626 to 650 of 762 NIST Jobs in England

gear to ensure uptime and security. The role requires hands-on expertise with TCP/IP, BGP, OSPF, VLANs and VPNs, plus RMF/NIST 800-53 and STIGs. #J-18808-Ljbffr ...

checks so security scales without friction Defining and enforcing cloud security architecture standards, guardrails, and policy-as-code inline with industry best practices including NIST, CIS, and PCI DSS. Use Wiz or equivalent CNAPP/CSPM to continuously assess, prioritise, and drive remediation of misconfigurations and vulnerabilities against CIS, NIST … coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate. Maintain alignment to PCI DSS, SOC2, ISO27001 NIST, and CIS frameworks. Produce documentation and evidence to support audit and assurance activities. AI Security Design and implement guardrails for AI/LLM systems, covering ...

Copilot Studio and Agent 365, produce architectural impact assessments, and deliver adoption and assurance reporting. What it demands: control mapping to CIS Controls v8.1, NIST CSF 2.0, ISO/IEC 42001:2023 and the EU AI Act, translated into Microsoft controls that actually configure. M365 Workstream Inside an AI Platform … Foundry: environment strategy, agent lifecycle, data loss prevention, model and connector controls, and logging routes through Sentinel or Purview Map controls to recognised frameworks (NIST CSF 2.0, ISO/IEC 42001, CIS Controls, EU AI Act) and to the client’s own regulatory obligations Advise on licensing and consumption models ...

and payment security environments. Alongside PCI DSS, you’ll have broader cyber security knowledge and experience across areas such as ISO 27001, NIST, NCSC CAF, cyber risk management and security assessments. This broader experience is important in our consulting roles and mirrors the expectations of our existing Senior Consultant positions. … their payment environments, define scope and achieve and maintain compliance. Alongside this, you will support other engagements across Consulting in areas such as ISO27001, NIST, NCSC CAF, Risk Management and security maturity. Your responsibilities will include: Delivering PCI DSS engagements across merchant and service provider environments, including assessment and ...

and purple team activity into the wider assurance programme. Supporting security assurance against frameworks and standards including the NCSC Cyber Assessment Framework, ISO 27001, NIST CSF 2.0 and Cyber Essentials Plus. Communicating technical risk and control weaknesses clearly to senior stakeholders, balancing security improvement against cost, resilience and operational requirements. … effectiveness and drift, managing exceptions and driving remediation of identified weaknesses. Knowledge of the NCSC CAF and at least one of ISO 27001 or NIST CSF 2.0. Experience of zero trust and identity architecture, including conditional access and adaptive authentication. Experience scoping, commissioning or managing penetration testing. The ability ...

Define and AI governance frameworks covering model risk management, responsible AI, data lineage, bias/fairness testing, explainability, and regulatory alignment (EU AI Act, NIST AI RMF, ISO/IEC 42001).Act as trusted technical advisor to client CTOs, CIOs and Heads of Data/AI on platform strategy, build … privacy regulation (GDPR, CCPA) as applied to AI training and inference data. Working knowledge of emerging AI-specific regulation and standards: EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001.Experience establishing model documentation, audit trail, and approval-gate processes for production AI systems. Security & CloudAI-specific security ...

leaders on cyber risk, governance and compliance. Own and continually enhance the Information Security Management System (ISMS). Lead the approach to ISO 27001, NIST CSF, Cyber Essentials Plus and wider security best practice. Oversee security operations, incident response and threat management activities. Manage key security suppliers, partners and managed … need: Significant experience in a senior cyber or information security role. Experience within a regulated or professional services environment. Strong knowledge of ISO 27001, NIST CSF, Cyber Essentials Plus and security governance frameworks. Hands-on experience across risk management, incident response and security operations. Proven ability to engage, influence and ...

teams, escalating proactively to senior leadership when target dates slip. Control Design: Align and define the Technology control framework against industry standards (ISO 27001, NIST, CIS) and applicable regulatory mandates. Policy Governance: Author, update, and manage the approval lifecycle for Technology policies, standards, and standard operating procedures (SOPs).Engineering Integration … track record of independently leading technology audits and risk programmes, rather than solely performing administrative support. Framework Fluency: Practical working knowledge of ISO 27001, NIST, and CIS, along with a firm grasp of IT General Controls (ITGCs) across access management, change management, and IT operations. Technical Credibility: Solid technical grounding ...

cyber security audits, ensuring compliance with regulatory and industry standards. Develop and maintain risk management frameworks, aligning with best practices such as ISO 27001, NIST, and GDPR . Collaborate with stakeholders to identify and mitigate cyber risks across digital and operational infrastructures. Provide expert guidance on cyber risk governance , resilience … Other essential skills: Proven experience in cyber security risk management and audit , ideally within regulated industries Strong knowledge of security frameworks, including ISO 27001, NIST, CIS Controls, and GDPR compliance Ability to conduct security assessments, risk analyses, and internal audits Familiarity with security tooling and governance platforms (e.g., SIEM ...

which your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat … modeling, security testing) and determining residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle ...

which your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat … modeling, security testing) and determining residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle ...

and contribute to building a strong culture of security awareness. Key Responsibilities Information Security Frameworks – Support ongoing alignment with ISO 27001, ISO 22301 and NIST standards. Risk Management – Conduct security risk assessments and contribute to the continuous improvement of the risk management framework. Third-Party Risk Management (TPRM) – Assist … and documentation. About You Proven experience in a Cyber Security GRC or Information Security Analyst role Strong understanding of recognised security frameworks (ISO 27001, NIST, etc.) Experience supporting PCI DSS and GDPR compliance Exposure to third-party risk management processes Strong analytical skills with the ability to engage effectively with ...

and development teams. Conduct risk assessments and threat modeling, proactively identifying vulnerabilities and mitigation strategies. Develop and maintain security policies and frameworks aligned with NIST, ISO 27001, and CIS Controls. Lead PCI‐DSS architecture and compliance, ensuring both front‐ and back‐office systems meet standards. Guide and mentor teams … security architecture or design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/ ...

Privileged User Access Management (PUAM/PAM) capabilities and controls. Develop and enhance identity and access security frameworks. Industry frameworks and best practices including: NIST/CIS Controls Secure-by-Design principles Provide architectural assurance and governance across security transformation activities. Cloud & Platform Migration Support the migration of critical digital … programmes. Experience designing solutions across hybrid and multi-cloud environments (Azure, AWS and/or GCP). Knowledge of security and compliance frameworks including NIST and CIS. Excellent stakeholder management and communication skills. Government or Public Sector experience ...

will operate at both strategic and technical levels, supporting board-level decision‐making while driving operational security improvements aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director/Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time … . Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA, NIST CSF, COBIT, SANS, and related frameworks. Develop security policies, SOPs, and governance documentation. Conduct IT resilience and cloud security audits. Technical & Transformation Advisory Advise ...

CASB) Manage identities and roles effectively across cloud and hybrid environments Monitor and remediate infrastructure to comply with regulations and best practices (e.g., PCI, NIST CSF, GDPR, HIPAA) Design and implement secure container standards and automation that enable frictionless developer workflows Maintain Kubernetes security aligned with current best practices Collaborate … and cloud-to-cloud security Knowledge of CI/CD best practices and tools Familiarity with regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS, NIST CSF) Strong proficiency with Python, Terraform, and configuration management (e.g., Puppet) Hands-on experience building GitHub Actions and workflows Experience with observability and security operations ...

security management systems (ISMS), infrastructure and web applications. Support ISO 27001 implementation and maintain information security policies, standards and procedures aligned with ISO 27001, NIST and CIS frameworks. Apply the Secure Software Assurance Maturity Model to assess client compliance requirements for new products and architecture changes. Manage vulnerability assessments using … Skills and Experience Experience in cybersecurity, information security, IT risk management or security governance and compliance. Knowledge of ISO 27001, ISO 27002, PCI DSS, NIST and CIS frameworks. Experience conducting risk assessments, IT security audits and remediation tracking. Hands-on experience with vulnerability management and application security testing tools, including ...

alerting and response, driving vulnerability and identity/access management programs, maintaining incident response readiness, and supporting our SOC 2 Type II, HIPAA, and NIST CSF compliance programs. This person manages a small cross-border team of security practitioners and is the operational backbone of the security function … annual SOC 2 Type II audit cycle – evidence collection, control walkthroughs, and auditor liaison – in partnership with the compliance/GRC function Maintain NIST CSF control documentation and contribute to ongoing risk-remediation (POA&M) efforts Support HIPAA/PHI security controls and periodic risk assessments; coordinate annual third-party ...

and Cyber Essentials. Understanding of personnel and physical security principles within regulated environments. Experience conducting structured security risk assessments using recognised methodologies, such as NIST SP 800-30 or equivalent approaches. Strong written and verbal communication skills, with the ability to explain security risks, controls and recommendations clearly to technical … and PowerPoint. Desirable Skills and Experience Familiarity with international security standards and frameworks, including ISO 27001, the Cybersecurity Maturity Model Certification (CMMC) and the NIST Cybersecurity Framework. Knowledge of NIST SP 800-53 security controls. Experience working with nuclear industry security regulations, including Office for Nuclear Regulation (ONR) Security Assessment ...

your impact. Be familiar with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with ...

including IAM, data security, incident response, vulnerability management, network security, business continuity and monitoring. Experience assessing and evidencing controls against recognised frameworks such as NIST CSF, CIS Controls, ISO 27001, OWASP SAMM, NIST AI RMF and related standards. Ability to prioritise findings based on business impact, exploitability, remediation effort and ...

. OT security architecture, including network segmentation, zoning, secure remote access, monitoring, logging and telemetry . Security frameworks and standards such as: IEC 62443 NIST Cybersecurity Framework (NIST CSF) NCSC Cyber Assessment Framework (CAF) ISO 27001 NIS/NIS2 Related regulatory and industry requirements. OT security monitoring and tooling platforms ...

equivalent experience.* Strong and demonstrable experience in Excel, PowerPoint, and other Office applications.* An understanding of cybersecurity control and risk assessment frameworks (e.g., NIST CSF, CIS, NIST 800-53, ISO 27001) and their unique differences.* Awareness of the regulatory landscape and well-known data privacy, cybersecurity, and operational resilience regulations.Preferred ...

equivalent experience. Strong and demonstrable experience in Excel, PowerPoint, and other Office applications. An understanding of cybersecurity control and risk assessment frameworks (e.g., NIST CSF, CIS, NIST 800-53, ISO 27001) and their unique differences. Awareness of the regulatory landscape and well‐known data privacy, cybersecurity, and operational resilience regulations. ...

leaders on cyber risk, governance and compliance. Own and continually enhance our Information Security Management System (ISMS). Lead our approach to ISO 27001, NIST CSF, Cyber Essentials Plus and wider security best practice. Oversee security operations, incident response and threat management activities. Manage key security suppliers, partners and managed … bring: Significant experience in a senior cyber or information security role. Experience within a regulated or professional services environment. Strong knowledge of ISO 27001, NIST CSF, Cyber Essentials Plus and security governance frameworks. Hands-on experience across risk management, incident response and security operations. Proven ability to engage, influence and ...