676 to 700 of 762 NIST Jobs in England

assurance engagements, including Defence Cyber Certification assessments, with appropriate support and oversight. Supporting larger assurance engagements against frameworks such as Defence Cyber Certification and NIST Cybersecurity Framework. Reviewing technical and documentary evidence to assess compliance against security requirements. Supporting customers and stakeholders in understanding and addressing identified security gaps. Helping … audits, Compliance assessments, Cyber assurance activities Experience with recognised cyber security frameworks and standards, including: Defence Cyber Certification (DCC), DefStan 05-138, Cyber Essentials, NIST Cybersecurity Framework (NIST CSF) Strong written and verbal communication skills. Can conduct robust reviews of technical and documentary evidence, translating findings into clear, defensible assessment ...

assurance engagements, including Defence Cyber Certification assessments, with appropriate support and oversight. Supporting larger assurance engagements against frameworks such as Defence Cyber Certification and NIST Cybersecurity Framework. Reviewing technical and documentary evidence to assess compliance against security requirements. Producing clear and accurate reports detailing findings, observations and recommendations. Supporting customers … audits Compliance assessments Cyber assurance activities Experience with recognised cyber security frameworks and standards, including: Defence Cyber Certification (DCC) DefStan 05-138 Cyber Essentials NIST Cybersecurity Framework (NIST CSF) Strong written and verbal communication skills. Can conduct robust reviews of technical and documentary evidence, translating findings into clear, defensible assessment ...

privacy; coordinate specialist testing such as red teaming, where needed. Track AI regulation and standards (FCA and PRA expectations, EU AI Act, ISO 42001, NIST AI RMF, UK GDPR) and turn them into practical client requirements. Document findings, agree actions with management, and lead workshops and steering committees, influencing senior … lifecycle, including generative and agentic AI. Experience assessing data governance, data quality, lineage and privacy controls, with working knowledge of ISO/IEC 42001, NIST AI RMF, the EU AI Act, UK GDPR and UK regulatory expectations for AI. Experience scoping AI audits and assessments, designing and testing controls, and ...

approach to identifying and explaining cyber risks within complex transformation initiatives Project management and delivery experience across the following Cyber Security areas: frameworks (e.g. NIST CSF, CPMI-IOSCO, ISO, ‘Profile’ - Financial Services sector-specific distillation of the NIST CSF, etc.), assessments, implementation, roadmap definition (tactical and strategic), strategy, risk identification ...

Extensive experience with the NIST RMF and independently leading security control assessments from start to finish using the NIST Framework. Experience in several of the following areas is required: understanding of IT security practices and procedures; knowledge of current security tools available; different communication protocols; encryption techniques/tools; secure ...

scheme. Broad familiarity with UK Government physical and personnel security such as NPSA and UKSV. Risk assessment using recognised standards such as IS1 and NIST SP800-30. Able to express yourself effectively, with a high degree of clarity, in English, especially when justifying and explaining required security measures. Able … prioritise and manage your time to achieve multiple different tasks. (Desirable) Familiarity with broader international security standards such as ISO27001, CMMC, and the NIST Cyber Security Framework (especially SP800-30 and SP800-53). (Desirable) Familiarity with UK nuclear regulations such as the ONR SyAPs. (Desirable) Familiarity with the AtkinsRéalis ...

and assurance of Backend Platform and endpoint protection and vulnerability management capabilities within secure, offline (air-gapped) environments . The Architect must apply the NIST Cybersecurity Framework and MoD security policies to the backend platform, while supporting the Security and Infrastructure teams in designing and implementing security controls across … security controls. Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer. Ensure compliance with MOD, NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. Collaborate with infrastructure ...

and third-party risk assessments. Advising projects and stakeholders on cyber security and compliance requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology … Security or Cyber Security. Security Assurance or Risk Management. Infrastructure, Cloud or Security Operations environments. Compliance frameworks such as ISO 27001, CAF, PCI DSS, NIST and CIS Benchmarks. Working with auditors, suppliers and senior stakeholders. Experience of AI governance, ISO 42001 or modern Microsoft security technologies would be advantageous. ...

industry best practice. What You'll Be Doing Leading cyber assurance activities across complex OT and cloud environments Assessing security controls against NCSC CAF, NIST and ISO standards Conducting and supporting internal and external audits Providing expert guidance on cyber risk, governance and compliance Challenging and influencing stakeholders … critical infrastructure environments Proven track record leading audits from planning through to remediation Knowledge of Cyber Essentials, ISO 27001, ISO 27005 and/or NIST Why Apply? Outside IR35 Long-term 12-month engagement High-profile cyber transformation programme Exposure to both Cloud and OT security challenges Opportunity to shape ...

defined projectsA genuine interest in technology, cybersecurity, and the industry we serveNice-to-haveExperience using Cyber and AI governance frameworks (Mitre Att&ck, NIST AI RMF, EU AI Act)Experience with GRC platforms or vendor risk and customer questionnaire processesRelevant certifications or progress towards them (e.g., CISA, CRISC … and IP exposure, with awareness of our studio customers’ confidentiality expectationsTrack emerging AI regulation and standards (e.g., EU AI Act, ISO/IEC 42001, NIST AI RMF) and help translate them into practical controlsUse AI tools in your own work (e.g., drafting policies, mapping controls), with appropriate human review, and ...

Control Tower solution, which enables organizations to achieve responsible AI adoption at scale: AI inventory management, risk assessment, regulatory compliance (e.g. EU AI Act, NIST AI RMF, ISO 42001), and AI governance operational excellence. You will own adoption strategy and enterprise architecture decisions for AICT "AI Control Tower" implementations while … primary subject matter expert Support customer engagements focused on EU AI Act compliance, responsible AI practices, and enterprise AI governance frameworks, including NIST AI RMF and ISO 42001 Participate in technical implementation of AI Control Tower capabilities, including configuration, customization, and solution builds Partner on enterprise architecture decisions for AICT ...

and implement comprehensive Information Assurance Strategies to meet complex customer security requirements. Lead risk management activities that align with an industry standard such as NIST SP 800-37 or the ISO/IEC 27000 series. Create and maintain security documentation including system security plans, policies, procedures, and compliance evidence. Interface … Engineer - Product Security The ability to interpret and implement industry security standards and frameworks such as the ISO/IEC 27000 series or NIST SP-800 series. Experience in information assurance, security engineering, cyber security, or a similar field. Deep understanding of security risk management and assurance methodologies & processes. Experience ...

control effectiveness, track findings through resolution and maintain organised documentation and repositories. Support security and compliance programmes aligned with frameworks such as ISO 27001, NIST 800 Series, SOC 2, PCI and Cyber Essentials. Serve as a client-facing Information Security subject matter expert, providing clear, accurate and timely responses that … across on-premises, colocation and cloud environments, including cloud security and compliance technologies. Working knowledge of security and compliance frameworks such as ISO 27001, NIST, SOC 2, PCI and Cyber Essentials, with experience supporting assessments or audits. Strong understanding of security governance and controls, vulnerability management, monitoring and alerting, and ...

relevant frameworks (e.g., GovAssure, JSP 604) and supporting the client in securing Authority to Operate (ATO) status. Implement and manage security risk processes (e.g., NIST RMF), producing assurance and risk artefacts, and embedding a culture of continuous risk management. Collaborate with clients to understand their security needs, provide solution advice … trusted advisor, and shape solutions that embed Secure by Design (SbD) principles from inception. Lead security maturity assessments (e.g., against ISO 27001, NIST CSF, DevSecOps practices) and deliver remediation roadmaps to uplift client cyber resilience and support external audit requirements. We are always listening to our growing teams and evolving ...

security assurance requirements, supporting Secure by Design (SbD), cyber risk management and security control implementation in line with JSP 440, JSP 604 and NIST methodologies. Working closely with project teams, security architects, engineers and wider Defence security functions, you will coordinate assurance activities, manage security risks and produce the evidence … Responsibilities Provide security assurance advice and guidance in line with MOD Secure by Design principles and JSP 440. Conduct security risk assessments using NIST 800 methodologies and manage associated mitigation actions. Develop security documentation, assurance evidence, security operating procedures (SyOPs) and awareness briefings. Implement and monitor physical, procedural, personnel and ...

looking for Experience in cyber risk management, ideally in a regulated or critical infrastructure environment Understanding of cyber risk frameworks (ISO 27005, NIST, FAIR) and the NCSC CAF Degree or equivalent in cyber security, risk management, or a related field Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk Manager) Working … with strong prompt engineering skills Advanced Excel; Python/R and CRQ tools (desirable) Familiarity with threat intelligence, incident datasets (VERIS), and control frameworks (NIST, ISO) Ability to translate quantitative outputs into clear business narratives Desirable: nuclear/CNI experience; ONR SyAPs, NISR 2003, HMG SPF 38 years in cyber ...

Security Working Group, including maintaining the risk register and shaping the security roadmap Driving continuous improvement of security controls, alignment to the NIST Cybersecurity Framework, and effective delivery of security impact assessments across projects. Coordinating group‐level initiatives with the Alpine Business Unit and Groupe Renault CISO teams, ensuring consistent … technologies. Vulnerability management tooling, penetration testing tools, and endpoint security platforms. Privileged access management, secure configuration baselines, and network segmentation. Security frameworks such as NIST, ISO 27001, or CIS Controls. Investigation and resolution of complex security and network issues with minimal supervision. Translating technical risks into clear, business‐aligned recommendations. ...

assessments, configuration reviews, and audits of AWS environments to identify vulnerabilities and recommend remediation. Implement and maintain cloud security controls aligned to ISO 27001, NIST and cloud security best practices. Develop security automation tooling, scripts, and infrastructure as code processes to streamline security operations. Take ownership of security engineering projects … and related cloud native controls. Practical experience with scripting (Python preferred) and Infrastructure as Code tooling such as Terraform. Solid understanding of ISO 27001 , NIST CSF , and cloud security best practices. Familiarity with commonly used open-source security testing tools (e.g., BurpSuite, ZAP, Nikto, Metasploit, SQLmap). Highly self managing ...

Security Working Group, including maintaining the risk register and shaping the security roadmap* Driving continuous improvement of security controls, alignment to the NIST Cybersecurity Framework, and effective delivery of security impact assessments across projects.* Coordinating group‐level initiatives with the Alpine Business Unit and Groupe Renault CISO teams, ensuring consistent … technologies.* Vulnerability management tooling, penetration testing tools, and endpoint security platforms.* Privileged access management, secure configuration baselines, and network segmentation.* Security frameworks such as NIST, ISO 27001, or CIS Controls.* Investigation and resolution of complex security and network issues with minimal supervision.* Translating technical risks into clear, business‐aligned recommendations. ...

and project stakeholders. Identifying opportunities to improve security services through upgrades, automation and better operational processes. You'll also help maintain alignment with the NIST Cybersecurity Framework and applicable Network and Information Systems (NIS) Regulations. What You'll Bring You'll have significant hands-on experience supporting complex IT, network … of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability to maintain security policies, procedures, technical documentation and audit evidence. A methodical approach ...

and project stakeholders. Identifying opportunities to improve security services through upgrades, automation and better operational processes. You'll also help maintain alignment with the NIST Cybersecurity Framework and applicable Network and Information Systems (NIS) Regulations. What You'll Bring You'll have significant hands-on experience supporting complex IT, network … of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability to maintain security policies, procedures, technical documentation and audit evidence. A methodical approach ...

Staff Security Operations Engineer, you will: Build and own a structured SecOps roadmap grounded in well-known frameworks such as MITRE ATT&CK, NIST, and CIS benchmarks. Lead security investigations and digital forensics, from suspicious traffic through to full incident response, and bring the findings back into how we detect … logging estate, our cloud footprint to form your own view of where the biggest risks sit. Publish a SecOps roadmap mapped to MITRE, NIST, and CIS, agree with Engineering, Risk & Compliance, and leadership, and start delivering against it. Stand up the on-call rotation and the alert response SLAs that ...

Cyber Security Specialist Greater Manchester Permanent Up to £46,500 Hybrid: 50% in office, 35 hours per week On behalf of our public sector client, I'm on the lookout for a cyber security specialist ...

model, data and prompt/model manipulation risks. Experience delivering developer-focused security training or workshops. Knowledge of frameworks such as OWASP SAMM, ASVS, NIST CSF or NIST SSDF . Relevant application security, cloud security or offensive security certifications. Experience working across multiple teams, countries or business entities. In return ...

banking, investment banking or investment management environment; Managing cyber security incidents; Experience working with Cyber Security and Incident Response frameworks such as NIST, Kill Chain, Attack life Cycle, & MITRE). Relevant experience with MITRE Att&Ck alignment with security monitoring use cases. Relevant experience with cloud security assessments aligning … of information security principles and best practices; In-depth understanding of legislation affecting security, privacy and systems assurance; experiencing working to recognised standards - e.g. NIST, COBIT. GCIA, GCIH, GCFA or equivalent. What Mizuho Can Offer You Here at Mizuho, there are fantastic progression opportunities and clear paths to promotion. ...