176 to 200 of 448 NIST Jobs in England

workloads, including prompt injection defence and data protection. Partner with AI Safety and Compliance teams to enforce standards aligned to OWASP GenAI, NIST AI RMF, and ISO/IEC 42001. Implement guardrails for model usage, data handling, and fairness/bias mitigation. Ensure full audit trails and traceability of ...

Five years’ experience in IT Risk Management, Cybersecurity, or other applicable information security disciplines.* Certification in or advanced knowledge of industry standards/regulations (NIST, ISO, PCI-DSS, GDPR, etc.) and identification and analysis of existing and emerging cyber threats.* Experience managing and or developing cyber, IT, ICS or Information ...

regulatory consultations and certification body interactions. What We're Looking For Proven, hands‐on experience with ISO 27001/27004/27005 and the NIST Risk Management Framework (RMF), applied to regulated hardware or embedded product programmes. Experience owning a security risk management system for highly regulated, safety‐critical products ...

across all AI workloads, including prompt injection defence and data protection.Partner with AI Safety and Compliance teams to enforce standards aligned to OWASP GenAI, NIST AI RMF, and ISO/IEC 42001.Implement guardrails for model usage, data handling, and fairness/bias mitigation.Ensure full audit trails and traceability of ...

where applicable) NCSC Cyber Security Design Principles and applicable NCSC guidance for secure configuration and cryptographic services MOD-aligned Secure by Design principles following NIST framework and MOD Security framework, and evidence-based assurance in support of accreditation Desirable: Experience working within the Defence and/or Aerospace sector, including ...

and privileged credential lifecycle management Experience with session isolation/recording and secure access controls Strong technical documentation and security architecture skills Knowledge of NIST, ISO 27001 or similar security frameworks Excellent stakeholder management and communication skills Experience of DevSecOps and secrets management would be advantageous If you'd like ...

command), from detection through containment and remediation. Working knowledge of MITRE ATT&CK and at least one recognised control framework (ISO 27001, CIS or NIST). Risk-based prioritisation of remediation using threat intelligence. Own the global prioritisation of the Endpoint, Platform and Incident Response backlog, ordered against the enterprise ...

substantial training leading to nationally recognised certifications, such as chartered or principal status with the UK Cyber Security Council, or certifications such as CompTIA, NIST, PCiIAA, CISMP, CISSP, CREST, ISO27001 Lead Implementer/Auditor, SABSA, and TOGAF. A Mentor will be on hand to provide support and guidance throughout your ...

their timeline, without breaking the systems that run their business. Lead architecture reviews, threat modelling sessions, and control gap assessments against frameworks like NIST, ISO 27001, and industry-specific regulation. Translate risk into a roadmap Turn assessment findings into a prioritised remediation plan the client's engineering teams can actually ...

years of hands‐on experience as a Devops or Platform engineer Excellent understanding of networking andA WS cloud. Knowledge of security frameworks (ISO 27001, NIST) applied in practice. Experience with DevOps tooling, automation, and secure system design. Certifications such as CISSP, CISM, CCSP, or cloud security certifications are desirable. Desirable ...

recognised methods such as STRIDE and MITRE ATT&CK for Industrial Control Systems, expressed as attack paths. Support the preliminary security risk assessment using NIST SP 800-30 and ISO/IEC 27005, and maintain entries in the design risk register. Capture security requirements and maintain the traceability thread from ...

and business‐critical reporting data. Experience in AI governance, responsible AI, AI risk management, or AI data access controls; familiarity with frameworks such as NIST AI Risk Management, ISO AI Management standards, or equivalent. Practical implementation of international data standardisation frameworks for harmonising definitions, taxonomies, and formats across regions. Experience ...

senior IT GRC leadership role (desirable). SAP/ERP, cloud (RISE), AI governance and major transformation experience (desirable). Familiarity with ISO 27001, NIST CSF and CIS Controls (desirable). Hard Skills Cyber Risk Management ITGCs Control Testing Vulnerability Management Patch Management Security Assurance Risk Frameworks Incident Response Transformation ...

fraud detection, digital banking security, and third-party/vendor risk management. Advise financial institutionsonregulatory compliance(e.g., FCA/PRA, - relevant regulations, , ISO 27001, NIST,CSF, Data Privacy regulation). Act as a thought leader, contributing to industry forums, white papers, and public discussions ondigital security, cyber risks, and operational ...

including JSP 453 - Defence Information Architecture. Familiarity with enterprise architecture frameworks (e.g. TOGAF, MODAF, UAF). Knowledge of data governance and security standards (e.g. NIST, ISO/IEC 27001). Our Culture Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people at the heart ...

including JSP 453 - Defence Information Architecture. Familiarity with enterprise architecture frameworks (e.g. TOGAF, MODAF, UAF). Knowledge of data governance and security standards (e.g. NIST, ISO/IEC 27001). Our Culture: Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people at the heart ...

principles and security frameworks, including identity governance, authentication/authorization models, least privilege, Zero Trust, modern MFA strategies, and alignment with frameworks such as NIST, CIS, ISO 27001, and Microsoft’s identity security baseline. Extensive experience with Joiner‐Mover‐Leaver (JML) lifecycle automation, preferably Workday‐driven, including identity provisioning, role ...

technology platforms (OneTrust, ServiceNow GRC, Archer, MetricStream, or similar). Familiarity with widely used GRC frameworks and standards (ISO 27001, ISO 27701, SOC 2, NIST CSF, COSO, or similar). Working knowledge of GDPR, the EU AI Act, and the wider regulatory landscape across the UK and EU. Exposure ...

and Event Grid Implement governance, RBAC, Azure AD, Conditional Access and security best practices Ensure solutions align with GDPR, ISO27001, Cyber Essentials and NIST frameworks Drive automation and CI/CD practices using Azure DevOps and GitHub Actions Produce high quality architecture documentation, technical specifications and solution diagrams Work collaboratively ...

experience in cyber incident response and cyber incident management.* An understanding of frameworks and standards, such as PCI, HIPAA, GDPR, CCPA, NERC CIP, ISO, NIST, etc.* Experience conducting cyber framework assessments or the ability to learn.* Technical hands-on experience with capturing and analyzing forensic images from different systems incuding ...

and influence outcomes in support of enterprise projects. You will be confident working across the major information security frameworks and standards, including ISO 27001, NIST and SOC 2, and able to shape risk, compliance and control decisions in a way that keeps both us and our clients secure without slowing ...

weaknesses, non-compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility of: Security risks, Compliance status ...

Security, System Hardening, Cryptographic Controls (PKI, Data at Rest/In Transit), Protective Monitoring, and Security Auditing. Strong understanding of the ISO 27000 series, NIST Cyber Security & Risk Management Frameworks, NCSC CAF, and other industry standards. Familiarity with NCSC guidance and legacy Information Assurance (IA) standards. Experience with MOD security ...

Familiarity with MOD security requirements, Classification Guides and security policy. Knowledge of ITAR regulations and export control requirements. Understanding of security standards (ISO 27001, NIST CSF, etc.). Practical knowledge of common IT architectures and technologies. Personal Attributes Strong analytical and problem-solving skills. Excellent leadership skills. Excellent written and ...

and segmentation. Knowledge of Zero Trust architecture. Understanding of secure network design principles. Experience with threat modelling and security risk management. Familiarity with CIS, NIST and ISO27001 frameworks. Strong stakeholder management and documentation skills. CISSP, CCNP Security or equivalent desirable. What's in It for You High-profile enterprise transformation ...