1 to 25 of 762 NIST Jobs in England

security, infrastructure security, network architecture, data protection and identity and access management. Experience with threat modelling methodologies and security frameworks such as SABSA, TOGAF, NIST Cybersecurity Framework, ISO 27001 or CIS Controls. Knowledge of secure software development, DevSecOps, vulnerability management and security testing practices. Experience assessing third-party suppliers, technology ...

capabilities, including DLP, CASB, Email Security, SWG, ZTNA, SASE, automation and AI-driven security solutions.* Working knowledge of recognised security frameworks and standards, including NIST, ISO 27001/27002 and CIS Controls.* Understanding of regulatory and compliance requirements, including UK GDPR and experience supporting governance, audit and assurance activities.* CISSP ...

1. TechnicalDelivery(OT Cyber Security) Perform OT risk assessments, threat modelling, and vulnerability assessments. Assess and/or assure compliance withtheNIS Regulations, NCSC CAF, NIST CSF, IEC 62443, ISO 27001, and sector-specific guidance. Develop security measures and designs to deliver security improvements Provideexpert guidance oncommon OT cyber security challenges ...

vulnerability remediation reporting. Experience with trust portal platforms (ServiceNow, Whistic, Vanta Trust, Drata Trust). Familiarity with AI/ML security and emerging frameworks (NIST AI RMF, ISO 42001). Previous leadership or line management experience. Integrity and discretion when handling sensitive customer and government information. Resilience and adaptability ...

organisations. Expertise across application security, infrastructure security, cloud security, and information governance. Experience delivering and maintaining frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF, or similar. Strong knowledge of vulnerability management, security operations, incident response, and vendor risk management. Experience engaging with executive leadership and boards on security ...

organisations. Expertise across application security, infrastructure security, cloud security, and information governance. Experience delivering and maintaining frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF, or similar. Strong knowledge of vulnerability management, security operations, incident response, and vendor risk management. Experience engaging with executive leadership and boards on security ...

chain risk, and frameworks such as the OWASP Top 10 for LLM Applications and MITRE ATLAS. Familiarity with regulatory frameworks and industry standards (e.g., NIST, CIS, etc.). Strong analytical and problem-solving skills. Excellent communication and collaboration abilities. Prefer certifications such as GIAC, CISSP, etc. Prefer Bachelor’s degree ...

controls with engineering velocity. Domain Knowledge & Soft Skills Professional experience within regulated financial services, fintech, or payment processing environments. Practical understanding of security frameworks (NIST CSF, ISO 27001, CIS benchmarks). Exceptional written and verbal communication in English, with the clarity to articulate nuanced risk concepts to cross-functional teams. ...

Python. Experience gained within a legal, financial services or similarly regulated organisation. Awareness of security frameworks and best practice including NCSC guidance, OWASP, NIST CSF, CIS Controls, ISO 27001, ISMS principles and GDPR. Experience with automation, security testing, forensic investigation activities, DLP monitoring, privileged access, key management or HSM infrastructure. ...

control environment meets regulatory expectations, supports operational resilience, and enables secure business growth. Champion & Ensure delivery against compliance requirements like the Apex Gold standard, NIST, DORA, SOC1 and SOC 2, ISO27001 and all relevant group controls. Liaising with key stakeholders, partners and group entities, internal and external. Key Responsibilities Technology ...

and traceability. Frameworks and Standards Working knowledge of some of the following: ISO/IEC 27001. ISO/IEC 27005. NCSC Cyber Assessment Framework. NIST Cybersecurity Framework. MOD Defence Standard 05-138. Government Security Classifications. Defence, government or critical national infrastructure experience. Experience within high‐assurance or regulated environments. ...

level within complex organisations. Key Skills & Experience Proven experience developing and delivering cyber security strategies Strong understanding of security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls, encryption technologies) Knowledge of cloud ...

senior level within complex organisations. Key Skills & ExperienceProven experience developing and delivering cyber security strategiesStrong understanding of security frameworks such as ISO 27001, NIST, Cyber EssentialsExpertise in risk management, vulnerability assessment, and incident responseExperience with enterprise security tools (e.g. SIEM, IDS, firewalls, encryption technologies)Knowledge of cloud and hybrid security ...

intrusion detection systems, encryption etc. Standards & Frameworks Experience of MOD security standards and principles (e.g., JSP440, JSP453, Secure by Design), and industry frameworks (e.g., NIST Cyber Security Framework, ISO 27001). Professional certifications such as CISSP, CISM, or NCSC Certified Cyber Professional (CCP) [desirable]. Our Culture Our values stand ...

remediation. Knowledge of SIEM technologies and security monitoring. Vulnerability management experience and familiarity with related tooling. Understanding of security frameworks and standards such as NIST, ISO 27001, Cyber Essentials or NIS2. Experience supporting audits, compliance and governance activities. Strong analytical and problem-solving skills. Excellent communication skills with the ability ...

professional development through mentoring, structured career pathways and industry-recognised certifications including: CISSP CISMP CREST Certifications ISO 27001 Lead Implementer/Auditor SABSA TOGAF NIST Programmes UK Cyber Security Council Professional Registration Each consultant is supported by a dedicated Mentor and Performance & Development Manager to help achieve individual career goals. ...

security consultants and architects Working with clients and deliver teams to build government security standards and processes such as ISO27001 standards, CEF, Cyber Essentials, NIST & Cyber Essentials Plus into service and project delivery Performing Security Risk Management of services, projects and client operations. Designing, Building, maintaining and operating ISMS Managing ...

CCSE/CCSM, Cisco CCNP/CCIE Security, Fortinet certifications, CISSP, CISM, Microsoft AZ-500 or AWS Certified Security - Specialty. Familiarity with ISO 27001, NIST Cybersecurity Framework, CIS Controls, GDPR and Cyber Essentials Plus. What You'll Bring You will be a technically strong and proactive security engineer ...

regulated financial services or fintech environment. Strong understanding of external threats, vulnerability/patch management, and penetration testing methodologies. Familiarity with frameworks such as NIST, ISO 27001, MITRE ATT&CK, CIS, etc. Knowledge of current cyber threat landscape and trends. Excellent analytical, communication, and stakeholder management skills. Certifications such ...

often well suited due to the breadth of technical exposure and security focus these environments can provide. Desirable Experience Knowledge of security frameworks including NIST, MITRE ATT&CK and ISO 27001. Experience leading, mentoring or influencing technical teams. Professional certifications such as CISSP, CISM or equivalent. Experience securing cloud and ...

and cyber threat intelligence processes. Security certifications such as CISSP, CISM, CompTIA Security+, GICSP, CEH, or ISO 27001 Lead Implementer/Auditor. Knowledge of NIST 2.0 CSF or NCSC guidance for Security of IT Systems. Experience working in or supporting nuclear, energy, or manufacturing environments. Familiarity with Active Directory hardening ...

defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors. Familiarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards. Experience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations, or large-scale enterprise ...

DevOps systems. Experience supporting secure customer or defence‐related projects. Familiarity with UK defence‐sector cyber‐security and information‐handling requirements. Knowledge of the NIST Cybersecurity Framework or similar risk‐based cyber‐security frameworks. Experience implementing IT infrastructure within a start‐up or rapidly scaling technology business. Role specific knowledge ...

reviews.Strong analytical, troubleshooting and problem-solving skills.Ability to communicate effectively and influence both technical and non-technical stakeholders.Experience working with recognised frameworks such as NIST CSF, ISO 27001 or PCI DSS.DesirableProfessional certifications such as CISSPExperience with Zero Trust security architectures.Experience with CNAPP, CSPM or cloud security platforms.Experience with AI security ...

reviews, security requirements management and pragmatic risk treatment in fast-moving projects You have experience working with security control standards and frameworks e.g. ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others You have demonstrable continuous personal development, supported by relevant certifications and accreditations You have good interpersonal ...