1 to 25 of 286 NCSC Jobs in the UK

Secure by Design Principles DevSecOps Methodologies Security Operations & Incident Response Identity & Access Management (IAM) Data Protection & Privacy Controls Enterprise Security Architecture Frameworks Familiarity with: NCSC Cloud Security Principles ISO 27001 NIST Cybersecurity Framework CIS Controls OWASP Technical Experience Cloud Platforms AWS Microsoft Azure Google Cloud Platform (GCP) Security Technologies Microsoft ...

role. Strong working knowledge of security frameworks including ISO 27001, NIST Cyber Security Framework and CIS Controls v8. Good understanding of UK Government and NCSC security standards, policies and guidance. Experience securing cloud environments with a strong Azure focus, including technologies such as Entra ID, Azure Key Vault, Azure Policy ...

infrastructure, and cloud environments. Conduct security design reviews and provide assurance across projects and programmes. Ensure alignment with standards such as ISO 27001, NIST, NCSC and Cyber Essentials Plus. Risk Management & Compliance Identify, assess, and manage cyber security risks across systems and suppliers. Support risk assessments, threat modelling, and vulnerability ...

public sector/government agencies . Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

evidence-based assurance activities. Strong understanding of relevant legislation and compliance requirements, including GDPR, PCI DSS and ICO guidance. Working knowledge of HMG and NCSC security policies, standards and guidance. Ability to produce clear, well-structured test plans, assurance reports and remediation recommendations. Strong stakeholder management and communication skills, with ...

audit requirements, governance and assurance within regulated environments. Desirable Skills Previous Central Government or wider UK Public Sector security and identity experience. Knowledge of NCSC guidance, Government Security Framework and government digital/security standards. Experience with technologies such as Microsoft Entra ID (Azure AD), Active Directory, PAM and modern ...

clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks. Financial services security: experience designing controls for regulated ...

clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks. Financial services security: experience designing controls for regulated ...

clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks. Financial services security: experience designing controls for regulated ...

clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks. Financial services security: experience designing controls for regulated ...

clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks. Financial services security: experience designing controls for regulated ...

clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks. Financial services security: experience designing controls for regulated ...

explaining technical risk clearly Balancing security requirements against practical delivery and business needs Experience with areas such as NIST, SABSA, TOGAF, ISO 27001, NCSC guidance, Zero Trust, IAM/PAM, cloud security or security assurance would all be useful, but we're not expecting one person to tick every box. ...

make informed security decisions. What You'll Bring: Proven experience leading large-scale Security Architecture initiatives. Strong knowledge of frameworks such as TOGAF, SABSA, NCSC Cloud Security and related industry standards. Experience working within regulated environments and frameworks such as GDPR and DORA. The ability to translate complex technical concepts ...

cloud security, M365 security or DevSecOps architecture. Experience in application architecture, software development or infrastructure architecture. Working knowledge of security standards and regulations including NCSC, ISO, NIST, SOC, PCI and GDPR. Practical command of network security (OSI, TCP/IP), web application security (OWASP) and cryptographic controls (PKI, TLS). ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

Security Architecture within Central Government or the wider Public Sector. Strong understanding of ISO 27001, NIST CSF and CIS Controls. Deep knowledge of NCSC and HMG security standards and guidance. Expertise in Azure security technologies, including Entra ID, Azure Policy, Key Vault and Identity & Access Management. Experience securing cloud-native ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

repeatable deployment patterns. Knowledge of relevant standards and frameworks such as: NIST Cybersecurity Framework/NIST 800‐53 ISO/IEC 27001 UK NCSC guidance and Cloud Security Principles Zero Trust Architecture (NIST SP 800‐207) Experience defining architectures independently of specific technologies and then mapping them onto implementations. Personal ...

delivery, including IT/OT convergence Advanced Visio skills and fluency with TOGAF or equivalent architecture methods. Working knowledge of NIST CSF, IEC 62443, NCSC CAF, EU NIS2, cloud and network fundamentals Willingness to travel for client delivery (domestic and international as required). Ideally, You’ll Also Have Experience ...

Microsoft Entra ID/Active Directory. Strong understanding of security and compliance principles, technologies and frameworks, including Zero Trust, Microsoft Defender/Sentinel, NCSC, NIST and ISO 27001. Experience engaging with senior customer stakeholders and acting as a trusted technical advisor. Strong understanding of ITIL‐aligned service management and managed ...

product vision and roadmap for secure AWS-based platform products used within government programmes. Align product delivery with business objectives, government standards (e.g., NCSC Cloud Security Principles), and compliance frameworks. Drive backlog prioritisation, balancing feature delivery, security requirements, and operational excellence. Stakeholder Engagement Act as the product voice with government ...

architectural experience in securing software, hardware and cloud environments (AWS) using best security practice and security frameworks aligned to NIST, ISO, CIS, CSA, PCI, NCSC etc. is essential. What's in it for you? Besides the opportunity to work for a global company that is customer and people-focused ...