401 to 425 of 762 NIST Jobs in England

Skills & Experience: Proven experience delivering cyber, technology, or control assurance projects in large, distributed organisations Knowledge of security frameworks and standards (ISO 27001, NIST CSF, CIS, GDPR, SOC2, IEC62443) and control assurance practices Experience in metrics, reporting, and continuous control monitoring for second-line assurance Strong stakeholder management, communication, and ...

delivery teams and third-party vendors to introduce innovative solutions. Maintaining a strong security posture and ensuring compliance with standards such as ISO 27001, NIST and Cyber Essentials Plus. Managing incidents, changes and problem-resolution activities to minimise disruption and continually improve services. Overseeing backup, disaster recovery and business continuity ...

working in manufacturing, industrial environments or factory IT/OT architecture. Knowledge of industrial network segmentation and security frameworks, including IEC 62443 and relevant NIST guidance. Experience with edge infrastructure platforms such as Azure Local, Dell NativeEdge or Kubernetes-based environments. Familiarity with ServiceNow, SIAM and enterprise service transition ...

experience within Cyber Security, Information Security, Technology Risk, IT Audit, or Operational Risk. Knowledge of cyber security frameworks including: ISO 27001/27002/NIST Cybersecurity Framework/COBIT/CIS Controls Experience supporting clients through compliance assessments, control testing, remediation planning and governance reporting activities. Experience managing small teams ...

assessing and improving cyber risk frameworks, governance processes and third-party controls. Familiarity with recognised security standards and regulatory requirements such as ISO 27001, NIST and DORA. Confidence working with senior stakeholders and communicating complex technical matters clearly. Experience taking ownership of projects, managing competing priorities and delivering high-quality ...

platforms. Linux‐based infrastructure, including Red Hat Enterprise Linux (RHEL) and Ubuntu virtual machines. Security and infrastructure hardening frameworks such as CIS Benchmarks and NIST, particularly within financial services or another regulated environment. Modern identity and secure‐access technologies, including Azure Enterprise Applications, Microsoft Defender capabilities and Zero Trust solutions ...

weaknesses are not reintroduced. Implementing the remediation and hardening work identified through the incident, where clients engage us to deliver it. Working to the NIST Cyber Security Framework and incident response lifecycle, with CIS Benchmarks used for technical control recommendations. Security assessment and hardeningPerforming security reviews and configuration hardening across … review, management plane exposure, VPN and remote access configuration, IPS/IDS posture, logging, and firmware currency. Assessing cloud configuration against CIS Benchmarks and NIST using tooling including Prowler, ScubaGear and PingCastle, and turning technical findings into prioritised, business-contextualised remediation plans. Reviewing third-party software, cloud applications and SaaS ...

weaknesses are not reintroduced. Implementing the remediation and hardening work identified through the incident, where clients engage us to deliver it. Working to the NIST Cyber Security Framework and incident response lifecycle, with CIS Benchmarks used for technical control recommendations. Security assessment and hardening Performing security reviews and configuration hardening … review, management plane exposure, VPN and remote access configuration, IPS/IDS posture, logging, and firmware currency. Assessing cloud configuration against CIS Benchmarks and NIST using tooling including Prowler, ScubaGear and PingCastle, and turning technical findings into prioritised, business-contextualised remediation plans. Reviewing third‐party software, cloud applications and SaaS ...

factors such as: Offensive capabilities and trends among threat actor classes, and validating CyberCube models against observed real-world events, Security hygiene standards (e.g. NIST CSF, CIS) and mitigations for companies to lower their potential likelihood and/or impact of events, and Technology adoption and trends including the adoption ...

Risk Management Technology Controls Risk & Control Frameworks Regulatory Compliance Knowledge of any of the following would be particularly beneficial: CAF (Cyber Assessment Framework) DORA NIST CSF ISO 27001 Financial Services regulation CNI Security and resilience regulation If you've built a strong track record leading cyber, resilience or technology risk ...

compliant collaboration and security platforms (e.g., ZoomGov, Slack Gov, Zscaler, Threat Locker, Microsoft Defender for Government) Working knowledge of compliance‐driven frameworks such as NIST 800‐171, CMMC, or similar regulatory standards Jamf 200/300/400 certification Experience operating in environments handling Controlled Unclassified Information (CUI) or ITAR ...

access management (IAM), including RBAC, ABAC, JWT and Cookie based authentication. Incident detection and response in MOD environments. Security compliance and regulatory frameworks (e.g., NIST, CIS Benchmarks). Experience working with Kubernetes at an administrative level Soft Skills Strong leadership and mentoring abilities. Effective communication with development, operations, and security ...

validation. Experience with enterprise integration observability, API monitoring, data lineage, datagovernanceor data quality tooling. Experience supporting Microsoft Fabric adoption,migrationor modernisation programmes. Familiarity with NIST CSF or other cybersecurity frameworks. Experience in performance, scalability and resilience testing using tools such as JMeter, k6 or Locust. Experience scaling QE practices across ...

stakeholders in a fast-paced environment Experience with enterprise architecture frameworks such as TOGAF or similar. Knowledge of security frameworks and compliance standards (ISO, NIST, etc.). Experience with Agile methodologies and working in DevOps environments. Apply today by completing our online application Additional Information Please note that the interview ...

system safeguards expectations, including 17 C.F.R. § 38.1051 and § 39.18 or similar regulatory requirements. AppSec Foundations: Strong grasp of application security principles (OWASP Top 10, NIST) and secure SDLC practices. CI/CD & Tooling: Proficiency with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI) and security tools ...

enterprise platforms is required. Relevant exposure may include: Identity Governance & Administration Privileged Access Management Access certifications/User Access Reviews Compliance initiatives (SOX, ISO, NIST, SOC 2) Zero Trust programs Security transformation efforts Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas ...

and prioritising work loads Experience of resolving technical security related issues Experience of information security tools Knowledge of security frameworks such as ISO27001 and NIST Experience of data protection, UK legislation and GDPR Ability to extract and interpret computerised data Knowledge of the Data Protection Act and its application Excellent ...

Strong understanding of OT network security, risk assessments and security controls. Experience working in a consultancy or client-facing environment. Knowledge of IEC 62443, NIST or similar security frameworks would be beneficial. Good communication skills and the ability to explain technical risks clearly. Salary: Up to £100,000 Location: Hybrid ...

Strong understanding of OT network security, risk assessments and security controls. Experience working in a consultancy or client-facing environment. Knowledge of IEC 62443, NIST or similar security frameworks would be beneficial. Good communication skills and the ability to explain technical risks clearly. Salary: Up to £100,000 Location: Hybrid ...

independently. About You Previous experience in information security, risk and compliance consultancy. Practical auditing and assessment experience. Knowledge of ISO 27001 and/or NIST Cybersecurity Framework (CSF). Confident working directly with clients and managing your own workload. Government or defence sector experience is advantageous. Eligible to obtain ...

workflows, scripting or orchestration tools Knowledge of system integration patterns, APIs and data flows across security platforms Familiarity with modern frameworks such as CTEM, NIST or similar cyber security standards Understanding of secure architecture principles and secure by design approaches Win as a Team As someone who is already part ...

Risk or IT Audit, with a dedicated focus on SOX. You possess deep knowledge of SOX 404 requirements, COSO framework, and IT control frameworks (NIST, ISO27001). SOX Implementation: You have demonstrable experience with first-time SOX audits in cloud-native environments. You understand how compliance frameworks map to dynamic ...

and access controls , including RBAC, privileged access management, and data access governance. Proven ability to support continuous compliance monitoring against frameworks such as CIS, NIST, and financial services regulatory standards. Strong risk assessment and stakeholder management skills, with the ability to identify security threats, drive remediation activities, and communicate risks ...

privilege and segregation of duties. Regulatory & compliance knowledge- Deep understanding of banking regulatory frameworks including FCA/PRA expectations, SOX ITGC controls, ISO 27001, NIST, and CIS benchmarks. Senior programme leadership- Demonstrated ability to lead cross-functional delivery teams, manage risk and dependency frameworks, and operate within Agile, SAFe ...

with the ability to build trusted relationships with customers, Account Managers and technology partners. Knowledge of security frameworks such as Cyber Essentials, ISO 27001, NIST or CIS is advantageous. A passion for shaping security strategy, growing security revenue and developing market-leading propositions. What You'll Love Generous Time ...