1 to 25 of 137 NCSC Jobs in the UK excluding London

security.* **Compliance & Governance:** ensure Thales on-premises and cloud environments comply with government policies, such as Cyber Essentials, DefStan 05-138, UK GDPR, NCSC guidelines and other applicable contractual and regulatory frameworks.* **Evidence Continual Security Assurance:** Creation, Maintenance and Review of all IS/IT technical security documentation, policy ...

security. Compliance & Governance: ensure Thales on-premises and cloud environments comply with government policies, such as Cyber Essentials, DefStan 05-138, UK GDPR, NCSC guidelines and other applicable contractual and regulatory frameworks. Evidence Continual Security Assurance: Creation, Maintenance and Review of all IS/IT technical security documentation, policy ...

Microsoft Entra ID/Active Directory. Strong understanding of security and compliance principles, technologies and frameworks, including Zero Trust, Microsoft Defender/Sentinel, NCSC, NIST and ISO 27001. Experience engaging with senior customer stakeholders and acting as a trusted technical advisor. Strong understanding of ITIL‐aligned service management and managed ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

ownership of SSEN Distribution security architecture, including oversight of risks, controls, compliance and secure operations, ensuring alignment with frameworks such as NCSC, NIST and IEC 62443 You have Proven experience designing and governing security architectures in complex or regulated enterprise environments, ideally covering cloud, identity, data, network and application security ...

e.g., JSP440, JSP453, Secure by Design), and industry frameworks (e.g., NIST Cyber Security Framework, ISO 27001). Professional certifications such as CISSP, CISM, or NCSC Certified Cyber Professional (CCP) [desirable]. Our Culture Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people ...

also have a strong understanding of: Secure-by-Design | Zero Trust | IAM | Network Security | Encryption | Key Management | Secure Information Exchange Knowledge of NCSC guidance, ISO 27001, Cyber Essentials, MoD 05-138 or NIST would be advantageous. Relevant qualifications or certifications such as CISSP, SABSA, TOGAF, CCSP ...

architectural experience in securing software, hardware and cloud environments (AWS) using best security practice and security frameworks aligned to NIST, ISO, CIS, CSA, PCI, NCSC etc. is essential. What's in it for you? Besides the opportunity to work for a global company that is customer and people-focused ...

operations. Experience supporting government, defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors. Familiarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards. Experience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations ...

Standards Ensure alignment with nuclear and OT cyber standards, including: IEC 62443 (Industrial Automation & Control Systems Security), ISO/IEC 27001 (Information Security Management), NCSC guidance and UK Cyber Essentials and ONR Security Assessment Principles (SyAPs) Secure by Design Leadership Act as the primary interface for Secure by Design ...

Friday. WHAT WE'RE LOOKING FOR Experience designing secure solutions across cloud and on-premise environments. Strong knowledge of security frameworks such as NIST, NCSC CAF, CIS and IEC 62443. The ability to recommend security solutions that balance business needs with robust protection. Knowledge of OT/IoT security, ideally ...

mitigation strategies across programmes* Provide authoritative guidance on risk trade-offs and security posture* Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC)* Ensure architectural traceability from requirements through to controls and implementationDevelop and lead the security architecture practice* Mentor, coach, and upskill security architects and consultants* Define ...

full project lifecycle from bid through delivery and into service. Desirable Experience Post-Quantum Cryptography (PQC) planning and migration. Cryptographic standards and frameworks including NCSC, NIST, ETSI, ISO and IEC standards. Scripting and automation using PowerShell, Python, or Bash. Identity & Access Management (IAM) integration. Critical National Infrastructure (CNI) or Operational ...

Also Have Security-related qualifications such as CISSP, CISM, CISMP, ISO27001 lead implementer or auditor, MBCI, or IAPP. Experience operating within an NCSC Assured Cyber Consultancy. Understanding of the cybersecurity regulatory landscape and assessment frameworks (e.g., NIS2, NIST CSF). Key delivery experience in cybersecurity strategy, transformation, and compliance. Sector ...

Zero Trust, IAM Network Security - Firewalls, VPN, PAM Data Security - Encryption, Key management, Secure Information Exchange Application and Platform Security Frameworks and Standards - NCSC, ISO 27001, Cyber Essential, MoD 05-138, NIST The opportunity for a Security Architect, SC Cleared is home-based opportunity, paying a salary range ...

Splunk) and EDR/XDR platforms (e.g., Microsoft Defender for Endpoint, CrowdStrike Falcon). Security Frameworks: Solid understanding of MITRE ATT&CK, NIST CSF, NCSC Caf v4.0 and ISO 27001. Communication: Ability to write concise incident reports and speak comfortably with both engineers and business leaders. Desirable Experience working ...

Splunk) and EDR/XDR platforms (e.g., Microsoft Defender for Endpoint, CrowdStrike Falcon). Security Frameworks: Solid understanding of MITRE ATT&CK, NIST CSF, NCSC Caf v4.0 and ISO 27001. Communication: Ability to write concise incident reports and speak comfortably with both engineers and business leaders. Experience working in management ...

Understanding of the engineering lifecycle and key gate review activities. Knowledge of current Crypto technologies,Key ManagementSystems & practicalCOMSECimplementations and MOD/NCSC standards. Knowledge or experience of ARP4754A/ARP4761 and its interrelationship with security. This is not an exhaustive list, and we are keen to hear from you even ...

understanding of the engineering lifecycle and key gate review activities. Knowledge of current Crypto technologies, Key Management Systems & practical COMSEC implementations and MOD/NCSC standards. Knowledge or experience of ARP4754A/ARP4761 and its interrelationship with security. Security Clearance This role is subject to pre-employment screening in line ...

role Essential: Experience designing and assuring secure solutions across Azure, on-premise and hybrid environments. Strong knowledge of industry frameworks such as NCSC guidance, NIST CSF/800-53, ISO 27001/2 or SABSA. Understanding of identity & access management, network security, encryption, API security and secrets management. Experience with ...

scripting or workflow improvement. You'll also be comfortable working with recognised security frameworks such as NIST CSF, ISO 27001, CIS Controls or the NCSC Cyber Assessment Framework. About you We're looking for someone who: Has significant experience within cyber security, information security or security operations. Enjoys leading investigations ...

Working knowledge of Jira, Confluence, and IT Service Management platforms. Good understanding of hybrid environments incorporating on-premise and cloud-hosted services. Familiarity with NCSC security guidance, Secure by Design principles, Zero Trust architectures, and UK Government security frameworks. Desirable Experience supporting products from vendors such as Everfox (Deep Secure ...

issues in existing system designs or products, including recommending sensible mitigations that balance cost, risk and usability. Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). Deep architectural xxperience in one of the following specialisms: AI/ML Security/Cloud/M365/DevSecOps ...

level reporting and communicating cyber risk to senior leadership Knowledge of recognised security frameworks and standards such as: NIST Cyber Security Framework ISO 27001 NCSC guidance Secure by Design principles Desirable Experience Hands-on experience with vulnerability management platforms such as: Tenable Qualys Brinqa Experience working within defence, government, public ...

data-centre exit programmes. Expert knowledge of the Microsoft Cloud Adoption Framework and Azure Well-Architected Framework . Experience providing guidance around the NCSC Cyber Assessment Framework . Excellent stakeholder management and communication skills. Confidence working directly with clients and operating within consulting environments. Strong written and verbal English. Relevant ...