25 of 25 NIST Jobs in Central London

programme, including the ISMS, policy framework, risk registers, and audit readiness Implement and maintain compliance with ISO 27001, SOC 1, SOC 2, NIST CSF, GDPR, and relevant financial services regulations Understand the GRC landscape, implement appropriate controls, and adapt as the threat and regulatory environment shifts Own execution of ...

threat modeling, secure design reviews, and engineering‐focused risk assessments Familiarity with industry standards and frameworks such as ISO 27001, SOC 2, OWASP, and NIST CSF Experience supporting digital product teams or client‐facing technology delivery units; knowledge of privacy and data protection regulations (e.g., GDPR, CCPA); and relevant professional ...

Cyber Security Governance. Experience conducting cyber risk assessments and developing risk treatment plans. Strong understanding of security frameworks and standards, including ISO 27001, NIST and industry best practices. Experience delivering security assurance reviews, audits and control effectiveness assessments. Knowledge of cloud security principles with exposure to Azure and/ ...

transformation programmes Provide security consultancy into complex IT and digital initiatives Advise clients on cyber risk, governance and regulatory compliance frameworks including: ISO 27001 NIST GDPR PCI-DSS Conduct threat modelling and identify security vulnerabilities within solution designs Recommend pragmatic risk mitigation strategies to technical and non-technical stakeholders Support ...

have: Experience in a Cyber Security Manager, Information Security Manager or similar role. Strong cyber governance, risk and assurance experience. Knowledge of ISO 27001, NIST, CIS Controls and/or Cyber Essentials. Experience with security audits, certifications and incident response. Experience working within a complex, multi-site organisation. Strong stakeholder ...

assurance, with a strong focus on application security. Hands-on experience with information security frameworks and regulatory compliance, such as ISO 27001 and the NIST SP 800 series/Cybersecurity Framework. Desirable Knowledge of regulatory requirements within the nuclear industry, particularly across the United States, United Kingdom, Netherlands, and Germany. ...

assurance, with a strong focus on application security. Hands-on experience with information security frameworks and regulatory compliance, such as ISO 27001 and the NIST SP 800 series/Cybersecurity Framework. Desirable Knowledge of regulatory requirements within the nuclear industry, particularly across the United States, United Kingdom, Netherlands, and Germany. ...

Senior Information Security Analyst - Audit & Compliance ISO27001, SOC2, PCI-DSS, NIST, GDPR London (Barbican). Hybrid. 2 days a week onsite. Up to £100k plus 8% bonus, pension, private medical etc We're working with a global technology partner to find a certified Information Security Analyst. This is a fantastic ...

programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve challenging security problems through research ...

years of hands‐on experience as a Devops or Platform engineer Excellent understanding of networking andA WS cloud. Knowledge of security frameworks (ISO 27001, NIST) applied in practice. Experience with DevOps tooling, automation, and secure system design. Certifications such as CISSP, CISM, CCSP, or cloud security certifications are desirable. Desirable ...

certifications (SC‐100, SC‐200, SC‐401, etc.). Industry‐recognised certifications such as CISSP, CCSP, CISM, GIAC, etc. Familiarity with compliance frameworks – GDPR, NIST AI RMF, ISO27001, SOC2, etc. Ability to build organisational culture, drive employee engagement, strengthen inclusion and diversity, reduce attrition, and attract top talent. Growth mindset ...

complex client reports on time. Direct experience building or securing AI/ML pipelines, utilizing AI security frameworks (e.g., OWASP Top 10 for LLMs, NIST AI RMF), or configuring secure cloud AI environments. Strong experience securing multi-cloud environments and reviewing Infrastructure as Code (IaC) templates. About the job Mandiant ...

Prject Manager Cyber - Inside IR35 SZC is developing its security posture to improve maturity against NIST CSF and reduce residual risk. This includes preparation for ISO27001 certification of our Information Security Management System (ISMS) by the end of 2026 together with the associated arrangements, assurance and risk management. To support ...

validate) Experience working in multi-supplier or SIAM environments Ability to interpret outputs from SOC and vulnerability tooling without direct ownership Desirable Familiarity with NIST CSF, NCSC or UK Government security guidance Experience in Defence sector or highly regulated environments Exposure to audit, assurance or ISMS processes ITIL alignment ...

judgment, and ability to work with senior stakeholders. Preferred qualifications Cyber legal experience. Familiarity with AI governance frameworks and risk management such as the NIST AI Risk Management Framework. Benefits Opportunities to innovate in fintech. Tools for personal and professional growth. Inclusive and diverse work environment. Resources to invest ...

successful candidate will lead security assessments, maturity reviews, regulatory readiness programmes, and strategic security transformation initiatives aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, DORA, NIS2, Cyber Essentials, and GDPR. They will confidently engage with C-level leaders, facilitate workshops and executive playbacks, develop high-quality proposals … and security transformation programmes. Comfortable operating across both business and technical stakeholder groups. Industry & Regulatory Knowledge – Strong understanding of: ISO 27001, 31000, 42001:2023 NIST Cybersecurity Framework (NIST CSF) 2.0 & NIST AI RMF CIS Controls Cyber Essentials & Cyber Essentials Plus DORA, NIS2, EU AI Act Requirements, GDPR Risk Management and ...

infrastructure security improvements. Experience with the following would be advantageous: Microsoft Intune. PowerShell scripting and automation. Azure cost optimisation, Reserved Instances and resource governance. NIST or ISO security frameworks. Microsoft technical certifications. The person Technical capability is only part of the picture. We're looking for someone who: Takes pride ...

communication protocols (e.g. A2A) Familiarity with MCPs for tool and context integration in agentic systems Familiarity with secure-by-design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open-source AI/ML projects Soft Skills Delivery-focused - you ship working ...

and operational documentation (e.g. operating models, runbooks, DR plans). Desirable Skills IAM/IGA platform certifications. Familiarity with security frameworks (e.g. ISO 27001, NIST, COBIT). Exposure to identity infrastructure (e.g. Active Directory), reporting tools (e.g. Power BI), or cloud integrations. Experience onboarding applications or cloud platforms into ...

growth for Microsoft‐first clients. You will engage with C‐level stakeholders, deliver security assessments, maturity reviews, and regulatory readiness programmes aligned to ISO, NIST, CIS, GDPR, and related frameworks. #J-18808-Ljbffr ...

Information Security Director We are seeking a highly skilled and experienced Director of Information Security to join our dynamic and growing team. As the Director of Information Security you will play a crucial role in ...

and recommending mitigations. Supporting security assurance and governance activities throughout the project lifecycle. Advising clients on security frameworks and regulatory standards including ISO 27001, NIST and GDPR. Producing security documentation, architecture artefacts and risk assessments. Working closely with architects, engineers, delivery teams and senior stakeholders. Researching emerging threats and helping … Single Sign-On (SSO). Privileged Access Management (PAM). Network Security. Cloud Security. Encryption technologies. Threat modelling. Security frameworks such as ISO 27001, NIST or equivalent. Strong communication and stakeholder management skills. Professional certifications such as CISSP, SABSA or similar are desirable but not essential. What's on Offer ...

security, or compliance Strong understanding of GRC principles Experience with Microsoft security tools (Sentinel, Defender, Entra) Familiarity with frameworks such as ISO 27001, NIST, Cyber Essentials Experience assessing third-party/vendor risk Excellent stakeholder management and communication skills Ability to translate security requirements into practical business outcomes What … contact for the outsourced SOC and coordinate security alerts, incidents, and remediation. Support governance, risk, and compliance activities, including ISO 27001, Cyber Essentials Plus, NIST, and CIS. Develop and maintain security policies, risk assessments, and compliance documentation. Lead third-party risk management, including vendor assessments, supplier risk tracking, and secure ...

Design and implement AI governance frameworks, operating models, policies, and controls. Support clients in navigating emerging AI regulations and standards, including theEU AI Act, NIST AI RMF, and ISO 42001. Conduct AI risk assessments, model governance reviews, and responsible AI evaluations. Facilitate governance workshops and engage with senior stakeholders across … Model Governance projects within a consulting environment. Strong understanding of AI governance frameworks and regulatory requirements. Experience with standards such as: EU AI Act NIST AI Risk Management Framework ISO/IEC 42001 ISO/IEC 23894 OECD AI Principles Experience conducting AI risk or algorithmic impact assessments. Knowledge of ...

assessments, and advisory outputs. - Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials. Required Skills: - Experience within cyber security consulting, security auditing, or risk advisory roles. - Experience in delivering client-facing cyber … risk advisory services. - Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR. - Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. - Experience planning and delivering engagements independently and as part ...