101 to 125 of 129 NCSC Jobs in the UK

years in power generation with supervisory experience. Experience of working with OT security solutions and within regulatory frameworks such as the NIS Directive or NCSC Cyber Assessment Framework. A power generation background, ideally thermal and/or CCGT plant, with knowledge of process control, instrumentation and HV electrical systems. Salary ...

evidence relied on for release decisions. A self-starter comfortable engaging both technical and non-technical stakeholders. DesirableFramework literacy: IEC 62443, NIS/CAF, NCSC guidance. Certifications such as GICSP, IEC 62443, ISTQB (Advanced Test Manager welcome).Direct electricity distribution/network operator experience. Testing of network device infrastructure upgrades ...

/IDNO interface. Desirable: Understanding of grid code compliance, telemetry, and DNO/NGESO interface requirements. Experience with cybersecurity standards (ISO 27001, NCSC CAF, etc.) for OT systems. Proficiency with Procore, BIM 360, or similar digital collaboration platforms. Chartered Engineer or working toward professional registration (IET or equivalent). What ...

senior stakeholders, with opportunities to contribute to bids and business development. Key responsibilities: Lead cyber security audits and assessments against recognised frameworks, including the NCSC Cyber Assessment Framework (CAF). Evaluate security controls, organisational resilience and compliance throughout the system lifecycle. Identify vulnerabilities, risks and areas for improvement, producing clear … Support bid development and pre-sales activities where required. Essential Experience Proven experience leading cyber security audits and assurance engagements. Strong knowledge of the NCSC CAF, ISO 27000-series standards, NIST frameworks and associated risk management practices. Understanding of legacy information assurance standards and NCSC guidance. Familiarity with MOD security ...

data, essential services and the supporting infrastructure. They ensure Secure by Design principles are adopted, and coordinate on assurance against the National Cyber Security Centre's Cyber Assessment Framework with the Government's GovAssure framework. Working Style This role will be carried out in-line with IPO Hybrid working arrangements … limited to: Ensure security architecture aligns with wider Gov security policies and frameworks, legal frameworks, industry regulations and best practise (e.g ISO 27001, NCSC Standards, GDPR, PCI DSS, GovAssure, Secure by Design) Support the secure by design champion in building awareness and understanding of secure by design framework across DDaT. ...

senior leadership and the Board. Ensure alignment with relevant legislation, UK GDPR and recognised security frameworks including ISO 27001, Cyber Essentials Plus and NCSC principles. Oversee vulnerability management, penetration testing, security monitoring and incident response. Lead the organisational response to significant cyber security incidents. Develop and maintain cyber incident response … following would be highly advantageous: CISSP, CISM, CRISC or CCSP ISO/IEC 27001 Lead Implementer or Lead Auditor Cyber Essentials Plus NCSC Cyber Assessment Framework Operational Technology (OT) and Industrial Control Systems (ICS) Manufacturing, engineering, energy, chemical, defence or another highly regulated environment High-hazard or safety-critical industries ...

CREST-accredited providers and incorporating red and purple team activity into the wider assurance programme. Supporting security assurance against frameworks and standards including the NCSC Cyber Assessment Framework, ISO 27001, NIST CSF 2.0 and Cyber Essentials Plus. Communicating technical risk and control weaknesses clearly to senior stakeholders, balancing security improvement … controls, including defining security standards and configuration baselines, monitoring control effectiveness and drift, managing exceptions and driving remediation of identified weaknesses. Knowledge of the NCSC CAF and at least one of ISO 27001 or NIST CSF 2.0. Experience of zero trust and identity architecture, including conditional access and adaptive authentication. ...

Conduct IEC 62443 gap assessments and support customers in achieving compliance and maturity objectives. Perform cyber security maturity assessments using recognised frameworks such as NCSC CAF, IEC 62443, NIST SP 800-82, and ISO 27001. Advise clients on NIS and NIS2 compliance requirements and support readiness programmes. Produce remediation roadmaps … SCADA, PLCs, DCS, and industrial networks. Experience conducting security assessments, gap assessments, or cyber maturity reviews. Knowledge of industry frameworks such as IEC 62443, NCSC CAF, NIS/NIS2, or equivalent OT security standards. Ability to identify cyber security risks and develop practical remediation recommendations. Experience engaging with technical, operational ...

including government and defence-related organisations. Essential Experience Proven experience in cloud security assurance within UK Government or Defence related environments. Strong understanding of: NCSC Cloud Security Principles NCSC Principles for Using SaaS Securely ISN 2024/06 Experience working with UK Government security frameworks and standards, including: Cyber Essentials ...

cloud infrastructure. Integration & Security: Architect resilient API and event-driven integration patterns (APIM, Event Grid, Service Bus) while embedding security-by-design aligned with NCSC guidelines and UK GDPR. Required Skills & Experience Designing scalable, secure and resilient solutions combining bespoke Scala with low-code Power Platform (Power Apps, Power Automate … platforms (e.g., Azure APIM, Logic Apps). Public Sector Standards: Solid working knowledge of the GDS Service Standard , Technology Code of Practice (TCoP) , and NCSC Cloud Security Principles . Governance & Stakeholder Management: Proven ability to defend designs at governance boards and translate complex architectural concepts to executive stakeholders. Desirable Qualifications ...

CREST-accredited providers and incorporating red and purple team activity into the wider assurance programme. Supporting security assurance against frameworks and standards including the NCSC Cyber Assessment Framework, ISO 27001, NIST CSF 2.0 and Cyber Essentials Plus. Communicating technical risk and control weaknesses clearly to senior stakeholders, balancing security improvement … controls, including defining security standards and configuration baselines, monitoring control effectiveness and drift, managing exceptions and driving remediation of identified weaknesses. Knowledge of the NCSC CAF and at least one of ISO 27001 or NIST CSF 2.0. Experience of zero trust and identity architecture, including conditional access and adaptive authentication. ...

community. * Ensure compliance with relevant nuclear and cyber security standards, which could include: -ISO/IEC 27001 (Cyber Security Management) -UK NIS 18 regulations -NCSC guidance -NIST SP 800 Series -Codes and Standards for the Cyber Security of AI (2025) - DSIT -NR Security Assessment Principles (SyAPs) * Develop and maintain … matters concerning cyber security and assurance. * Manage and oversee the internal relationships with security stakeholders. Leading external cyber security relationships, to include NCSC and ONR. Policy and Process * Create and maintain policies and associated processes required to enable risk-informed decision making concerning the protection of information. * Ownership of forward ...

process review, gap assessment, remediation planning and stakeholder engagement. The consultant will work across IT and OT environments, using frameworks such as the NCSC Cyber Assessment Framework (CAF) where applicable, while maintaining a broader focus on security governance, risk management, compliance and control effectiveness. Key ResponsibilitiesLead GRC assessment and assurance … evidence to determine whether stated controls and practices are demonstrably implemented. Conduct structured gap assessments against agreed regulatory, contractual and security-framework requirements, including NCSC CAF/eCAF where applicable. Review and challenge customer self-assessments, control assertions and supporting rationale, identifying supported, partially supported, unsupported or contradictory positions. Assess ...

Develop an identity strategy covering Cloud Identity, Workforce Identity Federation and Microsoft Entra ID integration . Define security architecture aligned with Secure by Design, NCSC guidance and the Cyber Assessment Framework (CAF) . Design FinOps governance, billing hierarchies, cost allocation and chargeback models. Develop an operational transition model to support … organisation policies, folder structures and identity management. Experience delivering cloud security architecture within UK government or regulated environments. Strong understanding of Secure by Design, NCSC guidance and CAF principles . Experience designing FinOps and cloud cost-management frameworks. Excellent stakeholder engagement, technical leadership and architecture governance skills. Security clearance Active ...

governance, risk management and the implementation of good practice. Applying recognised frameworks and standards, including ISO 27001, NIST Cybersecurity Framework (NIST CSF) and the NCSC Cyber Assessment Framework (CAF). Supporting existing OT security engagements, learning the client environments and progressively assuming responsibility for their ongoing delivery. Adapting quickly between … information security risk assessment, risk treatment, security controls and governance. Security frameworks: Practical knowledge of ISO 27001, NIST CSF and/or the NCSC Cyber Assessment Framework. You should be comfortable applying frameworks to real client environments rather than simply discussing them theoretically. Independent delivery: The maturity, initiative and adaptability ...

process review, gap assessment, remediation planning and stakeholder engagement. The consultant will work across IT and OT environments, using frameworks such as the NCSC Cyber Assessment Framework (CAF) where applicable, while maintaining a broader focus on security governance, risk management, compliance and control effectiveness. What you'll be doing … evidence to determine whether stated controls and practices are demonstrably implemented. Conduct structured gap assessments against agreed regulatory, contractual and security-framework requirements, including NCSC CAF/eCAF where applicable. Review and challenge customer self-assessments, control assertions and supporting rationale, identifying supported, partially supported, unsupported or contradictory positions. Assess ...

Location: GBR - CC Blackfr. CC, GBR - CC Birmingham, GBR - CC Cardiff, GBR - CC Edinburgh, GBR - CC Hatfield Adm, GBR - CC Manchester, GBR - CC MiltonKeynes, GBR - CC Nottingham, GBR - CC Reading | Job-ID: 220734 | Contract type ...

into clear business implications and recommendations for senior stakeholders. Working with recognised cyber security frameworks, standards and regulatory requirements, including NIST CSF, ISO 27001, NCSC CAF, CRI and NIS2. Leading multidisciplinary teams, setting direction and maintaining high-quality delivery. Managing delivery risks, dependencies, competing priorities and client expectations. Building trusted … risk or capability and translating findings into clear actions or transformation roadmaps. Knowledge of recognised frameworks and standards such as NIST CSF, ISO 27001, NCSC CAF, CRI or NIS2. Strong client-facing experience with the ability to build credibility with senior stakeholders. Experience leading teams, engagements or significant project workstreams. ...

into clear business implications and recommendations for senior stakeholders. Working with recognised cyber security frameworks, standards and regulatory requirements, including NIST CSF, ISO 27001, NCSC CAF, CRI and NIS2. Leading multidisciplinary teams, setting direction and maintaining high-quality delivery. Managing delivery risks, dependencies, competing priorities and client expectations. Building trusted … risk or capability and translating findings into clear actions or transformation roadmaps. Knowledge of recognised frameworks and standards such as NIST CSF, ISO 27001, NCSC CAF, CRI or NIS2. Strong client-facing experience with the ability to build credibility with senior stakeholders. Experience leading teams, engagements or significant project workstreams. ...

service management. Define the identity strategy across Cloud Identity, Workforce Identity Federation and Microsoft Entra ID. Design security architecture aligned with Secure by Design, NCSC guidance and the Cyber Assessment Framework. Establish FinOps governance, billing hierarchies, cost-allocation and chargeback approaches. Produce an operational transition model for the transfer … organisation policies and identity-management approaches. Experience designing cloud-security architecture within government or regulated environments. Strong understanding of Secure by Design, NCSC guidance and CAF requirements. Experience designing FinOps and cloud cost-management models, alongside strong stakeholder and architecture-governance skills. ...

environments Building improvement roadmaps and security programmes to move clients from low maturity to a secure, resilient state Applying standards such as IEC 62443, NCSC CAF, NIST SP 800-82 and HSE OG86 to real industrial environments Working with the sales team on follow-on opportunities and proposals Getting involved … writing and close attention to detail Nice to have IEC 62443 experience or certifications (fully funded training is provided if not) CISSP, CySA+ or NCSC Chartered status The package £70,000 to £90,000 depending on experience 5% of salary towards training and certifications each year Salary reviews every ...

Helping organisations prioritise cyber investment. Supporting senior stakeholders with cyber risk decision-making. Working with recognised frameworks and standards including NIST CSF, ISO 27001, NCSC CAF and NIS2. Cyber Transformation Turning cyber strategies and assessments into practical transformation programmes. Defining programme scope, priorities, governance and outcomes. Supporting the delivery … consulting. An understanding of how cyber risk connects to wider technology and business priorities. Exposure to recognised frameworks such as NIST CSF, ISO 27001, NCSC CAF or NIS2. Strong analytical and problem-solving skills, with the ability to turn findings into clear recommendations. Strong client-facing experience and the confidence ...

Helping organisations prioritise cyber investment. Supporting senior stakeholders with cyber risk decision-making. Working with recognised frameworks and standards including NIST CSF, ISO 27001, NCSC CAF and NIS2.Cyber TransformationTurning cyber strategies and assessments into practical transformation programmes. Defining programme scope, priorities, governance and outcomes. Supporting the delivery of complex cyber … consulting. An understanding of how cyber risk connects to wider technology and business priorities. Exposure to recognised frameworks such as NIST CSF, ISO 27001, NCSC CAF or NIS2.Strong analytical and problem-solving skills, with the ability to turn findings into clear recommendations. Strong client-facing experience and the confidence ...

SC Cleared Lead Product Security Engineer - Defence Product Security (Defence) Predominantly onsite in Luton p/w Up to £90 p/h Inside IR35 We are currently recruiting for an experienced security cleared OT ...

audit readiness and continuous improvement across applicable standards and frameworks. Work with subject matter experts to maintain high-assurance operational standards aligned with MOD, NCSC, NATO and secure-by-design principles. Coordinate internal audit programmes, corrective actions and assurance reporting for the Managing Director and Board. Knowledge Management … across multiple functions. A pragmatic, commercially focused approach, with the ability to translate strategic objectives into measurable operational improvements. Desirable Experience Experience supporting MOD, NCSC, NATO or secure government supply chains. Knowledge of secure AI adoption, data governance and intellectual property protection. Familiarity with operational improvement methodologies such as ITIL ...