25 of 25 NIST Jobs in Bristol

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

and confidence Drive secure architecture at scale Define and assure enterprise, solution, and system-level security architectures Apply and tailor security frameworks such as NIST, ISO 27001, SABSA and Zero Trust principles Ensure systems are secure by design, proportionate, and aligned to mission objectives Own risk and assurance outcomes Lead ...

Experience conducting or supporting ISO management system audits Knowledge of security standards and frameworks such as Cyber Essentials Plus, ISO 22301 and NIST Experience with security risk assessments, control assurance and remediation Understanding of third-party and supplier security risk Good broader knowledge of cyber security and technology Familiarity with ...

programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve challenging security problems through research ...

recognised methods such as STRIDE and MITRE ATT&CK for Industrial Control Systems, expressed as attack paths. Support the preliminary security risk assessment using NIST SP 800-30 and ISO/IEC 27005, and maintain entries in the design risk register. Capture security requirements and maintain the traceability thread from ...

including JSP 453 - Defence Information Architecture. Familiarity with enterprise architecture frameworks (e.g. TOGAF, MODAF, UAF). Knowledge of data governance and security standards (e.g. NIST, ISO/IEC 27001). Our Culture Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people at the heart ...

risk management and accreditation Building trusted client relationships and influencing stakeholders Producing high-quality assurance documentation Desirable experience includes: JSP 440/JSP 604 NIST, CAF, ISO 27001 or Cyber Essentials Active SC Clearance (DV advantageous) Professional certifications such as CISSP, CISM or CRISC are highly desirable. Chartered Cyber Security ...

design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR, and PCI-DSS Working closely with engineers, architects, and stakeholders to embed security by design Contributing to Agile delivery teams and supporting continuous improvement About ...

and on-premise environments. A security-first mindset and confidence working with both technical and non-technical stakeholders. Knowledge of frameworks such as NIST, ISO 27001, CIS, GDPR would be preferred. A proactive, accountable approach- you like owning outcomes. Why This Role Stands Out This isn't just another security ...

communication skills, with the ability to turn technical security concerns into clear, actionable decisions. Familiarity with recognised frameworks or certifications such as ISO 27001, NIST CSF or similar would be helpful. Experience in a product, platform or SaaS business. Experience in high-trust, regulated or mission-critical environments would ...

architectural approaches to implementation of preventative, detective and corrective AI risk controls Working knowledge of AI governance frameworks such as ISO/IEC 42001, NIST AI RMF, or EU AI Act and an understanding of responsible AI frameworks and ethical principles for design Solution architecture experience in enterprise environments, ideally ...

play a leading role in architecture and service governance forums, assuring designs against agreed enterprise standards, service principles, NCSC Secure by Design principles, NIST Cybersecurity Framework expectations and client-specific security requirements. Requirements Active Security Clearance, or capable of achieving SC. Significant practical architecture experience at senior or strategic level ...

energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum 2 days onsite/client site). Annual performance bonus. ...

utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within Agile delivery environments. What's on Offer Hybrid working (minimum ...

across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance activities. - Facilitate governance forums, stakeholder workshops and senior executive briefings to embed decision rights and reporting ...

concept to operation with hybrid working between onsite Ashton Vale and home offices. You will implement IA strategies, lead risk management per ISO27001/NIST, create security documentation, and liaise with stakeholders to assure robust protection across projects. #J-18808-Ljbffr ...

and risk reporting rather than treating it as a point-in-time exercise. Lead risk assessments and threat-modelling sessions , selecting methodologies (ISO 27005, NIST RMF, STRIDE, MITRE ATT&CK) that are proportionate to system criticality, and ensuring findings feed into programme governance decisions rather than sitting in security documentation … Cyber Essentials Plus, and the HMG Security Policy Framework - and how they interact in practice. Experience leading risk assessments using structured methodologies (ISO 27005, NIST RMF, or FAIR) and embedding risk outputs into programme governance rather than treating them as standalone deliverables. Demonstrated ability to design security controls and governance ...

infrastructure when required. Role responsibilities: Information Security (90%) Lead the organisation’s information security strategy and technical security operations. Drive compliance with ISO 27001, NIST and CBEST frameworks. Review new infrastructure and cloud‐based services, ensuring they meet security standards. Conduct vulnerability management activities and coordinate external penetration testing. Work … TACACS, IPS and endpoint protection. Security monitoring and incident response within SIEM environments. Vulnerability management and penetration testing. Security governance aligned to ISO 27001, NIST and risk management frameworks. Developing security policies, conducting audits and managing security incidents. Desirable skills: Exposure to tools such as Rapid7, LogRhythm SIEM, Trellix and ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

Develop and implement comprehensive Information Assurance Strategies to meet complex customer security requirements.Lead risk management activities that align with an industry standard such as NIST SP 800-37 or the ISO/IEC 27000 series.Create and maintain security documentation including system security plans, policies, procedures, and compliance evidence.Interface with internal … Product Security Engineer - Information AssuranceThe ability to interpret and implement industry security standards and frameworks such as the ISO/IEC 27000 series or NIST SP-800 series.Experience in information assurance, security engineering, cyber security, or a similar field.Deep understanding of security risk management and assurance methodologies & processes.Experience working across ...

and implement comprehensive Information Assurance Strategies to meet complex customer security requirements. Lead risk management activities that align with an industry standard such as NIST SP 800-37 or the ISO/IEC 27000 series. Create and maintain security documentation including system security plans, policies, procedures, and compliance evidence. Interface … Security Engineer - Information Assurance The ability to interpret and implement industry security standards and frameworks such as the ISO/IEC 27000 series or NIST SP-800 series. Experience in information assurance, security engineering, cyber security, or a similar field. Deep understanding of security risk management and assurance methodologies & processes. ...

penetration testing schemeBroad familiarity with UK Government physical and personnel security such as NPSA and UKSVRisk assessment using recognised standards such as IS1 and NIST SP800-30Able to express yourself effectively, with a high degree of clarity, in English, especially when justifying and explaining required security measuresAble to liaise effectively … prioritise and manage your time to achieve multiple different tasks(Desirable) Familiarity with broader international security standards such as ISO27001, CMMC, and the NIST Cyber Security Framework (especially SP800-30 and SP800-53)(Desirable) Familiarity with UK nuclear regulations such as the ONR SyAPsCompetent with Microsoft Word, Excel and PowerPointReasonable ...

scheme Broad familiarity with UK Government physical and personnel security such as NPSA and UKSV Risk assessment using recognised standards such as IS1 and NIST SP800-30 Able to express yourself effectively, with a high degree of clarity, in English, especially when justifying and explaining required security measures Able … prioritise and manage your time to achieve multiple different tasks (Desirable) Familiarity with broader international security standards such as ISO27001, CMMC, and the NIST Cyber Security Framework (especially SP800-30 and SP800-53) (Desirable) Familiarity with UK nuclear regulations such as the ONR SyAPs Competent with Microsoft Word, Excel and ...

position is 90% information security and 10% network engineering, and offers hybrid working with three days onsite in Bristol. A strong background in ISO27001, NIST and SOC coordination is essential. #J-18808-Ljbffr ...

regulation to: Design and implement AI governance frameworks, policies, controls and operating models. Advise on AI regulations and standards including the EU AI Act, NIST AI RMF and ISO/IEC 42001. Deliver AI risk assessments, model governance reviews and Responsible AI evaluations. Support governance across the AI lifecycle, including … emerging technology regulation. You should have experience with: AI governance frameworks, policies and controls. AI regulations and standards such as EU AI Act, NIST AI RMF or ISO 42001. AI risk assessments and governance reviews. Generative AI and associated governance considerations. Working with senior stakeholders across business, legal, compliance, risk ...