1 to 25 of 814 NIST Jobs in England

vulnerability reviews, and compliance audits against corporate and government security standards. Support risk treatment planning and remediation activities. Ensure alignment with NCSC, MoD, JSP, NIST, and Lockheed Martin security policies and standards where applicable. Support incident response investigations affecting classified systems. Assist with vulnerability management, patch management, and security monitoring ...

etc.) Understanding of cryptography, encryption and security protocols Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of compliance frameworks (ISO 27001, NIST CSF, etc.) Personal Attributes Exceptional strategic thinking combined with strong technical depth Outstanding communication and stakeholder engagement skills Strong problem-solving and analytical capabilities Proven ...

vulnerability remediation reporting. Experience with trust portal platforms (ServiceNow, Whistic, Vanta Trust, Drata Trust). Familiarity with AI/ML security and emerging frameworks (NIST AI RMF, ISO 42001). Previous leadership or line management experience. Integrity and discretion when handling sensitive customer and government information. Resilience and adaptability ...

services, covering ISMS management, risk management, and management reporting. Working knowledge of information security and data protection frameworks and regulation, including ISO 27001:2022, NIST CSF, UK GDPR, and awareness of FCA/PRA and payment scheme expectations. Sound understanding of the cyber threat landscape, threat intelligence, vulnerability management and ...

firewalls, etc.)Understanding of cryptography, encryption and security protocolsFamiliarity with MOD security requirements, Classification Guides and defence standardsKnowledge of compliance frameworks (ISO 27001, NIST CSF, etc.)Personal AttributesExceptional strategic thinking combined with strong technical depthOutstanding communication and stakeholder engagement skillsStrong problem-solving and analytical capabilitiesProven ability to lead technical teams ...

and reducing risk. WHAT YOU'LL BRING: Strong experience in a cyber security, information security, or security operations role. Good understanding of: ISO 27001 NIST Cyber Security Framework Cyber Essentials Plus Risk Management Methodologies Experience investigating security incidents. Knowledge of Microsoft 365 security technologies. Understanding of networking, operating systems, cloud ...

client-facing consultancy experience with executive stakeholder engagement. DesirableManaged Services, SOC integration, AI security, DevSecOps, and multi-cloud security experience. Knowledge of ISO 27001, NIST, NIS2, Cyber Essentials, GDPR, DORA, and FCA/PRA frameworks. Relevant certifications such as CISSP, CCSP, CISM ...

client-facing consultancy experience with executive stakeholder engagement. DesirableManaged Services, SOC integration, AI security, DevSecOps, and multi-cloud security experience. Knowledge of ISO 27001, NIST, NIS2, Cyber Essentials, GDPR, DORA, and FCA/PRA frameworks. Relevant certifications such as CISSP, CCSP, CISM ...

CloudTrail. Experience working with an external SOC, MSSP or security service provider. Exposure to PCI DSS, SOX, GDPR, ISO 27001, CIS or NIST environments. Qualifications & Certifications A degree in Cyber Security, Computer Science, Information Technology or a related discipline is advantageous but not essential where equivalent practical experience ...

modelling, risk assessment and security governance. DevSecOps, Infrastructure as Code or security automation. Designing secure, resilient and auditable services. Security frameworks including ISO 27001, NIST, CIS Controls, Cyber Essentials Plus and NCSC guidance. Relevant certifications such as CISSP, CCSP, CISM, Microsoft Security, AWS Security or TOGAF are desirable, although strong ...

Endpoint Administrator) MS-102 (Microsoft 365 Administrator Expert) AZ-104 (Azure Administrator) AZ-305 (Azure Solutions Architect) CISSP Knowledge of security standards like CIS, NIST, PCI DSS, GDPR and Cyber Essentials Understanding compliance and regulatory requirements related to data security Experience delivering Microsoft focused pre-sales discovery engagements with customers ...

Python. Desirable Experience gained within a legal, financial services or similarly regulated organisation. Awareness of security frameworks and best practice including NCSC guidance, OWASP, NIST CSF, CIS Controls, ISO 27001, ISMS principles and GDPR. Experience with automation, security testing, forensic investigation activities, DLP monitoring, privileged access, key management ...

control environment meets regulatory expectations, supports operational resilience, and enables secure business growth. Champion & Ensure delivery against compliance requirements like the Apex Gold standard, NIST, DORA, SOC1 and SOC 2, ISO27001 and all relevant group controls. Liaising with key stakeholders, partners and group entities, internal and external. Key Responsibilities Technology ...

and traceability. Frameworks and Standards Working knowledge of some of the following: ISO/IEC 27001. ISO/IEC 27005. NCSC Cyber Assessment Framework. NIST Cybersecurity Framework. MOD Defence Standard 05-138. Government Security Classifications. Defence, government or critical national infrastructure experience. Experience within high‐assurance or regulated environments. ...

Compliance & Certifications: Own end‐to‐end audit readiness for enterprise and defense frameworks, including SOC 2 Type II, ISO 27001, Cyber Essentials Plus, and NIST 800‐53. Partner with Product & Engineering: Embed DevSecOps and secure SDLC practices into our CI/CD pipelines; oversee pentesting, red teaming, and threat modeling ...

reducing material cyber and technology risk. Own the Information Security Management System and support continued alignment with ISO/IEC 27001:2022, the NIST Cybersecurity Framework and other recognised standards. Maintain effective security policies, standards and controls, ensuring they are understood, embraced, evidenced and continuously improved. Support compliance with ...

intrusion detection systems, encryption etc. Standards & Frameworks Experience of MOD security standards and principles (e.g., JSP440, JSP453, Secure by Design), and industry frameworks (e.g., NIST Cyber Security Framework, ISO 27001). Professional certifications such as CISSP, CISM, or NCSC Certified Cyber Professional (CCP) [desirable]. Our Culture Our values stand ...

intrusion detection systems, encryption etc. Standards & Frameworks: Experience of MOD security standards and principles (e.g., JSP440, JSP453, Secure by Design), and industry frameworks (e.g., NIST Cyber Security Framework, ISO 27001). Professional certifications such as CISSP, CISM, or NCSC Certified Cyber Professional (CCP) desirable . Our Culture: Our values stand ...

decisions — and the independence to hold a security position under delivery pressure. Nice to have skills Familiarity with AI security and governance frameworks including NIST AI RMF, the OWASP Top 10 for LLM applications, MITRE ATLAS, ISO/IEC 42001, and the security provisions of the EU AI Act. ...

/Entra ID and cloud security principles. Experience working with vulnerability management programmes. Knowledge of security frameworks and standards including: - ISO/IEC 27001 - NIST Cyber Security Framework CIS Controls Familiarity with risk assessment methodologies and security governance practices. Experience with security tooling such as SIEM, EDR/XDR, vulnerability ...

professional development through mentoring, structured career pathways and industry-recognised certifications including: CISSP CISMP CREST Certifications ISO 27001 Lead Implementer/Auditor SABSA TOGAF NIST Programmes UK Cyber Security Council Professional Registration Each consultant is supported by a dedicated Mentor and Performance & Development Manager to help achieve individual career goals. ...

professional development through mentoring, structured career pathways and industry-recognised certifications including: CISSP CISMP CREST Certifications ISO 27001 Lead Implementer/Auditor SABSA TOGAF NIST Programmes UK Cyber Security Council Professional Registration Each consultant is supported by a dedicated Mentor and Performance & Development Manager to help achieve individual career goals. ...

Management with a background delivering on Cyber Security projects to external clients. Strong understanding of cyber security frameworks and standards such as ISO 27001, NIST, CIS Controls, and Cyber Essentials. Experience delivering consultancy engagements directly to clients. Knowledge of risk assessment methodologies and security maturity reviews. Excellent stakeholder management and ...

Microsoft Copilot, developer assistance tools, and LLM-integrated applications and workflows. Familiarity with AI security frameworks and standards including OWASP LLM Top 10 and NIST AI RMF, and working awareness of EU AI Act obligations relevant to enterprise AI governance and security. Experience engaging with governance committees, risk review boards ...

security best practices. Experience working within aerospace, manufacturing, defence, or other highly regulated environments. Knowledge of cybersecurity frameworks such as Cyber Essentials Plus, CMMC, NIST, ISO 27001, or similar. Experience with security technologies such as EDR/XDR, SIEM, Privileged Access Management, Vulnerability Management, Cloud Security, and Endpoint Protection. Excellent ...