22 of 22 NCSC Jobs in the Midlands

related compliance frameworks. Security frameworks and standards including ISO 27001, NIST Cyber Security Framework and CIS Controls v8. UK Government and NCSC security policies, guidance and best practices. Cloud security architecture, particularly AWS services such as IAM, KMS and ECS. Event-driven and microservices-based architectures. Cloud Security Posture Management ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

documentation of complex security solution, writing high level designs encompassing both cloud and on premise environments.Understanding and awareness of industry frameworks such as NIST, NCSC CAF, CIS, IEC 62443. Plus knowledge of the NIS-R Directive and PCI DSS would be advantageous.Ability to evaluate and propose solutions and technologies within ...

such as securing web applications and cloud platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical expert, but you must be able to understand ...

such as securing web applications and cloud platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical expert, but you must be able to understand ...

automation, scripting or workflow improvement.You'll also be comfortable working with recognised security frameworks such as NIST CSF, ISO 27001, CIS Controls or the NCSC Cyber Assessment Framework.About youWe're looking for someone who:Has significant experience within cyber security, information security or security operations.Enjoys leading investigations and solving complex ...

scripting or workflow improvement. You'll also be comfortable working with recognised security frameworks such as NIST CSF, ISO 27001, CIS Controls or the NCSC Cyber Assessment Framework. About youWe're looking for someone who: Has significant experience within cyber security, information security or security operations. Enjoys leading investigations ...

code from a security standpoint. - Expertise in Continuous Security, Continuous Integration and Continuous Delivery techniques - Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc. - Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc. ...

management, security controls, threat and vulnerability assessment, security governance and risk acceptance is important. Experience with frameworks such as ISO 27001, ISO 27005, the NCSC Cyber Assessment Framework, NIST or MOD security standards would be beneficial. Experience within defence, government, critical infrastructure or another high-assurance environment would be particularly ...

issues in existing system designs or products, including recommending sensible mitigations that balance cost, risk and usability. • Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR).• Deep architectural xxperience in one of the following specialisms: AI/ML Security/Cloud/M365/DevSecOps ...

identifying security issues in existing system designs, including recommending sensible mitigations that balance cost, risk and usability.• Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR).• Experience in one of the following specialisms: AI/ML/Data/Cloud/M365/Security Architecture ...

integration and extension artefacts. • Experience with Oracle Analytics Cloud, Fusion Data Intelligence or reporting-aligned integration outputs. • Knowledge of UK Government security frameworks, NCSC CAF, ISO 27001 or Cyber Essentials Plus. • Ability to mentor junior developers and establish delivery standards across distributed teams. Additional InformationWhy Version 1Be part ...

working in multi-supplier or SIAM environments Ability to interpret outputs from SOC and vulnerability tooling without direct ownership Desirable Familiarity with NIST CSF, NCSC or UK Government security guidance Experience in Defence sector or highly regulated environments Exposure to audit, assurance or ISMS processes ITIL alignment Reasonable Adjustments: Respect ...

design patternsHybrid classical/PQC key exchangeCryptographic agility frameworksSecure key management and HSM integrationDevelop defensible design patterns, for high-assurance systems, ensuring alignment with NCSC, NIST, ETSI and sector specific standards.Provide technical leadership to engineering teams, guiding implementation, testing, and assurance.Engage with senior stakeholders, translating complex trust and crypto concepts ...

responsible for ensuring compliance with all applicable internal and external security frameworks, including (subject to nationality constraints): Safran Information System Security Policy NCSC Cyber Assessment Framework France IGI 1300 Export Control, ITAR, and related regulatory requirements Key Responsibilities Governance & Compliance Oversee and monitor accreditation and approval processes for all local ...

such as MQTT, OPC UA, Modbus, and DNP3. Understanding of connectivity technologies including LoRaWAN, NB IoT, and 5G. Experience aligning architecture to NIS regulations, NCSC CAF, IEC 62443, and ISO 27001. Strong grasp of data platform architecture, integration patterns, standardisation, and contextualisation. Ability to translate complex technical concepts into clear ...

playbooks for cloud environments.Collaborate with the SOC to operationalise detection rules and incident handling.Compliance & AuditSupport GRC in meeting evidence and compliance requirements for ISO27001, NCSC Cloud Security Principles, and SOC2.Reviewing the outputs from security tools and security practices. You will filter and prioritise these into security stories that … material where appropriate.Required Skills & ExperiencePrevious experience in cloud security engineering or related roles.Working knowledge of industry cloud security frameworks and best practice (CSA STAR, NCSC Cloud Security Principles).Experience with automation and scripting (Python, PowerShell, Bash).Proficiency with:Azure security services: Defender for Cloud, Entra ID, Sentinel etc.AWS security services ...

cloud environments. Collaborate with the SOC to operationalise detection rules and incident handling. Compliance & AuditSupport GRC in meeting evidence and compliance requirements for ISO27001, NCSC Cloud Security Principles, and SOC2.Reviewing the outputs from security tools and security practices. You will filter and prioritise these into security stories that … appropriate. Required Skills & ExperiencePrevious experience in cloud security engineering or related roles. Working knowledge of industry cloud security frameworks and best practice (CSA STAR, NCSC Cloud Security Principles).Experience with automation and scripting (Python, PowerShell, Bash).Proficiency with: Azure security services: Defender for Cloud, Entra ID, Sentinel etc. AWS security ...

Framework & Standards Support the maintenance of UKHSAs Cyber Risk Management Framework Assist in assessing cyber risks against: Government Security Policy Framework (SPF) DSPT Cyber Assurance Framework NCSC guidance ISO 27001/NIST aligned approaches Promote a proportionate, risk-based approach to cyber security across the organisation Governance & Reporting Contribute … concisely Strong written and verbal communication skills Willingness to provide constructive challenge while building effective working relationships Desirable Criteria Knowledge of: Government Security Policy Framework NCSC principles Risk registers and assurance reporting DSPT Cyber Assessment Framework Industrial Automated Control Systems Selection Process Details This vacancy is using Success Profiles Success ...

ensuring high-quality outcomes and practical recommendations 3. Act as a subject matter expert across recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF and Defence Cyber Certification requirements 4. Design and implement governance frameworks, policies, processes and controls that help clients manage cyber risk effectively 5. Lead … Compliance, ideally within cyber security, information security or technology risk 2. Good working knowledge of recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF, Cyber Essentials and related assurance or certification schemes 3. Experience leading risk assessments, control reviews, audit preparation, compliance programmes or security maturity assessments 4. ...

consultancy services by:Conducting OT cyber security gap assessments of procedural and technological controls against relevant frameworks and standards e.g. National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF), ISA/IEC 62443 suiteCarrying out a wide variety of site and desktop based vulnerability assessments on client's brown field ...

Knowledge of industrial protocols such as MQTT, OPC UA,Modbusand DNP3.Understanding of connectivity technologies includingLoRaWAN, NB‐IoT and 5G.Experience aligning architecture to NIS regulations, NCSC CAF, IEC62443and ISO 27001. Data & Integration Focus - Strong grasp of data platform architecture, integration patterns,standardisationandcontextualisation. Influence & Communication - Ability to translate complex technical concepts into … Knowledge of industrial protocols such as MQTT, OPC UA,Modbusand DNP3.Understanding of connectivity technologies includingLoRaWAN, NB‐IoT and 5G.Experience aligning architecture to NIS regulations, NCSC CAF, IEC62443and ISO 27001. Data & Integration Focus - Strong grasp of data platform architecture, integration patterns,standardisationandcontextualisation. Influence & Communication - Ability to translate complex technical concepts into ...