151 to 175 of 724 NIST Jobs in England

role Essential: Experience designing and assuring secure solutions across Azure, on-premise and hybrid environments. Strong knowledge of industry frameworks such as NCSC guidance, NIST CSF/800-53, ISO 27001/2 or SABSA. Understanding of identity & access management, network security, encryption, API security and secrets management. Experience with ...

into business-friendly language. Certification in PMP, PRINCE2, Agile/Scrum, CISSP, CISM, or similar, along with familiarity with global security frameworks (ISO 27001, NIST CSF, SOC2). Excellent communication and stakeholder management skills, with the composure to handle escalations and shifting priorities without losing structure or momentum. Situational Requirements ...

industries. Desirable experience includes: hybrid and multi‐cloud estates such as Azure and AWS alongside a substantial on‐premises footprint; HPC and scientific computing; NIST CSF and Secure by Design; FinOps and run‐cost modelling; large‐scale workplace transformation across Microsoft 365, Windows, device lifecycle, identity and access; and certification ...

industries. Desirable experience includes hybrid and multi‐cloud estates such as Azure and AWS alongside a substantial on‐premises footprint; HPC and scientific computing; NIST CSF and Secure by Design; FinOps and run‐cost modelling; large‐scale workplace transformation across Microsoft 365, Windows, device lifecycle, identity and access; and certification ...

governance frameworks, policies, controls, and operating models. Experience interpreting and applying AI-related regulations, standards, and guidance, such as the EU AI Act, NIST AI Risk Management Framework (AI RMF), ISO/IEC 42001, ISO/IEC 23894, OECD AI Principles, and emerging regulatory requirements. Experience conducting AI risk assessments ...

risk reporting. Experience creating and implementing cyber policies, standards, frameworks and governance processes. Knowledge of recognised security and risk frameworks such as ISO 27001, NIST, NCSC CAF, Government Security Standards, or equivalent. The ability to communicate complex cyber risks clearly to both technical and non-technical audiences. A proactive, delivery ...

skills and experience Experience within healthcare, NHS, or other highly regulated environments. Knowledge of cloud security architecture and hybrid environments. Familiarity with ISO 27001, NIST, CIS Controls, Government Security Principles, and similar frameworks. Experience supporting digital transformation and cloud migration programmes. Relevant certifications such as CISSP, CCSP, SABSA, TOGAF ...

skills and experience Experience within healthcare, NHS, or other highly regulated environments. Knowledge of cloud security architecture and hybrid environments. Familiarity with ISO 27001, NIST, CIS Controls, Government Security Principles, and similar frameworks. Experience supporting digital transformation and cloud migration programmes. Relevant certifications such as CISSP, CCSP, SABSA, TOGAF ...

with internal stakeholders to align technical initiatives with business goals. Security Oversight: Ensure compliance with security standards and frameworks (e.g., Microsoft best practice, CIS, NIST). Oversee vulnerability management in terms of patching and incident response. Work closely with SOC teams to remediate and maintain a secure client environment. Automation ...

architectures, including cloud, identity, endpoint and Zero Trust security, together with a sound understanding of recognised frameworks and guidance such as ISO 27001, the NIST Cybersecurity Framework, the Cyber Assessment Framework and NCSC guidance. You will be able to develop technical roadmaps, standards and architectural patterns, assess complex technical risks ...

including contemporary Microsoft solutions, networking and/or applications. (E) Awareness of recognised cyber security standards, frameworks and best practices, including CES+, CIS Controls, NIST, NCSC guidance, ISO 27001 and ISO 42001. (D) ITIL awareness is essential, foundation or higher certification highly desirable. (D) Experience of investigation and remediation of ...

systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth understanding ...

systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth understanding ...

security considerations within contested and degraded operational environments. Knowledge and/or experience of best practice cyber security industry frameworks and standards, such as NIST, CAF and ISO27001. Knowledge of defence security policies and frameworks such as Defence ones JSP 440 (Defence Manual of Security); JSP 604 (Defence Cyber Security ...

Security guidance on cloud application design, implementation, and ongoing management. Experience in ensuring compliance with industry standards and regulations related to cloud security (e.g., NIST, ISO 27001, PCI-DSS, GDPR). Experience working with cross-functional teams and collaborating with development engineers, Cyber Security specialists, and other internal stakeholders ...

resolving challenges. Support the continuous improvement of the control testing programme through automation and innovation. Stay informed on relevant frameworks and best practices, including NIST CSF and CIS Controls, to enhance automation and monitoring capabilities. Base location Hybrid - Clearwater Court, Reading. Working pattern 36 hours Monday to Friday. What ...

designing, implementing, and securing cloud environments, with a strong emphasis on Microsoft Azure services. Strong understanding of regulatory compliance requirements (e.g. GDPR, ISO 27001, NIST) and experience implementing security controls to meet those requirements. In-depth knowledge of cloud security best practices, network security, identity and access management, encryption, and ...

strong grounding in information and cyber security risk management. Working knowledge of the NCSC CAF and of security controls frameworks such as ISO 27001, NIST or Cyber Essentials. Experience in a 2LoD or assurance function, including governance, oversight and challenge. The confidence to operate autonomously, set direction and build ...

Understanding of cyber risk management, operational resilience, business continuity, disaster recovery, and incident response principles. Knowledge of common security and risk frameworks such as NIST, ISO 27001, COBIT, CIS Controls, and FFIEC guidance. Familiarity with financial services regulatory requirements relating to technology risk and resilience. Experience conducting risk assessments, control ...

looking for: • Strong background in cybersecurity consulting, advisory or programme delivery • Experience leading complex projects and managing senior stakeholders • Strong understanding of frameworks including NIST, ISO 27001, CAF and NIS • Expertise in one or more areas such as OT Security, Security Operations, IAM, Cyber Strategy or Risk • Experience within Energy ...

execute security test cases alongside engineering teams Contribute to the rollout and assurance of secure solutions Assess organisations against relevant frameworks and standards including NIST, Cyber Assurance Framework (CAF), Cyber Essentials (CE), and Secure by Design (SbD) Provide security assurance activities aligned to JSP440 and JSP604/453 Support security ...

customers. Mentoring and educating internal teams on SOC operations, threat landscapes, and analyst workflows. Ensuring product features align with industry frameworks (MITRE ATT&CK, NIST, ISO 27001) and SOC maturity models. Act as a trusted SOC and cyber defence expert in customer meetings, workshops, and solution design sessions. Support ...

hybrid working environment (London-based presence expected). Flexibility to undertake limited travel (c. 10–15%) where required. Technology Domain Knowledge Cybersecurity (e.g. NIST, ISO 27001) Cloud environments (e.g. AWS, Azure, GCP) IT general controls and application controls Data governance and data quality frameworks Third-party/outsourcing risk Data ...

limited. + Understanding of sector-specific systems, risks, and regulatory expectations.* **Technology Domain Knowledge** + Strong knowledge across key domains such as: - Cybersecurity (e.g. NIST, ISO 27001) - Cloud environments (e.g. AWS, Azure, GCP) - IT general controls and application controls - Data governance and data quality frameworks - Third-party/outsourcing risk ...

Risk Management (Security Scorecard). SIEM tools (Microsoft Sentinel, Splunk, ELK, Siemplify). Vulnerability Management (Qualys, Nessus, Nexpose). Cyber Security certifications (e.g., CompTIA, NIST, ISO27000, SOC2, GDPR). What do we offer Hybrid working. 25 days annual leave plus a half day for a “Duvet morning” and another ...