351 to 375 of 725 NIST Jobs in England

culture, behaviours, and delivery outcomes. **Required Experience*** Senior leadership in technology risk within regulated financial services.* Ownership of control frameworks aligned to recognised standards (NIST, ISO, COBIT).* Strong track record in risk governance and remediation of systemic issues.* Operational resilience and incident management expertise.* Experience engaging with regulators and ...

and external assessments* Support the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.* Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning the security risk management process to include ...

and external assessments Support the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc. Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning the security risk management process to include ...

Control frameworks including Cobit, CRI and NISTSKILLS AND EXPERIENCEDeep understanding of IT general controls and application controls, and familiarity with frameworks such as COBIT, NIST, CRI and ISO 27001.Demonstrable experience in 1LOD technology risk & controls, Internal Audit, or 2LOD oversight within financial services. Hands on experience within Internal and/ ...

systems Configuration management or cyber security System reliability and fault tolerance Proof testing and maintenance practices Through-life asset management and obsolescence IEC 62443 NIST Cyber Security Framework IEC 61508 Interest in OT cyber security, industrial networks, and infrastructure systems Additional Information Why join us? We bring together entrepreneurial, tech ...

auditing technology transformation programmes and system implementationsExperience of using audit software and Microsoft packages. Familiarity with related regulation and frameworks such as Cyber Essentials, NIST, GDPR etc would also be helpful. Strong communication skills (both written and oral) and experience of writing IT internal audit reports will be key. Knowing ...

security tooling (SIEM, EDR, IDS/IPS, NDR, SOAR) and experience extending or building on it. You are proficient in applying Incident Response frameworks (NIST IR Lifecycle, Cyber Kill Chain, MITRE ATT&CK) to real-world scenarios, and you collaborate effectively with engineering colleagues, leveraging extensive expertise across infrastructure and ...

of time) Essential Previous, demonstrable, technical computer forensics experience for cyber incident response and investigations. Thorough understanding of best practice procedures (NPCC, NIST, ISO17025) evidence handling, computer systems and tools of the trade Thorough understanding of both the MITRE ATT&CK and Cyber Kill chain framework, network topology and ...

vulnerabilities and recommending improvementsDesign and implement robust cybersecurity solutions tailored to ICS environmentsDevelop ICS security control frameworks incorporating industry best practices and international standards (NIST, ISO 27001, IEC 62443)Create key deliverables including threat and risk assessments, security policies, procedures, assurance management plans, and compliance evidenceTeam Development & GrowthMentor Accenture team ...

and recommending improvements Design and implement robust cybersecurity solutions tailored to IC environments Develop ICSSecurity control frameworks incorporating industry best practices and international standards (NIST, ISO 27001, IEC 62443) Create key deliverables including threat and risk assessments, security policies, procedures, assurance management plans, and compliance evidence Team Development & Growth Mentor ...

update Vulnerability Management related documentation to align with internal and external compliance requirements, industry best practices and emerging threats (e.g. ISO 27000, PCI-DSS, NIST). Build and maintain our vulnerability ecosystem, from cloud-native stacks to endpoint security, using automation to reduce manual overhead for the wider team. Process ...

premises Kubernetes deployment experience. Prometheus or comparable observability platforms. AWS Karpenter. AWS Compute Optimizer. Experience operating highly distributed systems. Familiarity with ISO 27001, NIST SSDF, OWASP SAMM or similar security frameworks. Understanding of GDPR fundamentals. Experience working within defence, national security, critical infrastructure or other regulated environments. Security Clearance ...

Skills You will have a solid understanding of: Third Party Risk Management (TPRM) and supply chain security Security frameworks including ISO 27001, ISO 27036, NIST, and related assurance standards Zero Trust security principles and third-party access controls Vendor risk assessment, risk scoring, and continuous monitoring practices Enterprise security architecture ...

data security, including data classification, DLP, encryption, and data lifecycle protection. Strong understanding of relevant standards and frameworks (e.g. ISO/IEC 27001, NIST CSF, CIS Controls). Proven experience owning or leading a global or enterprise‐scale security service or capability. Ability to operate at both strategic and operational ...

data security, including data classification, DLP, encryption, and data lifecycle protection. Strong understanding of relevant standards and frameworks (e.g. ISO/IEC 27001, NIST CSF, CIS Controls). Proven experience owning or leading a global or enterprise‐scale security service or capability. Ability to operate at both strategic and operational ...

data security, including data classification, DLP, encryption, and data lifecycle protection. Strong understanding of relevant standards and frameworks (e.g. ISO/IEC 27001, NIST CSF, CIS Controls). Proven experience owning or leading a global or enterprise-scale security service or capability. Ability to operate at both strategic and operational ...

user computing. Ability to follow defined technical procedures, standards and operational processes accurately and consistently. Awareness of security frameworks, policies and standards such as NIST, CIS, ISO 27001 or equivalent control frameworks. Developing understanding of risk, control effectiveness, vulnerability management and secure configuration principles. Why You’ll Love It Here ...

will be responsible for defining the Target State and drafting the strategic Risk Treatment Plans (RTP) required to meet institutional-grade standards (e.g., CCSS, NIST, DORA).Act as the primary security liaison for Senior Management and third-party vendors. You will translate complex technical gaps into actionable business risk summaries ...

Sagemaker, Kubeflow or ZenML) Deployment of on-premise Kubernetes Prometheus (or other stacks) observability Experience with AWS Karpenter & Compute Optimizer Compliance literacy - ISO 27001, NIST SSDF/OWASP SAMM, GDPR basics An active SC or DV clearance is a strong advantage for this role. Why This Role? This ...

defining mitigating controls Experience working in regulated environments with strong cyber and compliance requirements Knowledge of cyber security frameworks and regulatory requirements such as NIST, PCI DSS, GDPR and NIS Experience in agile delivery environments is advantageous Relevant cyber security qualifications (e.g. CISSP, ISO27001 Lead Implementer, SANS GIAC or equivalent ...

of the following: Security Engineering Identity & Access Management Email Security Vulnerability Management Security monitoring and logging Secure technical change Security frameworks including ISO 27001, NIST or OWASP Experience with Microsoft Defender, Purview, Intune, cloud automation or DevSecOps would be advantageous but isn't essential. What's in this ...

Microsoft Azure security Endpoint Protection Identity & Access Management Email Security Vulnerability Management Security monitoring and logging Secure technical change Security frameworks including ISO 27001, NIST or OWASP Experience with Microsoft Defender, Purview, Intune, cloud automation or DevSecOps would be advantageous but isn't essential. What's in this ...

system designs or products, including recommending sensible mitigations that balance cost, risk and usability. • Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR).• Deep architectural xxperience in one of the following specialisms: AI/ML Security/Cloud/M365/DevSecOps Security Architecture • Experience ...

and limitations. Experience designing Power BI dashboards, compliance scorecards, KPI/KRI reporting or executive management information. Experience reviewing general IT controls including ISO27001, NIST, user access (including management of joiner and leavers), segregation of duties, information security, cyber security and personal data. Inclusion Freshfields is an equal opportunities employer ...

system designs or products, including recommending sensible mitigations that balance cost, risk and usability.? Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). Deep architectural xxperience in one of the following specialisms: AI/ML Security/Cloud/M365/DevSecOps Security Architecture Experience ...