626 to 650 of 732 NIST Jobs in England

compliant responses to client inquiries. Risk & Compliance Support: Support clients in understanding BCG's compliance with relevant frameworks (e.g. ISO 27001, SOC 2, GDPR, NIST) and help translate technical security concepts into business-relevant assurance responses. Quality & Continuous Improvement: Support the continuous improvement of Client Assurance Services by identifying opportunities … supporting client-facing information security, assurance, audit, compliance, or advisory activities. Strong understanding of information security frameworks and standards including ISO 27001, SOC 2, NIST CSF, GDPR, and relevant regional data protection regulations. Experience responding to client security questionnaires, due diligence requests, audits, or RFPs, with the ability to communicate ...

maintaining quality and managing stakeholder expectations. Willingness and flexibility to travel throughout the UK (and occasionally overseas) as required. Relevant professional certifications (e.g., ISO27000, NIST Cyber Security Professional, CISMP, CISM, CISSP, CCSP, Chartered Cyber Security Professional) are highly desirable. Solid understanding of ‘Secure by Design’ methodology. Commitment to ongoing professional … and help them deploy that technology in live OT/ICS environments. Familiarity with OT cyber security standards or regulatory frameworks (e.g., IEC 62443, NIST CSF, NIS Regulations, HSE OG-0086). Relevant OT cyber security qualifications (e.g., GICSP, IEC/ISA 62443). Membership of recognised security professional bodies ...

management, digital signatures, key management systems (KMS), and HSMs. Post-Quantum Cryptography (PQC) Knowledge: Strong understanding of quantum computing threats to modern encryption, NIST PQC standards, hybrid key exchange, and strategies for achieving crypto‐agility. Threat Modeling & System Design: Demonstrated ability to perform threat modeling on complex cloud-native applications … clear guidance for both technical teams and senior leadership. Desirable Experience in Fintech, Banking, or highly regulated cloud environments (e.g. PCI-DSS, ISO 27001, NIST guidelines). Demonstrated background in a highly technical role (e.g. Security Engineering, Infrastructure Engineering, Penetration Testing). Experience in infrastructure, application, and AI security (e.g. ...

access, and privileged access management strategies. Implementing security controls aligned with security standards, industry best practices and regulatory requirements such as PCI, ISO, CIS, NIST, CSA, NIS, GDPR etc. Evaluating emerging technologies, identifying security risks early, and influencing strategic technology decisions across the organisation. Guiding incident readiness and resilience initiatives … modern DevSecOps practices. You’re comfortable translating technical complexity into clear decisions, and confident working with stakeholders at all levels. You understand frameworks like NIST, ISO 27001, CIS, OWASP etc., and ideally have experience designing or supporting PCI compliant environments. You’re hands‐on with tools such as SIEM ...

use. Understanding of governance and assurance frameworks such as ISO/IEC 27701, ISO/IEC 27001, ISO/IEC 42001, and the NIST Privacy Framework. Collaborative team player with the ability to support, mentor and develop junior consultants. Self‐motivated with a proactive approach to personal development, industry awareness … infrastructure environments. Knowledge of international privacy frameworks and cross‐border data transfer mechanisms. Familiarity with governance and assurance frameworks including ISO/IEC 27001, NIST Privacy Framework, and Cyber Essentials. Experience of operating within consultancy or professional services organisations. Additional industry certifications relating to privacy, governance, information security ...

risk and governance. Design and implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review … prompt injection, data leakage and excessive agency. Strong understanding of relevant AI regulation and frameworks, particularly EU AI Act, UK GDPR/ICO, DPIAs, NIST AI RMF and ISO 42001. Experience working with regulated organisations. The ability to communicate equally well with senior executives and technical teams. Nice to have ...

cyber security, audit, risk management, or assurance within a regulated or technical environment Understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Strong attention to detail and ability to follow structured assurance processes Good communication and documentation skills Degree or equivalent in cyber security ...

workflows. Experience supporting regulated environments or environments with strict customer, contractual, or compliance obligations. Familiarity with AI security frameworks and guidance such as the NIST AI Risk Management Framework, NIST Generative AI Profile, OWASP Top 10 for LLM Applications, or Cloud Security Alliance AI security guidance. Experience with RAG architecture ...

workflows. Experience supporting regulated environments or environments with strict customer, contractual, or compliance obligations. Familiarity with AI security frameworks and guidance such as the NIST AI Risk Management Framework, NIST Generative AI Profile, OWASP Top 10 for LLM Applications, or Cloud Security Alliance AI security guidance. Experience with RAG architecture ...

decision-making. Experience within regulatedor complex enterprise environments preferred. Key Expertise Responsible AI & AIEthics AI/ML lifecycle andmodel development practices EU AI Act NIST AI RMF ISO 42001 Policy interpretationand control design If you have the experience to help shape and embed ResponsibleAI at enterprise level , I'd love ...

support risk-based decision making, and work with customers, suppliers, and delivery teams to embed security throughout the lifecycle. You will drive maturity of NIST-aligned risk assessment methods, assurance processes, tooling, and reporting to improve consistency and visibility across projects. #J-18808-Ljbffr ...

meets a real budget, and shape scope and commercial structure accordingly. Develop the firm's market position on AI governance and security (ISO 42001, NIST AI RMF, EU AI Act readiness) so the point of view arrives before the competition does. Partner with delivery leadership to make sure what ...

leaders on cyber risk, governance and compliance. Own and continually enhance our Information Security Management System (ISMS). Lead our approach to ISO 27001, NIST CSF, Cyber Essentials Plus and wider security best practice. Oversee security operations, incident response and threat management activities. Manage key security suppliers, partners and managed … bring: Significant experience in a senior cyber or information security role. Experience within a regulated or professional services environment. Strong knowledge of ISO 27001, NIST CSF, Cyber Essentials Plus and security governance frameworks. Hands-on experience across risk management, incident response and security operations. Proven ability to engage, influence and ...

leaders on cyber risk, governance and compliance. Own and continually enhance our Information Security Management System (ISMS). Lead our approach to ISO 27001, NIST CSF, Cyber Essentials Plus and wider security best practice. Oversee security operations, incident response and threat management activities. Manage key security suppliers, partners and managed … bring: Significant experience in a senior cyber or information security role. Experience within a regulated or professional services environment. Strong knowledge of ISO 27001, NIST CSF, Cyber Essentials Plus and security governance frameworks. Hands-on experience across risk management, incident response and security operations. Proven ability to engage, influence and ...

leaders on cyber risk, governance and compliance. Own and continually enhance our Information Security Management System (ISMS). Lead our approach to ISO 27001, NIST CSF, Cyber Essentials Plus and wider security best practice. Oversee security operations, incident response and threat management activities. Manage key security suppliers, partners and managed … bring: Significant experience in a senior cyber or information security role. Experience within a regulated or professional services environment. Strong knowledge of ISO 27001, NIST CSF, Cyber Essentials Plus and security governance frameworks. Hands-on experience across risk management, incident response and security operations. Proven ability to engage, influence and ...

THE ROLE We are looking for a senior IT security leader to define, implement and assure our information and cyber security posture across the firm. This is a new leadership role with broad responsibility for ...

and seeing remediation through to completion. Document and uphold secure-by-design principles and architecture governance, and enforce policy-as-code frameworks aligned with NIST, CIS, and PCI DSS.Set the monitoring scope and priorities for CNAPP/CSPM tooling (e.g. Wiz or equivalent), defining which misconfigurations and vulnerabilities matter most … against CIS, NIST, and PCI DSS benchmarks, and holding engineering teams accountable to remediation outcomes. Work with Security Operations to shape cloud logging and detection requirements, ensuring our SIEM has the right visibility across the estate. Collaborate with senior stakeholders to articulate security risks and mitigations in terms that support ...

and government security requirements SECURITY ARCHITECT ESSENTIAL SKILLS Experience operating as a Security Architect or similar senior security role Strong knowledge of ISO 27001, NIST, CIS or similar frameworks Experience with cloud security across AWS, Azure or Google Cloud Understanding of network security, encryption, authentication and access control Experience with … submit, subject to required skills, your application to our client in conjunction with this vacancy only. KEY SKILLS Security Architect, Cyber Security, ISO 27001, NIST, Cloud Security, AWS, Azure, Risk Assessment, Threat Modelling, SIEM, Defence ...

and government security requirements SECURITY ARCHITECT ESSENTIAL SKILLS Experience operating as a Security Architect or similar senior security role Strong knowledge of ISO 27001, NIST, CIS or similar frameworks Experience with cloud security across AWS, Azure or Google Cloud Understanding of network security, encryption, authentication and access control Experience with … submit, subject to required skills, your application to our client in conjunction with this vacancy only. KEY SKILLS Security Architect, Cyber Security, ISO 27001, NIST, Cloud Security, AWS, Azure, Risk Assessment, Threat Modelling, SIEM, Defence ...

and reference designs that engineering teams can implement. Enhance governance and compliance by aligning solutions and controls to various frameworks and standards such as NIST 800, ISO 27001 and NIS2. Support client workshops, design reviews and technical discussions. Contribute to internal knowledge sharing, reusable assets and capability development within … of: Network and cloud fundamentals Identity and access management concepts Secure system design principles Working knowledge of any cybersecurity framework or standard such as NIST or ISO 27001. Experience using architecture and design tools. Willingness to travel for client delivery (domestic and international as required). Ideally, You’ll Also ...

which your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat … modeling, security testing) and determining residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle ...

to. 5+ years of relevant experience in the medical device space (either industry or through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat … modeling, security testing) and determining residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle ...

and development teams. Conduct risk assessments and threat modeling, proactively identifying vulnerabilities and mitigation strategies. Develop and maintain security policies and frameworks aligned with NIST, ISO 27001, and CIS Controls. Lead PCI‐DSS architecture and compliance, ensuring both front‐ and back‐office systems meet standards. Guide and mentor teams … security architecture or design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/ ...

will operate at both strategic and technical levels, supporting board-level decision‐making while driving operational security improvements aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director/Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time … . Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA, NIST CSF, COBIT, SANS, and related frameworks. Develop security policies, SOPs, and governance documentation. Conduct IT resilience and cloud security audits. Technical & Transformation Advisory Advise ...

of actionable insights that help clients strengthen cyber resilience Framework and Methodology Apply structured frameworks such as Cyber Essentials, CIS Controls (v8), CAF and NIST Contribute to the refinement of Saepio’s assessment methodology and supporting materials Maintain awareness of emerging threats, technologies, and regulatory requirements Collaboration and Development Work … technical information clearly Analytical and organised approach with strong attention to detail Eagerness to develop expertise in cyber resilience consultancy Familiarity with Cyber Essentials, NIST CSF, or CIS Controls Experience using common cyber security or IT management tools Exposure to governance, compliance, or policy development processes Certifications such as CISSP ...