1 to 25 of 255 NIST Jobs in England

Security Monitoring and Incident Response Data Protection and Encryption Zero Trust principles Knowledge of security frameworks and standards such as ISO 27001 NIST CSF CIS Controls NCSC Guidance Secure by Design principles Qualifications & Certification Desirable Certifications CISSP CISM SABSA CCSP TOGAF Microsoft Security, Compliance, and Identity Fundamentals(SC-900) Strategic ...

programme, including the ISMS, policy framework, risk registers, and audit readiness Implement and maintain compliance with ISO 27001, SOC 1, SOC 2, NIST CSF, GDPR, and relevant financial services regulations Understand the GRC landscape, implement appropriate controls, and adapt as the threat and regulatory environment shifts Own execution of ...

. Understanding of cryptography, encryption and security protocols. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge of compliance frameworks (ISO 27001, NIST CSF, etc.). Personal Attributes Exceptional strategic thinking combined with strong technical depth. Outstanding communication and stakeholder engagement skills. Strong problem-solving and analytical capabilities. ...

vulnerability reviews, and compliance audits against corporate and government security standards. Support risk treatment planning and remediation activities. Ensure alignment with NCSC, MoD, JSP, NIST, and Lockheed Martin security policies and standards where applicable. Support incident response investigations affecting classified systems. Assist with vulnerability management, patch management, and security monitoring ...

lifecycle Ensure alignment with Security by Design principles, frameworks, and organisational security policies Assess compliance against relevant standards and regulatory requirements, including ISO 44001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN, JSPs, and other applicable frameworks Collaborate with development, engineering, and security teams to embed security … such as defence, aerospace, government, critical infrastructure, or enterprise IT. Strong knowledge and practical application of IT assurance frameworks and standards, including: ISO 144001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN and JPS. Proven experience implementing and assuring Security by Design across the full technology lifecycle. ...

and SOAR platforms. Experience with Microsoft Sentinel, Microsoft Defender XDR, Splunk or similar enterprise security tooling. Strong understanding of security frameworks including ISO 27001, NIST CSF, Cyber Essentials Plus and NIS2. Excellent stakeholder management and communication skills with the ability to engage both technical and senior business audiences. Experience driving ...

and Access Governance PAM Solutions SIEM and Security Monitoring Vulnerability Management Data Protection Security Compliance Programmes Familiarity with security frameworks and standards such as: NIST ISO 27001 CIS Controls Cyber Essentials Regulatory requirements within Financial Services Technical Knowledge Good understanding of: Microsoft Azure AWS Active Directory/Entra ID Security ...

security, technology risk, or related disciplines within financial services sector.* Experienced in IT security and control policy with specific experience of FFEIC, SOX, COBIT, NIST, CRI Profile and ISO standards.* Conversant in the security & risk trends across banking and other industries.* Experienced with the Defence in Depth approach* Strong track ...

manage multiple priorities effectively. Desirable Experience within banking, financial services, or another regulated environment. Familiarity with industry standards and frameworks such as ISO 27001, NIST, COBIT, or CIS Controls. Exposure to vulnerability management, penetration testing, incident management, or third-party risk assessments. Relevant security certifications such as Security+ ...

secure access solutions. Lead network patching, firmware upgrades, vulnerability remediation, and security hardening activities. Ensure compliance with industry standards and frameworks, including ISO 27001, NIST, CIS Benchmarks, and PCI‐DSS. Partner with Cyber Security teams to identify risks, strengthen controls, and enhance enterprise security posture. Performance, Reliability & Automation Monitor, troubleshoot ...

and the wider estate are sufficiently tested for signs of vulnerability. Governance, Risk & Compliance (GRC) Ensure audit readiness, control effectiveness (key SOX/ITGC, NIST/ISO mappings), and remediation governance; lead policy lifecycle and attestations. Oversee the enterprise risk process (RCSA, KRIs), executive reporting, and board risk briefings. Improve ...

and the wider estate are sufficiently tested for signs of vulnerability. Governance, Risk & Compliance (GRC) Ensure audit readiness, control effectiveness (key SOX/ITGC, NIST/ISO mappings), and remediation governance; lead policy lifecycle and attestations. Oversee the enterprise risk process (RCSA, KRIs), executive reporting, and board risk briefings. Improve ...

client engagementCybersecurity capability (strong experience across some of these areas):Cybersecurity strategy and operating model designCyber risk management, governance and compliance (e.g. ISO 27001, NIST, NIS2, GDPR)Security architecture and secure‐by‐design principles in cloud and hybrid environmentsIdentity and access management, security operations or cyber controls engineeringCyber resilience, incident ...

experience with automation and scripting (e.g. PowerShell, Python) highly desirable. Competence Experience working within recognised Information Security frameworks and best practices such as ISO27001, NIST, MITRE ATT&CK. Knowledge of relevant regulatory requirements (e.g. GDPR, FCA/PRA). Experience in an Information Security role gained in a financial services ...

leading consulting teams. Strong knowledge of governance, risk management and cyber security best practice. Experience delivering projects aligned to frameworks including ISO 27001, NIST CSF, CIS Controls and Cyber Essentials. Ability to conduct and oversee security maturity assessments, risk assessments and compliance programmes. Excellent client-facing communication skills with ...

of AWS and GCP IAM security models. In-depth knowledge of cloud infrastructure including VPC, EC2, S3, Cloud Storage and Compute Engine. Familiarity with NIST, ISO 27001 and CSA STAR compliance frameworks. Experience engaging with Information Security, Risk, Control & Compliance, Architecture and Project teams. Demonstrated expertise in Threat Modelling methodologies ...

technical cyber role working across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect ...

managed identities * Proven Fabric security design experience - OneLake, workspace security, Fabric roles, and Purview integration * Strong knowledge of GDPR, UK DPA, ISO 27001, and NIST compliance frameworks * Security design for distributed data platforms - Data Fabric, medallion architecture * DevSecOps experience embedding security into CI/CD pipelines and IaC (ARM, Bicep ...

ingestion strategies, detection engineering and security posture management. Strong working knowledge of Zero Trust architecture and the application of recognised security frameworks such as NIST CSF, ISO 27001, PCI DSS, DORA, MITRE ATT&CK and CSA guidance. Demonstrable experience operating within a Partner delivery model, including customer‐facing consultancy, reference ...

Will Bring Proven experience leading Information Security within a regulated financial services environment. Strong understanding of industry recognised frameworks such as ISO 27001, NIST, and CIS. Experience leading Security Operations, cyber incident response, governance, and risk management activities. Strong technical understanding of cloud security, identity and access management, enterprise infrastructure ...

cloud and hybrid architectures, threat modelling, identity and access management, networking and cryptography. Risk and compliance: Experience applying governance, risk and compliance frameworks (ISO27001, NIST, NCSC) and translating the CIA triad into practical controls. Communication and leadership: Able to articulate complex security concepts to stakeholders and influence decisions collaborate across ...

threat modeling, secure design reviews, and engineering‐focused risk assessments Familiarity with industry standards and frameworks such as ISO 27001, SOC 2, OWASP, and NIST CSF Experience supporting digital product teams or client‐facing technology delivery units; knowledge of privacy and data protection regulations (e.g., GDPR, CCPA); and relevant professional ...

Security 8. Continuous Improvement & Awareness Experience: Holder of relevant CyberSecurity Certifications e.g. CISM, CCSP or CISSP Strong knowledge of security frameworks (e.g., ISO 27001, NIST, CIS Controls) Understanding of cloud security principles (Azure, AWS, or GCP) Familiarity with the concepts, standards and tools involved in controlling identity and access management ...

experience securing Microsoft 365 services (e.g. SharePoint, Teams, Copilot). Evidenced knowledge and understanding of security frameworks, standards and best practices (CAF, Cyber Essentials, NIST, ISO27001). Proven familiarity with modern network, cloud and identity security concepts such as authentication, firewalls, endpoint protection, email security, vulnerability management, logging, monitoring and ...

Desirable Degree in Information Security or significant programme security experience Certifications: CISSP, CISM, CRISC, CGRC (any) Knowledge of Government Standard 007, ISO 27001 and NIST Strong written/oral/presentation skills Supply chain security management experience/knowledge Experience supporting security awareness/education programmes Problem management and/ ...