1 to 25 of 55 NIST Jobs in Central London

and reducing risk. WHAT YOU'LL BRING: Strong experience in a cyber security, information security, or security operations role. Good understanding of: ISO 27001 NIST Cyber Security Framework Cyber Essentials Plus Risk Management Methodologies Experience investigating security incidents. Knowledge of Microsoft 365 security technologies. Understanding of networking, operating systems, cloud ...

cause analysis, tabletop exercises and crisis response testing to drive continuous improvement. Working knowledge of UK security and compliance frameworks, including PCI-DSS, GDPR, NIST, ISO 27001 and Cyber Essentials. Additional Information BeneFITS' Employee discount (hello ASOS discount!) Employee sample sales 25 days paid annual leave + an extra celebration ...

and Access Transparency, relevant to deploying per-market for different banks' regulators Hands‐on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2, ISO 27001 and ...

maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001/27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF. Develop and maintain information security policies, standards and procedures, ensuring organisational compliance. Define, coordinate and assess the implementation of specific security controls ...

secure solution architecture across complex, multi-supplier and/or classified programmes. Strong knowledge of NCSC guidance, Secure by Design, Cyber Assessment Framework (CAF), NIST and ISO 27001 . Experience applying risk-driven security architecture methodologies to complex systems and environments. Strong understanding of security requirements, threat modelling, risk assessment ...

understanding of security principles, design patterns, and defense-in-depth strategies. Knowledge of Standards: Strong knowledge of relevant security standards and frameworks such as NIST, ISO 27001, MITRE ATT&CK, SOC2 and OWASP. Communication Skills: Ability to articulate technical risks and architectural decisions to both technical and non-technical audiences. ...

and effective security solutions. Advise clients on security risk, regulatory compliance and risk mitigation strategies. Apply recognised security frameworks and standards, including ISO 27001, NIST, GDPR and PCI-DSS. Identify vulnerabilities and weaknesses within system and solution architectures. Assess security risks and communicate findings clearly to both technical and ...

Target operating Model and Cyber Security Strategy Governance, Regulatory & Compliance Oversee cyber security policies, standards, and control frameworks aligned with ISO 27001, SOC, DORA, NIST, and other related standard and frameworks and financial services best practices Ensure compliance with global regulatory requirements (e.g., GDPR, DORA, KSA, UAE, MASA, FCA, CSSF ...

looking for: • Strong background in cybersecurity consulting, advisory or programme delivery • Experience leading complex projects and managing senior stakeholders • Strong understanding of frameworks including NIST, ISO 27001, CAF and NIS • Expertise in one or more areas such as OT Security, Security Operations, IAM, Cyber Strategy or Risk • Experience within Energy ...

hybrid working environment (London-based presence expected). Flexibility to undertake limited travel (c. 10–15%) where required. Technology Domain Knowledge Cybersecurity (e.g. NIST, ISO 27001) Cloud environments (e.g. AWS, Azure, GCP) IT general controls and application controls Data governance and data quality frameworks Third-party/outsourcing risk Data ...

vendor accreditations will be advantageous. Independent and relevant certifications (such as CISSP, CISM, CCSP or equivalent) are advantageous. Knowledge of industry frameworks such as NIST, ISO 27001, DORA, governance and regulatory compliance is desirable but not essential. Strong communication and stakeholder management skills, with the ability to work collaboratively across ...

cybersecurity strategies across enterprise and operational domains. Experience in threat detection, and incident response. Knowledge of regulatory requirements and governance frameworks (e.g., ISO 27001, NIST). Budgeting & Resource Allocation Strong financial management skills, including budgeting, forecasting, and cost optimisation. Experience managing multi-million-pound technology budgets and maximising ROI. Innovation ...

with experience across sectors such as energy, transportation, telecommunications, water, or social infrastructure. A deep understanding of cyber security frameworks, regulations, and governance , including NIST CSF, IEC 62443, NIS2, KRITIS, NERC, and other relevant standards. Experience working across both IT and Operational Technology (OT) environments , with a strong appreciation of ...

consulting, advisory or transformation delivery experience. Experience working with Energy, Utilities, Resources, Manufacturing or Critical National Infrastructure organisations. Strong understanding of frameworks such as NIST, ISO 27001, NIS or CAF. Expertise across one or more areas including OT Security, Security Operations, IAM, Cyber Strategy or Risk Management. Ability to manage ...

years of hands‐on experience as a Devops or Platform engineer Excellent understanding of networking andA WS cloud. Knowledge of security frameworks (ISO 27001, NIST) applied in practice. Experience with DevOps tooling, automation, and secure system design. Certifications such as CISSP, CISM, CCSP, or cloud security certifications are desirable. Desirable ...

of industrial protocols such as: Modbus DNP3 OPC-UA Profinet EtherNet/IP Experience with OT cyber security frameworks and standards including: IEC 62443 NIST NIS2 ISO 27001 Experience working within highly regulated environments. Desirable Skills Cloud connectivity within OT environments (Azure or AWS). Industrial IoT (IIoT) technologies. Experience ...

certifications (SC‐100, SC‐200, SC‐401, etc.). Industry‐recognised certifications such as CISSP, CCSP, CISM, GIAC, etc. Familiarity with compliance frameworks – GDPR, NIST AI RMF, ISO27001, SOC2, etc. Ability to build organisational culture, drive employee engagement, strengthen inclusion and diversity, reduce attrition, and attract top talent. Growth mindset ...

and recommending improvements Design and implement robust cybersecurity solutions tailored to IC environments Develop ICSSecurity control frameworks incorporating industry best practices and international standards (NIST, ISO 27001, IEC 62443) Create key deliverables including threat and risk assessments, security policies, procedures, assurance management plans, and compliance evidence Team Development & Growth Mentor ...

common industry cybersecurity frameworks, standards, and methodologies, including OWASP, ISO2700x series, PCI DSS, GLBA, Global data security and privacy acts, FFIEC guidelines, CIS, and NIST standards advantageous. Skills sre site reliability azure devops bash scripting Powershell Python C# Java SQL Terraform Azure IAM Azure AD Entra ID azure databricks PowerBi ...

thinking, we redefine GRC and IT strategies, empowering organisations to shine. From wielding cyber-superpowers to mastering security frameworks like ISO 27001:2013 and NIST, we’re certified wizards ready to chart a course to success, strengthen defenses, and turn challenges into opportunities to excel. So whether our customers ...

and privileged access management. Experience with threat modelling methodologies such as STRIDE, PASTA, or equivalent. Knowledge of security frameworks and standards including: - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - CIS Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including ...

Desirable Skills: Experience with modern identity and security approaches (e.g. Zero Trust, adaptive authentication, API security) Familiarity with frameworks and standards (e.g. ISO 27001, NIST, COBIT) Experience integrating CIAM platforms into wider enterprise environments Exposure to cloud platforms, APIs, or directory services (e.g. Active Directory) Strong stakeholder management skills and ...

Operator (TCO) as the preferred baseline Desirable experience includes Tanium Certified Administrator (TCA), Tanium Cloud, PowerShell, REST APIs, SCCM migrations, ServiceNow integration, CIS/NIST/DISA STIG frameworks, Microsoft Intune/Defender/Entra ID and Linux. If you’re looking for a role where you can combine hands ...

weaknesses are not reintroduced. Implementing the remediation and hardening work identified through the incident, where clients engage us to deliver it. Working to the NIST Cyber Security Framework and incident response lifecycle, with CIS Benchmarks used for technical control recommendations. Security assessment and hardening Performing security reviews and configuration hardening … review, management plane exposure, VPN and remote access configuration, IPS/IDS posture, logging, and firmware currency. Assessing cloud configuration against CIS Benchmarks and NIST using tooling including Prowler, ScubaGear and PingCastle, and turning technical findings into prioritised, business-contextualised remediation plans. Reviewing third‐party software, cloud applications and SaaS ...

thinking, we redefine GRC and IT strategies, empowering organisations to shine. From wielding cyber-superpowers to mastering security frameworks like ISO 27001:2013 and NIST, we're certified wizards ready to chart a course to success, strengthen defenses, and turn challenges into opportunities to excel. So whether our customers ...