1 to 25 of 198 NIST Jobs in England

lifecycle Ensure alignment with Security by Design principles, frameworks, and organisational security policies Assess compliance against relevant standards and regulatory requirements, including ISO 44001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN, JSPs, and other applicable frameworks Collaborate with development, engineering, and security teams to embed security … such as defence, aerospace, government, critical infrastructure, or enterprise IT. Strong knowledge and practical application of IT assurance frameworks and standards, including: ISO 144001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN and JPS. Proven experience implementing and assuring Security by Design across the full technology lifecycle. ...

strong MOD stakeholder exposure. Experience with Sparx Enterprise Architect, ArchiMate, NAFv4 or similar modelling approaches. Knowledge of Joint Service Publications, NCSC guidance, ISO27001, NIST, CIS or related security frameworks. Experience across IAM, PKI, secure integration, cloud security, data flows and security architecture patterns. Experience reviewing HLDs, LLDs, current-state and ...

policies, and best practices Oversee day-to-day security operations (SIEM, EDR, incident response, vulnerability management) Ensure compliance with frameworks such as ISO 27001, NIST, CIS Controls and GDPR Manage risk assessments, remediation planning, and continuous improvement initiatives Secure cloud and hybrid environments ( Azure/AWS ) Act as the escalation ...

governance forums such as Audit, Risk, or Information Security Committees. Knowledge & Skills Deep knowledge of cyber security governance frameworks – ISO/IEC 27001:2022, NIST CSF 2.0, CIS Controls – and their practical application in complex enterprise environments. Familiarity with continuous controls monitoring/CAASM tooling (e.g. Axonius, Qualys) and ...

level within complex organisations. Key Skills & Experience Proven experience developing and delivering cyber security strategies Strong understanding of security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls, encryption technologies) Knowledge of cloud ...

manage multiple priorities effectively. Desirable Experience within banking, financial services, or another regulated environment. Familiarity with industry standards and frameworks such as ISO 27001, NIST, COBIT, or CIS Controls. Exposure to vulnerability management, penetration testing, incident management, or third-party risk assessments. Relevant security certifications such as Security+ ...

point security tools and data loss prevention controls are highly advantageous Skills and experience Experience working within recognised information security frameworks (e.g. ISO27001, NIST) Proven experience in an information security role, preferably within financial services or e-commerce Strong analytical capability, with the ability to interpret data and support decision ...

Understanding of network security technologies such as proxies, DLP and endpoint controls Skills and experience Experience working within recognised information security frameworks (e.g. ISO27001, NIST) Proven experience in an information security role, ideally within financial services or a regulated environment Strong analytical skills with the ability to interpret data and ...

control environment meets regulatory expectations, supports operational resilience, and enables secure business growth. Champion & Ensure delivery against compliance requirements like the Apex Gold standard, NIST, DORA, SOC1 and SOC 2, ISO27001 and all relevant group controls. Liaising with key stakeholders, partners and group entities, internal and external. Key Responsibilities Technology ...

secure access solutions. Lead network patching, firmware upgrades, vulnerability remediation, and security hardening activities. Ensure compliance with industry standards and frameworks, including ISO 27001, NIST, CIS Benchmarks, and PCI-DSS. Partner with Cyber Security teams to identify risks, strengthen controls, and enhance enterprise security posture. Performance, Reliability & Automation Monitor, troubleshoot ...

programmes or secure cloud transformation initiatives. Familiarity with NCSC guidance and secure-by-design principles. Knowledge of security frameworks including JSP 440, JSP 604, NIST, ISO27001, or Cyber Assessment Framework (CAF). Relevant certifications such as CISSP, CCSP, GCIH, GCIA, Security+, or similar. We are looking to have someone ...

and the wider estate are sufficiently tested for signs of vulnerability. Governance, Risk & Compliance (GRC) Ensure audit readiness, control effectiveness (key SOX/ITGC, NIST/ISO mappings), and remediation governance; lead policy lifecycle and attestations. Oversee the enterprise risk process (RCSA, KRIs), executive reporting, and board risk briefings. Improve ...

drive cyber security governance, risk management, and compliance activities across the organisation. Maintain and enhance security controls aligned to recognised frameworks including ISO 27001, NIST Cybersecurity Framework, CIS Controls, and other relevant standards. Manage security incidents, major cyber events, and crisis response activities. Build strong relationships with internal stakeholders, ensuring ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

Support security cases, risk treatment plans and accreditation-style documentation. Review vulnerability assessment, penetration test and supplier assurance outputs. Support alignment with ISO 27001, NIST, CAF, GovAssure, Secure by Design and HMG/MOD assurance expectations. Requirements Strong background in Security Architecture, Cyber Security Consultancy, Security Assurance or Secure Design. ...

tests, scanning). Experience delivering security awareness and incident exercising programmes. Working knowledge of assurance frameworks and resilience expectations (e.g., ISO 27001, SOC 2, NIST CSF. Candidates should be strongly motivated by BII’s development mission and ideally demonstrate some commitment to development or social goals through previous executive ...

Security 8. Continuous Improvement & Awareness Experience: Holder of relevant CyberSecurity Certifications e.g. CISM, CCSP or CISSP Strong knowledge of security frameworks (e.g., ISO 27001, NIST, CIS Controls) Understanding of cloud security principles (Azure, AWS, or GCP) Familiarity with the concepts, standards and tools involved in controlling identity and access management ...

secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure to contemporary architectures. E.g. ...

Desirable Degree in Information Security or significant programme security experience Certifications: CISSP, CISM, CRISC, CGRC (any) Knowledge of Government Standard 007, ISO 27001 and NIST Strong written/oral/presentation skills Supply chain security management experience/knowledge Experience supporting security awareness/education programmes Problem management and/ ...

secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure to contemporary architectures. E.g. ...

Qualifications & Certifications CISSP, CISM, GIAC, GCIH, GCIA, or equivalent security certifications. Experience within regulated or critical service environments. Knowledge of security frameworks such as NIST CSF, ISO 27001, CIS Controls, or MITRE ATT&CK. Experience managing third-party SOC or security service providers. ...

methodologies. Knowledge of enterprise IT systems, applications, security practices, security controls and architectures. Familiarity with recognised cyber security frameworks and standards (e.g., ISO 27000, NIST, NIS2, CIS), including their application in audit and risk assessment contexts. Desirable but not essential, familiarity with EASA Part-IS regulation and associated requirements. Ability ...

Microsoft security technologies (Azure, Entra ID, Conditional Access, PIM, Defender, Microsoft 365 security stack) Strong understanding of security governance, risk, and compliance frameworks including NIST and FAIR Experience delivering security architecture within multi-year transformation programmes Strong stakeholder management and executive communication skills If you're looking to join ...