1 to 25 of 239 NIST Jobs in England

Security Operations & Incident Response Identity & Access Management (IAM) Data Protection & Privacy Controls Enterprise Security Architecture Frameworks Familiarity with: NCSC Cloud Security Principles ISO 27001 NIST Cybersecurity Framework CIS Controls OWASP Technical Experience Cloud Platforms AWS Microsoft Azure Google Cloud Platform (GCP) Security Technologies Microsoft Defender Suite Splunk Microsoft Sentinel CrowdStrike ...

and structured vulnerability remediation reporting.Experience with trust portal platforms (ServiceNow, Whistic, Vanta Trust, Drata Trust).Familiarity with AI/ML security and emerging frameworks (NIST AI RMF, ISO 42001).Previous leadership or line management experience.Integrity and discretion when handling sensitive customer and government information.Resilience and adaptability in dynamic, high-pressure ...

etc.) Understanding of cryptography, encryption and security protocols Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of compliance frameworks (ISO 27001, NIST CSF, etc.) Personal Attributes Exceptional strategic thinking combined with strong technical depth Outstanding communication and stakeholder engagement skills Strong problem-solving and analytical capabilities Proven ...

Experience with SIEM platforms, incident response and threat detection Strong understanding of vulnerability management and security remediation Experience working with recognised security frameworks including: NIST ISO 27001 CIS Controls Cyber Essentials Knowledge of MITRE ATT&CK, Cyber Kill Chain and modern threat intelligence methodologies Excellent analytical, troubleshooting and stakeholder management ...

Knowledge Strong understanding of: Security legislation and regulatory requirements, including GDPR, PCI DSS and related compliance frameworks. Security frameworks and standards including ISO 27001, NIST Cyber Security Framework and CIS Controls v8. UK Government and NCSC security policies, guidance and best practices. Cloud security architecture, particularly AWS services such ...

. Understanding of cryptography, encryption and security protocols. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge of compliance frameworks (ISO 27001, NIST CSF, etc.). Personal Attributes Exceptional strategic thinking combined with strong technical depth. Outstanding communication and stakeholder engagement skills. Strong problem-solving and analytical capabilities. ...

. Understanding of cryptography, encryption and security protocols. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge of compliance frameworks (ISO 27001, NIST CSF, etc.). Personal Attributes Exceptional strategic thinking combined with strong technical depth. Outstanding communication and stakeholder engagement skills. Strong problem-solving and analytical capabilities. ...

endpoint securityImplement guardrails and monitoring solutions for generative AI usage.6. Governance, Compliance & StandardsEstablish AI security standards, policies, and guidelines aligned to frameworks such as:NIST AI Risk Management FrameworkISO/IEC 27001, 23894Support regulatory compliance and audits related to AI security.7. Collaboration & AdvisoryPartner with data scientists, ML engineers, DevOps, and ...

experience in an Information Security or Cyber Security role within a corporate environmentStrong working knowledge of information security frameworks and standards (e.g. ISO 27001, NIST Cyber Security Framework)Experience in conducting risk assessments and implementing effective security controlsHands-on experience in incident response, investigation, and resolutionExperience supporting internal and external ...

and advanced threat intelligence systems. Proven track record of leading incident response in high-security environments. Familiarity with defence-specific compliance frameworks (MOD JSPs, NIST SP 800 series, ITAR, GDPR). Excellent leadership, stakeholder management, and ability to operate under pressure. Degree in Cyber Security, Computer Science, or related field. ...

sector, government, defence, or highly regulated environments. Knowledge of Zero Trust security principles. Experience with cloud-native security tooling and security automation. Familiarity with NIST, ISO 27001, CIS Controls, or similar security frameworks. Experience supporting DevSecOps and secure software delivery practices. Relevant cloud and security certifications such as: CISSP CCSP ...

infrastructure environments. Exposure to vulnerability management and threat hunting activities. Experience supporting government, defence, or public sector programmes. Familiarity with security frameworks such as NIST, ISO 27001, or CIS Controls. Consulting or client-facing experience. Key Competencies Cybersecurity Operations Cyber Threat Intelligence Threat Modelling Security Monitoring Risk Analysis Incident Investigation ...

secure access solutions. Lead network patching, firmware upgrades, vulnerability remediation, and security hardening activities. Ensure compliance with industry standards and frameworks, including ISO 27001, NIST, CIS Benchmarks, and PCI-DSS. Partner with Cyber Security teams to identify risks, strengthen controls, and enhance enterprise security posture. Performance, Reliability & Automation Monitor, troubleshoot ...

information security, or enterprise risk management roles. Strong understanding of cyber risk management principles and methodologies. Experience working with recognised frameworks and standards, including: NIST Cybersecurity Framework (CSF) NCSC Cyber Assessment Framework (CAF) ISO/IEC 27001 and ISO/IEC 27005 CIS Critical Security Controls COBIT Experience analysing risk ...

Management (BCM) Disaster Recovery Planning Operational Resilience Risk Management Frameworks Internal Audit Activities Control Assessments Process Improvement Programmes Familiarity with: ISO 27001 ISO 22301 NIST Cybersecurity Framework Cyber Assessment Framework (CAF) ITIL Governance, Risk and Compliance (GRC) tools Preferred Certifications The following certifications would be advantageous but are not essential ...

technical cyber role working across public sector/government agencies . Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure ...

and the wider estate are sufficiently tested for signs of vulnerability. Governance, Risk & Compliance (GRC) Ensure audit readiness, control effectiveness (key SOX/ITGC, NIST/ISO mappings), and remediation governance; lead policy lifecycle and attestations. Oversee the enterprise risk process (RCSA, KRIs), executive reporting, and board risk briefings. Improve ...

observability, and cloud operating models. Zero Trust & Cybersecurity Architecture Lead Zero Trust transformation strategies across enterprise and operational technology environments.Develop security architectures aligned to NIST, IEC 62443, CIS, and industry compliance requirements.Collaborate with security teams to implement:Identity & Access Management (IAM)Privileged Access Management (PAM)Secure Access Service Edge (SASE ...

Security initiatives within complex environments. Understanding of Security Architecture Design and secure-by-design principles. Familiarity with cyber frameworks such as MITRE ATT&CK, NIST, or Cyber Kill Chain. Experience producing intelligence reports and presenting findings to stakeholders. Strong analytical and problem-solving abilities. Excellent written and verbal communication skills. ...

leading consulting teams. Strong knowledge of governance, risk management and cyber security best practice. Experience delivering projects aligned to frameworks including ISO 27001, NIST CSF, CIS Controls and Cyber Essentials. Ability to conduct and oversee security maturity assessments, risk assessments and compliance programmes. Excellent client-facing communication skills with ...

workflows using Logic Apps or similar technologies.Knowledge of cloud security principles across Azure and ideally AWS or Google Cloud.Familiarity with industry frameworks such as NIST and ISO 27001.Personal AttributesWe are particularly interested in individuals who demonstrate:Calmness under pressureStrong ownership and accountabilityExcellent communication and stakeholder management skillsCommercial awareness alongside technical ...

technical cyber role working across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect ...

defence infrastructure projects, or government contractors . Knowledge of JSP 440, DEFCON 76, Secure by Design, Cyber Essentials Plus, ISO 27001, and NIST frameworks . Key Attributes We're looking for someone who demonstrates: Integrity, professionalism, and discretion. Strong risk awareness and sound judgement. Excellent analytical and problem-solving skills. ...

systems, endpoint tools, and SIEM monitoring platforms. Framework Knowledge: Strong working familiarity with trust service criteria, information security risk models (such as ISO 27001, NIST, or CIS benchmarks), and third-party risk principles. Competencies: Strong project ownership, excellent cross-functional communication skills, analytical rigor, and the ability to translate technical ...

security requirements. Key Responsibilities Zero Trust Strategy & Architecture Define and deliver enterprise-wide Zero Trust strategies and roadmaps Design Zero Trust architectures aligned to NIST 800-207 principles Implement identity-first security models across users, devices, applications and data Develop continuous verification and adaptive access control frameworks Lead micro-segmentation … regulated sectors Experience leading security transformation and modernisation initiatives Technical Knowledge Deep expertise in Zero Trust Architecture principles and implementation methodologies Strong knowledge of NIST 800-207 and modern security architecture frameworks Expert understanding of Identity & Access Management technologies Experience with Microsoft Entra ID, Conditional Access, PIM and PAM solutions ...