4 of 4 NIST Jobs in the East Midlands

Knowledge Strong understanding of: Security legislation and regulatory requirements, including GDPR, PCI DSS and related compliance frameworks. Security frameworks and standards including ISO 27001, NIST Cyber Security Framework and CIS Controls v8. UK Government and NCSC security policies, guidance and best practices. Cloud security architecture, particularly AWS services such ...

and the wider estate are sufficiently tested for signs of vulnerability. Governance, Risk & Compliance (GRC) Ensure audit readiness, control effectiveness (key SOX/ITGC, NIST/ISO mappings), and remediation governance; lead policy lifecycle and attestations. Oversee the enterprise risk process (RCSA, KRIs), executive reporting, and board risk briefings. Improve ...

and vulnerability assessment, security governance and risk acceptance is important. Experience with frameworks such as ISO 27001, ISO 27005, the NCSC Cyber Assessment Framework, NIST or MOD security standards would be beneficial. Experience within defence, government, critical infrastructure or another high-assurance environment would be particularly relevant. Experience with cloud ...

and non-technical colleagues. Experience working with external security providers, vulnerability management platforms, and SaaS security. Knowledge of frameworks such as ISO 27001 or NIST CSF, along with relevant professional certifications As a Cyber Security Engineer, you will be responsible for maintaining and enhancing security controls across identity, endpoint, cloud ...