18 NIST 800 Jobs in England

Secure by Design DefStan 05-139 Knowledge and application of non-UK Information Assurance Standards NIST SP800 (in particular NIST SP 800-53, NIST SP 800-37, NIST SP) NIST Guidance Material Knowledge of encryption standards more »

a regular cadence for OT Cyber risk capture, appraisal, and assessment for NIS critical systems. Ensure there is consistent document and justification of NIST CSF controls process maturity and coverage of these systems. Ensure Improvement plans are underpinned by comprehensive risk registers that quantify gaps in our controls … Work closely with leadership to report on risk posture, metrics, mitigation strategies and investment priorities. Experience Demonstrable experience utilising risk assessment methodologies (e.g., NIST 800-30, ISO27005, IEC 62443, FAIR). Demonstrable experience working with industry best practices and security control frameworks (e.g., NIST 800 53, ISO 27001, IEC 62443, NIST CSF, NCSC CAF). Demonstrable experience implementing security risk management frameworks (e.g., NIST 800-39, 800-37) Ability to communicate complex messages both orally & in writing using quantitative & qualitative measures to more »

and Cyber Kill Chain frameworks. Proficiency in maintaining Microsoft directory services. Familiarity with virtualization software. Knowledge of key security frameworks such as ISO, NIST 800-53, 800-171, 800-172, C2M2. Excellent communication skills. Experience in writing Defence/Government documentation. Desirable more »

and Cyber Kill Chain frameworks * Skilled in maintaining Microsoft directory services. * Skilled in using virtualisation software. * Knowledge of key security frameworks (e.g. ISO, NIST 800-53, 800-171, 800-172, C2M2) * Excellent communication skills * Experience of writing Defence/Government documentation Responsibilities more »

and Cyber Kill Chain frameworks * Skilled in maintaining Microsoft directory services. * Skilled in using virtualisation software. * Knowledge of key security frameworks (e.g. ISO, NIST 800-53, 800-171, 800-172, C2M2) * Excellent communication skills * Experience of writing Defence/Government documentation Responsibilities more »

and Cyber Kill Chain frameworks * Skilled in maintaining Microsoft directory services. * Skilled in using virtualisation software. * Knowledge of key security frameworks (e.g. ISO, NIST 800-53, 800-171, 800-172, C2M2) * Excellent communication skills * Experience of writing Defence/Government documentation Responsibilities more »

but not limited to: Security governance and risk management approaches, tools, and techniques. Threat modelling (e.g. STRIDE) and socio-technical risk assessment (e.g. NIST 800-30) methodologies. Attack classification and characterisation frameworks (e.g. MITRE ATT&CK) Computer, Network and Cloud Security architectures and controls, System Hardening … Transit, Public Key Infrastructure (PKI)), Security Monitoring and System Security Audit. National and international security standards including the International Standards Organisation (ISO) 27000 series, NIST Cyber Security Framework, Risk Management Framework, and Special Publication 800 Series, NCSC Cyber Assessment Framework, and other industry frameworks. Familiarity with more »

Performs or coordinates internal security assessments, penetration tests, vulnerability scans, and assess organization cybersecurity maturity Complying with frameworks and regulations such as COBIT, NIST (800-53, cybersecurity), ISO, ITIL, PCI, GLBA, GDPR, HIPAA, and other data privacy and security standards and regulations. Provides internal customer support … Provides a documented work history that includes a minimum of 5-years experience in Information Security. Proficiency in security framework models such as NIST, etc., implementing and auditing security measures, security response, and incident management. Possess a working knowledge of Cisco network switches, routers, firewalls and VPN, network … upon vulnerability management program. Ability to propose solutions for closing identified vulnerabilities in the infrastructure. Desired Qualifications: Certified Information System Security Professional (CISSP), NIST Cybersecurity Framework (NCSF), Certified Cloud Security Professional (CCSP) andor Certified Ethical Hacker (CEH) Knowledge and experience with Microsoft Office and Visio. Knowledge of WAN more »

Knowledge of UK/NATO Information Assurance standards, procedures & systems, including Government Functional Standard GovS 007: Security, HMG IS1&2, ISO27000 series standards, NIST SP800 series standards, JSP440, JSP604, guidance material provided by NCSC, CPNI and NIST. Practical experience of producing Security Accreditation documentation Practical experience of NCSC more »

Knowledge of UK/NATO Information Assurance standards, procedures & systems, including Government Functional Standard GovS 007: Security, HMG IS1&2, ISO27000 series standards, NIST SP800 series standards, JSP440, JSP604, guidance material provided by NCSC, CPNI and NIST. * Practical experience of producing Security Accreditation documentation * Practical experience of NCSC more »

wider organization To be successful in this role you will need the following: Knowledge of information security standards (HMG, NCSC Guidance, ISO 27001, NIST 800 Ideally come from a Military background Knowledge of security architecture SME regarding Cyber assurance activities If you have this skill set more »

Environmental Management Systems compliant with ISO14001:2015 Experience with the examination or implementation of technical controls, such as SOC 2, ISO, TISAX or NIST 800-53 Excellent verbal and written communication skills Has demonstrable skill working with internal and external stakeholders Experience engaging with external auditing more »

Experience performing information systems audit or information security reviews Experience performing security audits against published standards Experience in leading a team ISO 27001, NIST 800-53 experience to help in third party security risk assessment efforts Experience/Knowledge of working on GRC tool’s Strong more »

Engineering, Infrastructure or IAM. Proven experience of authoring technical security standards and patterns. Familiar with security best practices (including ISO27001 and/or NIST 800-53) and relevant security legislation. Have achieved security certification(s) such as CISSP/CISM/CeH or equivalent. Hold relevant more »

strategy, broader IT strategies and the AstraZeneca business strategy. This role is closely aligned to the IT Security organisation, Cyber Risk team and NIST programme and works closely with suppliers, vendors, industry peers and wider security enterprises to identify new Cyber Security education opportunities, communications and learning methodologies … environment - The ability to travel both domestically and internationally. Desirable Skills/Experience: - Experience of operating security standards/frameworks such as ISO27001, NIST 800-53. - An understanding of the principles of security governance, risk and controls. - Project or programme management experience - Experience in working more »

What will you need? Experience working in OT, Understanding of cyber security, Experience configuring & deploying hardware and software solutions, Experience on technical frameworks: NIST 800, IEC 62433 and NIS-D, To be a self-starter, A dynamic person, Build and maintain strong relationships with internal and more »

and external customers (e.g., Programme Management, Customers, and Suppliers). Strong understanding of security compliance & detailed knowledge of a control framework such as NIST SP800-53 and ISO270002, IEC62443. Expert understanding of security maturity & detailed knowledge of a security maturity frameworks such as NIST CSF and more »

Treatment Plans Establish security requirements for cloud-based solutions by evaluating business strategies and requirements, implementing security standards such as ISO 27000 series, NIST, CSF, and CSA Identify and deliver appropriate controls based on industry standards (e.g. CCM) to drive cloud and customer security solutions framework based on … and best practices for delivering security across IaaS, PaaS, SaaS and Serverless architectures Implementing Information Security and Privacy Standards and Frameworks (e.g. ISO 27k, NIST800-53, CIS, GDPR) Leading security working groups and external security testing (ITHC, Penetration Testing, etc) of cloud solutions at high HMG classification levels (OFFICIAL required more »