed around risk and remediation rather than just compliance status. Drive continuous compliance monitoring against applicable standards and regulations - Cyber Essentials, the NCSC Cyber Assessment Framework, GovAssure, UK GDPR, and NIS Regulations - feeding posture data into governance and risk reporting rather than treating it as a point-in-time … Information Systems Control (CRISC). Certified Information Systems Security Professional (CISSP). Experience advising clients on UK government security frameworks - including GovAssure, the NCSC Cyber Assessment Framework, Cyber Essentials Plus, and the HMG Security Policy Framework - and how they interact in practice. Experience leading risk assessments using structured methodologies ...

security assurance across large, complex transformation programmes involving multiple suppliers and stakeholders. Strong knowledge of government security policies and frameworks, including Secure by Design, NCSC guidance and related standards. Experience conducting security assessments, audits and assurance reviews. Experience reviewing technical security architectures and providing constructive challenge to delivery teams. Strong … Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within highly regulated public sector or government environments. What's on Offer ...

security assurance across large, complex transformation programmes involving multiple suppliers and stakeholders. Strong knowledge of government security policies and frameworks, including Secure by Design, NCSC guidance and related standards. Experience conducting security assessments, audits and assurance reviews. Experience reviewing technical security architectures and providing constructive challenge to delivery teams. Strong … Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within highly regulated public sector or government environments. What's on Offer ...

shared engineering responsibility rather than a specialist handover at the end of a sprint. Navigate UK government security standards with confidence. Apply the NCSC Cyber Assessment Framework, GovAssure, Cyber Essentials, HMG Security Policy Framework, and relevant legislation (UK GDPR, NIS Regulations) proportionately across engagements — framing standards as guardrails that enable … Professional (CISSP) — or an equivalent senior audit and assurance credential. Certifications Certified in Risk and Information Systems Control (CRISC) Certified Information Security Manager (CISM) NCSC Certified Cyber Professional (CCP) Capabilities and experience Experience establishing and operating vulnerability management programmes at organisational scale — including risk‐based prioritisation using EPSS ...

network environments. Working alongside infrastructure, network and systems engineering teams, you will ensure solutions are secure by design and compliant with MOD and NCSC security standards. You'll play a key role in security assurance, risk management and accreditation activities throughout the project lifecycle. Responsibilities Design and develop security architectures … Support security assurance, accreditation and governance activities. Work closely with infrastructure, network and engineering teams to embed security throughout delivery. Ensure compliance with MOD, NCSC and industry security standards. Provide technical guidance on secure infrastructure, identity, cryptography and boundary protection technologies. Essential Skills & Experience Proven experience as a Security Architect ...

doing You'll be responsible for: Leading the continual improvement of NHBC's Information Security Management System (ISMS), aligned to ISO 27001 and NCSC guidance. Embedding security, operational resilience and regulatory requirements into projects, business processes and technology change. Owning and maintaining information security policies, standards and governance documentation. Leading … information security within a risk‐led organisation. Proven experience implementing and operating an Information Security Management System (ISMS). Strong knowledge of ISO 27001, NCSC guidance and NIST Cybersecurity Framework. Experience embedding security into business processes, projects and technology delivery. A solid understanding of cloud, digital and emerging AI‐related ...

vision and the specific needs of defence clients. Ensure that all cloud architectures meet the highest security standards and comply with relevant regulations (e.g., NCSC, HMGSPF and MoD standards like JSP440/604). Design and implement cloud infrastructure using tools like Terraform, Ansible, or AWS CloudFormation. Work closely with … especially in a cloud environment, including experience with zero trust, data encryption , access control , and network security . Experience working with security compliance standards (NCSC, HMGSPF and MoD standards like JSP440/604) Familiarity with container orchestration technologies (e.g., Docker , Kubernetes ) and CI/CD pipelines . Skills & Abilities: Security ...

join a growing team delivering high-impact assurance services across UK Government and Defence programmes. This role is suited to auditors already operating within NCSC-aligned frameworks , with the ability to lead and deliver audits across nationally significant cyber assurance schemes. Essential Requirements (Must Have) ISO27001 Lead Auditor qualification … equivalent) Chartered Auditor and Assessor accreditation Active presence on the NCSC Assured Service Provider/Auditor register Proven experience delivering NCSC-aligned audits The Role You will lead the delivery of cyber security audits across frameworks such as CAF, DCC, and GovAssure , supporting government-led cyber resilience initiatives. Key responsibilities ...

access control Knowledge of data interoperability and multi-domain environments Experience advising senior technical and business stakeholders Familiarity with frameworks such as ISO 27001, NCSC CAF or Defence standards Excellent communication and stakeholder management skills TO BE CONSIDERED Please either apply through this advert or emailing me directly via robin.muirhead … client in conjunction with this vacancy only. KEY SKILLS Cyber Security Consultant, Information Assurance, Cyber Resilience, Secure Data Exchange, Data Fabric, Interoperability, ISO 27001, NCSC CAF, Defence, National Security, Risk Management, Stakeholder Management ...

Data at Rest/In Transit), Protective Monitoring, and Security Auditing. Strong understanding of the ISO 27000 series, NIST Cyber Security & Risk Management Frameworks, NCSC CAF, and other industry standards. Familiarity with NCSC guidance and legacy Information Assurance (IA) standards. Experience with MOD security frameworks including … across OT environments including CNI and COMAH. Relevant certifications such as GICSP or ISA/IEC 62443 are desirable, alongside hands‐on delivery of NCSC CAF or GovAssure assessments. Experience of working in a SOC environment Other Information Logiq is committed to investing in people, offering a clear progression pathway ...

translating technical findings into business risk and actionable recommendations Establish and maintain DFIR processes, playbooks, and runbooks, ensuring alignment with recognised standards such as NCSC CIR Lead, mentor, and manage a team of DFIR analysts, ensuring operational readiness, on-call coverage, and delivery against SLAs and KPIs You can bring … executive briefings, translating technical findings into business impact and actions Experience developing and improving DFIR processes and playbooks, aligned to recognised frameworks such as NCSC CIR Relevant industry certifications such as CREST (CPIA/CRIA) or SANS (GCIA, GCIH, GCFA). We are a Disability Confident Employer Capgemini is proud ...

Design end-to-end solutions spanning network, cloud, identity, endpoint, security, safeguarding, backup, compliance and operational monitoring Apply Dataspire reference architectures and relevant DfE, NCSC and KCSIE guidance to solution design Lead the technical contribution to strategic bids, tenders, framework opportunities and high-value projects Produce high-quality solution documentation … Storage Spaces Direct and Redstor Remote access and communications: RDS, VPN, 3CX and Microsoft Teams Security, filtering, safeguarding and compliance technology aligned with DfE, NCSC, Cyber Essentials and KCSIE expectations WHAT WERE LOOKING FOR Significant consulting, pre-sales or architecture experience across infrastructure, cloud, network, security or education technology Strong ...

Design end-to-end solutions spanning network, cloud, identity, endpoint, security, safeguarding, backup, compliance and operational monitoring Apply Dataspire reference architectures and relevant DfE, NCSC and KCSIE guidance to solution design Lead the technical contribution to strategic bids, tenders, framework opportunities and high-value projects Produce high-quality solution documentation … Storage Spaces Direct and Redstor Remote access and communications: RDS, VPN, 3CX and Microsoft Teams Security, filtering, safeguarding and compliance technology aligned with DfE, NCSC, Cyber Essentials and KCSIE expectations WHAT WERE LOOKING FOR Significant consulting, pre-sales or architecture experience across infrastructure, cloud, network, security or education technology Strong ...

strategy aligned with regulatory expectations and industry best practice. Define and maintain IAM policies, standards and governance frameworks in line with ISO 27001, NCSC guidance and PRA operational resilience requirements. Lead the implementation, configuration and integration of IAM and PAM technologies across cloud, enterprise and third-party environments. Drive improvements … within a regulated environment. Experience identifying and mitigating identity risks, improving resilience and supporting incident response and recovery planning. Good understanding of ISO 27001, NCSC guidance and PRA/FCA operational resilience requirements, with the ability to apply security and governance best practice. Experience designing identity governance and assurance frameworks ...

delivering experience with leading security and healthcare assurance frameworks, including the NHS Data Security and Protection Toolkit and Cyber Assessment Framework (DSPT-CAF), National Cyber Security Centre Cyber Assessment Framework (NCSC CAF), ISO27001:2013/2022, NIST Cyber Security Framework and other relevant regulatory or assurance requirements. Advising healthcare organisations ...

what the SOC is seeing into the language that informs decisions. The UK public sector context matters here. You'll align your work to NCSC guidance, the Cyber Assessment Framework, and OFFICIAL handling requirements - not because compliance is the goal, but because those frameworks reflect the real risk environment your … train L1/L2 analysts to write and tune detections themselves. Own the threat-landscape narrative for your engagement - turn intelligence from NCSC advisories, sector feeds, and threat actor reporting into hunt themes, coverage gap analysis, and detection priorities that the SOC and client stakeholders can act on. ...

Audit Consultant role over time. Responsibilities: Plan and conduct audits of customer processes and systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssure. Support and, over time, help lead audit activity, ensuring findings are properly documented and reported. Communicate audit findings … risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills/Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience of cyber report writing. Relevant ISO certification (for example ISO 27001 Lead Auditor ...

Risk Profile (CRP) audit work. Responsibilities: Plan and conduct audits of customer processes and systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssure. Support and, over time, help lead audit activity, ensuring findings are properly documented and reported. Communicate audit findings … risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills/Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience of cyber report writing. Relevant ISO certification (for example ISO 27001 Lead Auditor ...

improvement across services and methodologies. About You You'll have: Extensive penetration testing experience, including CHECK or equivalent government-accredited testing. Strong knowledge of NCSC and CREST schemes (e.g. CHECK, xBEST, STAR). Experience leading technical teams and managing client engagements. Excellent technical, communication and report writing skills. A genuine … passion for offensive security and helping clients improve their cyber resilience. Desirable CREST CCT-App, CCT-Inf or CSTL-App certification. Experience with NCSC assurance schemes, secure environments or security research. Active involvement in the wider cyber security community. Requirements CREST CCSAS (or working towards it). Eligible to obtain ...

varied and fascinating work in a supportive and inclusive environment that puts the emphasis on teamwork. The National Cyber Security Centre (NCSC), part of GCHQ, is the UK Government’s lead authority on cyber security. The organisation is at the heart of the Government’s cyber security strategy … safest place to live and work online. Job description We’re currently looking for an International Technical Director to join our team within NCSC’s Office of the Chief Technical Officer. In this role, you’ll work alongside technical specialists who explore the core security attributes ...

varied and fascinating work in a supportive and inclusive environment that puts the emphasis on teamwork. The National Cyber Security Centre (NCSC), part of GCHQ, is the UK Government’s lead authority on cyber security. The organisation is at the heart of the Government’s cyber security strategy … safest place to live and work online. Job description We’re currently looking for an International Technical Director to join our team within NCSC’s Office of the Chief Technical Officer. In this role, you’ll work alongside technical specialists who explore the core security attributes ...