1 to 25 of 188 NIST Jobs in England

lifecycle Ensure alignment with Security by Design principles, frameworks, and organisational security policies Assess compliance against relevant standards and regulatory requirements, including ISO 44001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN, JSPs, and other applicable frameworks Collaborate with development, engineering, and security teams to embed security … such as defence, aerospace, government, critical infrastructure, or enterprise IT. Strong knowledge and practical application of IT assurance frameworks and standards, including: ISO 144001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN and JPS. Proven experience implementing and assuring Security by Design across the full technology lifecycle. ...

policies, and best practices Oversee day-to-day security operations (SIEM, EDR, incident response, vulnerability management) Ensure compliance with frameworks such as ISO 27001, NIST, CIS Controls and GDPR Manage risk assessments, remediation planning, and continuous improvement initiatives Secure cloud and hybrid environments ( Azure/AWS ) Act as the escalation ...

manage multiple priorities effectively. Desirable Experience within banking, financial services, or another regulated environment. Familiarity with industry standards and frameworks such as ISO 27001, NIST, COBIT, or CIS Controls. Exposure to vulnerability management, penetration testing, incident management, or third-party risk assessments. Relevant security certifications such as Security+ ...

information security, technology risk, or related disciplines within financial services sector.Experienced in IT security and control policy with specific experience of FFEIC, SOX, COBIT, NIST, CRI Profile and ISO standards.Conversant in the security & risk trends across banking and other industries.Experienced with the Defence in Depth approachStrong track record of managing ...

point security tools and data loss prevention controls are highly advantageous Skills and experience Experience working within recognised information security frameworks (e.g. ISO27001, NIST) Proven experience in an information security role, preferably within financial services or e-commerce Strong analytical capability, with the ability to interpret data and support decision ...

and the wider estate are sufficiently tested for signs of vulnerability. Governance, Risk & Compliance (GRC) Ensure audit readiness, control effectiveness (key SOX/ITGC, NIST/ISO mappings), and remediation governance; lead policy lifecycle and attestations. Oversee the enterprise risk process (RCSA, KRIs), executive reporting, and board risk briefings. Improve ...

client engagementCybersecurity capability (strong experience across some of these areas):Cybersecurity strategy and operating model designCyber risk management, governance and compliance (e.g. ISO 27001, NIST, NIS2, GDPR)Security architecture and secure‐by‐design principles in cloud and hybrid environmentsIdentity and access management, security operations or cyber controls engineeringCyber resilience, incident ...

drive cyber security governance, risk management, and compliance activities across the organisation. Maintain and enhance security controls aligned to recognised frameworks including ISO 27001, NIST Cybersecurity Framework, CIS Controls, and other relevant standards. Manage security incidents, major cyber events, and crisis response activities. Build strong relationships with internal stakeholders, ensuring ...

leading consulting teams. Strong knowledge of governance, risk management and cyber security best practice. Experience delivering projects aligned to frameworks including ISO 27001, NIST CSF, CIS Controls and Cyber Essentials. Ability to conduct and oversee security maturity assessments, risk assessments and compliance programmes. Excellent client-facing communication skills with ...

technical cyber role working across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect ...

ingestion strategies, detection engineering and security posture management. Strong working knowledge of Zero Trust architecture and the application of recognised security frameworks such as NIST CSF, ISO 27001, PCI DSS, DORA, MITRE ATT&CK and CSA guidance. Demonstrable experience operating within a Partner delivery model, including customer‐facing consultancy, reference ...

tests, scanning). Experience delivering security awareness and incident exercising programmes. Working knowledge of assurance frameworks and resilience expectations (e.g., ISO 27001, SOC 2, NIST CSF. Candidates should be strongly motivated by BII’s development mission and ideally demonstrate some commitment to development or social goals through previous executive ...

Will Bring Proven experience leading Information Security within a regulated financial services environment. Strong understanding of industry recognised frameworks such as ISO 27001, NIST, and CIS. Experience leading Security Operations, cyber incident response, governance, and risk management activities. Strong technical understanding of cloud security, identity and access management, enterprise infrastructure ...

Security 8. Continuous Improvement & Awareness Experience: Holder of relevant CyberSecurity Certifications e.g. CISM, CCSP or CISSP Strong knowledge of security frameworks (e.g., ISO 27001, NIST, CIS Controls) Understanding of cloud security principles (Azure, AWS, or GCP) Familiarity with the concepts, standards and tools involved in controlling identity and access management ...

Desirable Degree in Information Security or significant programme security experience Certifications: CISSP, CISM, CRISC, CGRC (any) Knowledge of Government Standard 007, ISO 27001 and NIST Strong written/oral/presentation skills Supply chain security management experience/knowledge Experience supporting security awareness/education programmes Problem management and/ ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

Qualifications & Certifications CISSP, CISM, GIAC, GCIH, GCIA, or equivalent security certifications. Experience within regulated or critical service environments. Knowledge of security frameworks such as NIST CSF, ISO 27001, CIS Controls, or MITRE ATT&CK. Experience managing third-party SOC or security service providers. ...

Microsoft security technologies (Azure, Entra ID, Conditional Access, PIM, Defender, Microsoft 365 security stack) Strong understanding of security governance, risk, and compliance frameworks including NIST and FAIR Experience delivering security architecture within multi-year transformation programmes Strong stakeholder management and executive communication skills If you're looking to join ...

guidance and training on governance, risk and compliance matters. Comprehensive knowledge of recognised Technology GRC frameworks, standards and methodologies, including COBIT, ITIL, ISO 27001, NIST and GDPR. Highly developed influencing, negotiation and stakeholder management skills, with the ability to build credibility, drive engagement and inspire positive change. Excellent analytical, problem ...

Relevant professional qualifications (e.g., CISA, CISM, CISSP or other) and/or relevant graduate degree. Working knowledge of cyber security frameworks or standards (e.g., NIST, CIS, ISO). Financial services industry knowledge (highly valued). Understanding of Cyber Kill Chain, MITRE ATT&CK framework, and threat modelling concepts. Programme/ ...

more of the following: Cyber Governance, Risk & Compliance (GRC) Delivering security consulting engagements Implementing or assessing controls against recognised frameworks including: ISO 27001 NIST NIS NCSC Cyber Assessment Framework (CAF) DORA TISAX IEC 62443 Conducting cyber risk assessments and governance reviews Developing security policies, standards and procedures Building business cases ...

Cyber Essentials Plus, IASME Governance, GDPR and relevant information security standards or best practice frameworks Knowledge of additional frameworks such as CAF, NIS-2, NIST Cybersecurity Framework, CIS Controls, SOC 2, ISO 22301, ISO 27701 or PCI DSS. ExperienceusingGRC,auditmanagement,riskregisterorreporting tools. HoldSC/DVclearanceorwillingnesstoundertakesecurity vetting. MemberofCiSPoranotherrelevantprofessional community. Willingnesstostudyforandattainfurtherrelated qualifications. ...

solutions and standards is highly advantageous Competence, knowledge and skills Competence Experience working within recognised Information Security frameworks and best practices such as ISO27001, NIST etc. 5 years experience in an Information Security role gained in a financial services or e-commerce environment is preferred Knowledge & Skills Significant experience ...

and operationalised risk and control frameworks for the secure, responsible adoption of AI. Deep knowledge of security frameworks and security best practice (ISO 27001, NIST, OWASP, CIS). Strong command of security risk management, governance, and incident response. Cloud security expertise (Azure preferred), network security, and identity and access management ...