1 to 25 of 253 NIST Jobs in England

Experience with SIEM platforms, incident response and threat detection Strong understanding of vulnerability management and security remediation Experience working with recognised security frameworks including: NIST ISO 27001 CIS Controls Cyber Essentials Knowledge of MITRE ATT&CK, Cyber Kill Chain and modern threat intelligence methodologies Excellent analytical, troubleshooting and stakeholder management ...

programme, including the ISMS, policy framework, risk registers, and audit readiness Implement and maintain compliance with ISO 27001, SOC 1, SOC 2, NIST CSF, GDPR, and relevant financial services regulations Understand the GRC landscape, implement appropriate controls, and adapt as the threat and regulatory environment shifts Own execution of ...

. Understanding of cryptography, encryption and security protocols. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge of compliance frameworks (ISO 27001, NIST CSF, etc.). Personal Attributes Exceptional strategic thinking combined with strong technical depth. Outstanding communication and stakeholder engagement skills. Strong problem-solving and analytical capabilities. ...

Familiarity with GxP, GLP, GDPR, validated systems, data integrity, research collaborations or contractual partner obligations. Experience with recognised cybersecurity frameworks and standards such as NIST CSF, ISO 27001, Cyber Essentials Plus or equivalent. Relevant professional certifications such as CISSP, CISM, CCSP, ISO27001 Lead Implementer/Lead Auditor or equivalent. Conversational ...

vulnerability reviews, and compliance audits against corporate and government security standards. Support risk treatment planning and remediation activities. Ensure alignment with NCSC, MoD, JSP, NIST, and Lockheed Martin security policies and standards where applicable. Support incident response investigations affecting classified systems. Assist with vulnerability management, patch management, and security monitoring ...

lifecycle Ensure alignment with Security by Design principles, frameworks, and organisational security policies Assess compliance against relevant standards and regulatory requirements, including ISO 44001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN, JSPs, and other applicable frameworks Collaborate with development, engineering, and security teams to embed security … such as defence, aerospace, government, critical infrastructure, or enterprise IT. Strong knowledge and practical application of IT assurance frameworks and standards, including: ISO 144001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN and JPS. Proven experience implementing and assuring Security by Design across the full technology lifecycle. ...

and SOAR platforms. Experience with Microsoft Sentinel, Microsoft Defender XDR, Splunk or similar enterprise security tooling. Strong understanding of security frameworks including ISO 27001, NIST CSF, Cyber Essentials Plus and NIS2. Excellent stakeholder management and communication skills with the ability to engage both technical and senior business audiences. Experience driving ...

and Access Governance PAM Solutions SIEM and Security Monitoring Vulnerability Management Data Protection Security Compliance Programmes Familiarity with security frameworks and standards such as: NIST ISO 27001 CIS Controls Cyber Essentials Regulatory requirements within Financial Services Technical Knowledge Good understanding of: Microsoft Azure AWS Active Directory/Entra ID Security ...

security, technology risk, or related disciplines within financial services sector.* Experienced in IT security and control policy with specific experience of FFEIC, SOX, COBIT, NIST, CRI Profile and ISO standards.* Conversant in the security & risk trends across banking and other industries.* Experienced with the Defence in Depth approach* Strong track ...

manage multiple priorities effectively. Desirable Experience within banking, financial services, or another regulated environment. Familiarity with industry standards and frameworks such as ISO 27001, NIST, COBIT, or CIS Controls. Exposure to vulnerability management, penetration testing, incident management, or third-party risk assessments. Relevant security certifications such as Security+ ...

secure access solutions. Lead network patching, firmware upgrades, vulnerability remediation, and security hardening activities. Ensure compliance with industry standards and frameworks, including ISO 27001, NIST, CIS Benchmarks, and PCI‐DSS. Partner with Cyber Security teams to identify risks, strengthen controls, and enhance enterprise security posture. Performance, Reliability & Automation Monitor, troubleshoot ...

and the wider estate are sufficiently tested for signs of vulnerability. Governance, Risk & Compliance (GRC) Ensure audit readiness, control effectiveness (key SOX/ITGC, NIST/ISO mappings), and remediation governance; lead policy lifecycle and attestations. Oversee the enterprise risk process (RCSA, KRIs), executive reporting, and board risk briefings. Improve ...

client engagementCybersecurity capability (strong experience across some of these areas):Cybersecurity strategy and operating model designCyber risk management, governance and compliance (e.g. ISO 27001, NIST, NIS2, GDPR)Security architecture and secure‐by‐design principles in cloud and hybrid environmentsIdentity and access management, security operations or cyber controls engineeringCyber resilience, incident ...

leading consulting teams. Strong knowledge of governance, risk management and cyber security best practice. Experience delivering projects aligned to frameworks including ISO 27001, NIST CSF, CIS Controls and Cyber Essentials. Ability to conduct and oversee security maturity assessments, risk assessments and compliance programmes. Excellent client-facing communication skills with ...

of AWS and GCP IAM security models. In-depth knowledge of cloud infrastructure including VPC, EC2, S3, Cloud Storage and Compute Engine. Familiarity with NIST, ISO 27001 and CSA STAR compliance frameworks. Experience engaging with Information Security, Risk, Control & Compliance, Architecture and Project teams. Demonstrated expertise in Threat Modelling methodologies ...

technical cyber role working across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect ...

experience with automation and scripting (e.g. PowerShell, Python) highly desirable. Competence Experience working within recognised Information Security frameworks and best practices such as ISO27001, NIST, MITRE ATT&CK. Knowledge of relevant regulatory requirements (e.g. GDPR, FCA/PRA). Experience in an Information Security role gained in a financial services ...

ingestion strategies, detection engineering and security posture management. Strong working knowledge of Zero Trust architecture and the application of recognised security frameworks such as NIST CSF, ISO 27001, PCI DSS, DORA, MITRE ATT&CK and CSA guidance. Demonstrable experience operating within a Partner delivery model, including customer‐facing consultancy, reference ...

Experience developing, reviewing or managing cyber security policies, standards, procedures or governance frameworks. Strong knowledge of recognised cyber security frameworks such as ISO 27001, NIST, or the Cyber Assessment Framework (CAF). Experience supporting compliance, risk management, governance or information assurance programmes. Excellent stakeholder management and communication skills, with ...

threat modeling, secure design reviews, and engineering‐focused risk assessments Familiarity with industry standards and frameworks such as ISO 27001, SOC 2, OWASP, and NIST CSF Experience supporting digital product teams or client‐facing technology delivery units; knowledge of privacy and data protection regulations (e.g., GDPR, CCPA); and relevant professional ...

code and automated security controls Knowledge of Azure DevOps, GitHub, Azure Policy and CI/CD security practices Strong understanding of security frameworks including: NIST CIS ISO 27001 Experience with PowerShell, Azure CLI, Logic Apps or similar automation tools Excellent analytical, communication and stakeholder management skills Desirable Certifications Microsoft ...

good practice. KEY RESPONSIBILITIES Compliance and Risk Management: · Support compliance with applicable regulatory, IT, cyber and control frameworks, which may include DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials. · Support the evaluation and management of IT, cyber, compliance and security risks across systems, processes and operations. · Monitor emerging technology ...

Security 8. Continuous Improvement & Awareness Experience: Holder of relevant CyberSecurity Certifications e.g. CISM, CCSP or CISSP Strong knowledge of security frameworks (e.g., ISO 27001, NIST, CIS Controls) Understanding of cloud security principles (Azure, AWS, or GCP) Familiarity with the concepts, standards and tools involved in controlling identity and access management ...

experience securing Microsoft 365 services (e.g. SharePoint, Teams, Copilot). Evidenced knowledge and understanding of security frameworks, standards and best practices (CAF, Cyber Essentials, NIST, ISO27001). Proven familiarity with modern network, cloud and identity security concepts such as authentication, firewalls, endpoint protection, email security, vulnerability management, logging, monitoring and ...

Desirable Degree in Information Security or significant programme security experience Certifications: CISSP, CISM, CRISC, CGRC (any) Knowledge of Government Standard 007, ISO 27001 and NIST Strong written/oral/presentation skills Supply chain security management experience/knowledge Experience supporting security awareness/education programmes Problem management and/ ...