23 of 23 NIST Jobs in the City of London

programme, including the ISMS, policy framework, risk registers, and audit readiness Implement and maintain compliance with ISO 27001, SOC 1, SOC 2, NIST CSF, GDPR, and relevant financial services regulations Understand the GRC landscape, implement appropriate controls, and adapt as the threat and regulatory environment shifts Own execution of ...

and SOAR platforms. Experience with Microsoft Sentinel, Microsoft Defender XDR, Splunk or similar enterprise security tooling. Strong understanding of security frameworks including ISO 27001, NIST CSF, Cyber Essentials Plus and NIS2. Excellent stakeholder management and communication skills with the ability to engage both technical and senior business audiences. Experience driving ...

level within complex organisations. Key Skills & Experience Proven experience developing and delivering cyber security strategies Strong understanding of security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls, encryption technologies) Knowledge of cloud ...

leading consulting teams. Strong knowledge of governance, risk management and cyber security best practice. Experience delivering projects aligned to frameworks including ISO 27001, NIST CSF, CIS Controls and Cyber Essentials. Ability to conduct and oversee security maturity assessments, risk assessments and compliance programmes. Excellent client-facing communication skills with ...

MLSecOps platforms Background in machine learning engineering or data science Experience with AI governance and responsible AI frameworks Knowledge of AI-specific security standards (NIST AI RMF, ISO/IEC 42001) Experience in regulated industries (finance, healthcare, government) Contributions to open-source security or AI security projects Speaking/publishing ...

good practice. Key Responsibilities Compliance and Risk Management: Support compliance with applicable regulatory, IT, cyber and control frameworks, which may include DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials. Support the evaluation and management of IT, cyber, compliance and security risks across systems, processes and operations. Monitor emerging technology ...

transformation programmes Provide security consultancy into complex IT and digital initiatives Advise clients on cyber risk, governance and regulatory compliance frameworks including: ISO 27001 NIST GDPR PCI-DSS Conduct threat modelling and identify security vulnerabilities within solution designs Recommend pragmatic risk mitigation strategies to technical and non-technical stakeholders Support ...

Senior Information Security Analyst - Audit & Compliance ISO27001, SOC2, PCI-DSS, NIST, GDPR London (Barbican). Hybrid. 2 days a week onsite. Up to £100k plus 8% bonus, pension, private medical etc We're working with a global technology partner to find a certified Information Security Analyst. This is a fantastic ...

programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve challenging security problems through research ...

certifications (SC‐100, SC‐200, SC‐401, etc.). Industry‐recognised certifications such as CISSP, CCSP, CISM, GIAC, etc. Familiarity with compliance frameworks – GDPR, NIST AI RMF, ISO27001, SOC2, etc. Ability to build organisational culture, drive employee engagement, strengthen inclusion and diversity, reduce attrition, and attract top talent. Growth mindset ...

product goals. Preferred Qualifications: Previous experience within the identity management, verification, or adjacent industries. Familiarity with global regulations around identity verification (e.g., eIDAS, NIST, AML/KYC compliance). Fluency in Spanish language is preferred Please note this is a hybrid role with 3 days in our London office ...

Information Security role. Experience working with Microsoft security technologies. Strong understanding of cyber security principles, governance and best practice. Security frameworks including ISO 27001, NIST and Cyber Essentials. Apply now to speak with VIQU IT in confidence. Or reach out to Noah Yeoman via the VIQU Website. Do you know ...

judgment, and ability to work with senior stakeholders. Preferred qualifications Cyber legal experience. Familiarity with AI governance frameworks and risk management such as the NIST AI Risk Management Framework. Benefits Opportunities to innovate in fintech. Tools for personal and professional growth. Inclusive and diverse work environment. Resources to invest ...

client's TARA tooling), or the ability to get up to speed quickly. Working knowledge of standards such as ISO/IEC 27001, NIST, OWASP, IEC 62443, ISO/SAE 21434, UNECE R155 & R156, TISAX, Cyber Essentials and the EU Cyber Resilience Act. Nice to have: Delivery experience against ...

successful candidate will lead security assessments, maturity reviews, regulatory readiness programmes, and strategic security transformation initiatives aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, DORA, NIS2, Cyber Essentials, and GDPR. They will confidently engage with C-level leaders, facilitate workshops and executive playbacks, develop high-quality proposals … and security transformation programmes. Comfortable operating across both business and technical stakeholder groups. Industry & Regulatory Knowledge – Strong understanding of: ISO 27001, 31000, 42001:2023 NIST Cybersecurity Framework (NIST CSF) 2.0 & NIST AI RMF CIS Controls Cyber Essentials & Cyber Essentials Plus DORA, NIS2, EU AI Act Requirements, GDPR Risk Management and ...

infrastructure security improvements. Experience with the following would be advantageous: Microsoft Intune. PowerShell scripting and automation. Azure cost optimisation, Reserved Instances and resource governance. NIST or ISO security frameworks. Microsoft technical certifications. The person Technical capability is only part of the picture. We're looking for someone who: Takes pride ...

and operational documentation (e.g. operating models, runbooks, DR plans). Desirable Skills IAM/IGA platform certifications. Familiarity with security frameworks (e.g. ISO 27001, NIST, COBIT). Exposure to identity infrastructure (e.g. Active Directory), reporting tools (e.g. Power BI), or cloud integrations. Experience onboarding applications or cloud platforms into ...

growth for Microsoft‐first clients. You will engage with C‐level stakeholders, deliver security assessments, maturity reviews, and regulatory readiness programmes aligned to ISO, NIST, CIS, GDPR, and related frameworks. #J-18808-Ljbffr ...

and recommending mitigations. Supporting security assurance and governance activities throughout the project lifecycle. Advising clients on security frameworks and regulatory standards including ISO 27001, NIST and GDPR. Producing security documentation, architecture artefacts and risk assessments. Working closely with architects, engineers, delivery teams and senior stakeholders. Researching emerging threats and helping … Single Sign-On (SSO). Privileged Access Management (PAM). Network Security. Cloud Security. Encryption technologies. Threat modelling. Security frameworks such as ISO 27001, NIST or equivalent. Strong communication and stakeholder management skills. Professional certifications such as CISSP, SABSA or similar are desirable but not essential. What's on Offer ...

and progress is evidenced for monthly reporting. Deliver secure configuration and compliance reporting across the estate, supporting a measurable uplift in security maturity against NIST CSF. Security Operations and Incident Response: Act as the second cyber escalation point within the 24/7 security operating model, providing technical investigation, containment … across Azure and AWS, including cloud security posture management (Wiz or equivalent). Demonstrable delivery of security maturity uplift against recognised frameworks such as NIST CSF and CIS Benchmarks, evidenced through measurable posture improvement. Experience onboarding or managing an outsourced SOC or managed security service, including operational handover and improvement ...

security, or compliance Strong understanding of GRC principles Experience with Microsoft security tools (Sentinel, Defender, Entra) Familiarity with frameworks such as ISO 27001, NIST, Cyber Essentials Experience assessing third-party/vendor risk Excellent stakeholder management and communication skills Ability to translate security requirements into practical business outcomes What … contact for the outsourced SOC and coordinate security alerts, incidents, and remediation. Support governance, risk, and compliance activities, including ISO 27001, Cyber Essentials Plus, NIST, and CIS. Develop and maintain security policies, risk assessments, and compliance documentation. Lead third-party risk management, including vendor assessments, supplier risk tracking, and secure ...

company platform to document, measure, and report assessments, risks, controls, findings, and remediation activity Knowledge and Experience Experience in Cybersecurity Framework (such as NIST, COBIT) Experience with Systems Administration and/or IP Networking is a plus Experience with Regulatory Compliance Experience in an exchange, trading facility, or financial services … experience Specific Technologies: Excel, Workflow automation tools, Data collection, normalization, indexing, correlation, and visualization Scripting, regular expressions, string-parsing, light SDLC, and project management NIST Cyber Security Framework, CIS, and GRC Platforms #J-18808-Ljbffr ...

assessments, and advisory outputs. - Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials. Required Skills: - Experience within cyber security consulting, security auditing, or risk advisory roles. - Experience in delivering client-facing cyber … risk advisory services. - Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR. - Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. - Experience planning and delivering engagements independently and as part ...