1 to 25 of 78 NCSC Jobs in the UK excluding London

related compliance frameworks. Security frameworks and standards including ISO 27001, NIST Cyber Security Framework and CIS Controls v8. UK Government and NCSC security policies, guidance and best practices. Cloud security architecture, particularly AWS services such as IAM, KMS and ECS. Event-driven and microservices-based architectures. Cloud Security Posture Management ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling – Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+, CEH, CKS, CKA or similar certifications Please note: Active SC Clearance is essential for this position, along with ...

security qualification such as CISSP, CCSK or CCSP. It would be great if you had: Knowledge of security architecture frameworks and methodologies, including: NIST. NCSC guidance. SABSA. Understanding of Secure by Design principles. Experience across one or more security domains, such as: Identity & Access Management (IAM). Infrastructure. Security. Data ...

mitigation strategies across programmes Provide authoritative guidance on risk trade-offs and security posture Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC) Ensure architectural traceability from requirements through to controls and implementation Develop and lead the security architecture practice Mentor, coach, and upskill security architects and consultants Define ...

Trust Architectures. Deep technical knowledge of Microsoft Azure, Building Cloud Platforms, Migrating Applications to Cloud Platforms. Agile Delivery using standard DevSecOps toolchains Knowledge of NCSC, GDS, and UK government security frameworks, including Secure by Design, Cloud Security Principles, Government Functional Standards, and the Technology Code of Practice. Working in Secure ...

Compliance Apply Zero Trust principles across cloud platforms. Implement identity and access management controls. Configure security monitoring, logging and compliance controls. Ensure alignment with NCSC, GDS and UK Government security frameworks. Identify and mitigate technical risks throughout delivery. Essential Skills & Experience We are looking for candidates with proven experience delivering ...

incident response plans and coordinate desktop incident response exercises. Broad knowledge and application of common bodies, standards, frameworks, guidelines and legislation, including: HMG/NCSC Information Assurance Policies, Standards and Guidelines Cross-government security accreditation and secure by design processes JSP440 (plus other standard MoD IA methods) DCPP’s Cyber ...

architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure security controls. Familiarity with government and defence security standards such as: HMG/NCSC IA Policies and Guidelines JSP440 and other MoD IA standards Cyber Essentials NIST, NIS-D You will ideally hold CISM/CISSP or similar higher ...

controls using Microsoft Purview Supporting threat monitoring, detection and incident response Providing security input into technology projects and architecture decisions Supporting security frameworks including NCSC CAF, ISO 27001, NIST CSF and CIS Controls Acting as a security SME to technical and non-technical stakeholders What we're looking for: Proven ...

support the implementation of proportionate remediation and security improvements. Knowledge of recognised cyber security frameworks, standards and guidance, such as DSPT, CAF, CIS Controls, NCSC guidance or NIST, and experience of supporting compliance or assurance activity. Ability to communicate technical cyber security information clearly to a range of audiences ...

mitigate or remediate findings. Working knowledge of container and Kubernetes security, image hardening, admission controls, runtime protection. Familiarity with UK government security frameworks (GovAssure, NCSC Cyber Assessment Framework, HMG SPF) Experience contributing reusable security patterns, tooling, or paved-road templates back into an engineering practice. Evidence of mentoring engineers ...

Excellent stakeholder management and communication skills. Security & Compliance Knowledge Experience working with one or more of the following is highly desirable: NIST Cybersecurity Framework NCSC Cyber Security Design Principles Secure by Design JSP 440 JSP 604 JSP 453 Security Accreditation & Assurance Risk Management & Compliance ...

environments Strong stakeholder engagement and supplier management skills Experience presenting incident risk information to senior stakeholders Desirable Knowledge of NIST Cyber Security Framework (CSF), NCSC guidance, ITIL Major Incident Management and ISO 27001 Experience supporting security assurance and audit activities Experience in Defence, Government, or highly regulated sectors ...

programs, such as AWS APN and Azure Partners Experience with well-architected frameworks Knowledge of UK public sector technology guidance and frameworks, such as NCSC's Cyber Assessment Framework (CAF) and the Technology Code of Practice (TCoP) Familiarity with Python, Bash and JavaScript Agile practices such as Scrum ...

architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire to work ...

management, security controls, threat and vulnerability assessment, security governance and risk acceptance is important. Experience with frameworks such as ISO 27001, ISO 27005, the NCSC Cyber Assessment Framework, NIST or MOD security standards would be beneficial. Experience within defence, government, critical infrastructure or another high-assurance environment would be particularly ...

environments Strong stakeholder engagement and supplier management skills Experience presenting incident risk information to senior stakeholders Desirable Knowledge of: NIST Cyber Security Framework (CSF) NCSC guidance ITIL Major Incident Management ISO 27001 Experience supporting security assurance and audit activities Experience in Defence, Government, or highly regulated sectors Key Deliverables Security ...

industry systems Provide technical assurance via design authorities/architecture review boards Support cyber assurance and risk activity aligned to MOD DefStan 05-138, NCSC CAF, ISO 27001, and Zero Trust/Secure by Design Essential experience Strong technical architecture background in defence, government or highly regulated environments Experience delivering ...

also have: Experience with OpenShift ACM/ACS, Argo CD, Service Mesh, cloud platforms, HashiCorp Vault or Defence/Government security standards such as NCSC Secure by Design, NIST or JSP 440. Due to the level of sensitivity of this programme, you must hold active SC security clearance ...

compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility of: Security risks, Compliance status, Control effectiveness ...

identifying security issues in existing system designs, including recommending sensible mitigations that balance cost, risk and usability. Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). Experience in one of the following specialisms: AI/ML/Data/Cloud/M365/Security Architecture ...

compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility of: Security risks, Compliance status, Control effectiveness ...

compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility of: Security risks, Compliance status, Control effectiveness ...