676 to 700 of 732 NIST Jobs in England

scheme. Broad familiarity with UK Government physical and personnel security such as NPSA and UKSV. Risk assessment using recognised standards such as IS1 and NIST SP800-30. Able to express yourself effectively, with a high degree of clarity, in English, especially when justifying and explaining required security measures. Able … prioritise and manage your time to achieve multiple different tasks. (Desirable) Familiarity with broader international security standards such as ISO27001, CMMC, and the NIST Cyber Security Framework (especially SP800-30 and SP800-53). (Desirable) Familiarity with UK nuclear regulations such as the ONR SyAPs. (Desirable) Familiarity with the AtkinsRéalis ...

and assurance of Backend Platform and endpoint protection and vulnerability management capabilities within secure, offline (air-gapped) environments . The Architect must apply the NIST Cybersecurity Framework and MoD security policies to the backend platform, while supporting the Security and Infrastructure teams in designing and implementing security controls across … security controls. Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer. Ensure compliance with MOD, NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. Collaborate with infrastructure ...

and assurance of Backend Platform and endpoint protection and vulnerability management capabilities within secure, offline (air-gapped) environments . The Architect must apply the NIST Cybersecurity Framework and MoD security policies to the backend platform, while supporting the Security and Infrastructure teams in designing and implementing security controls across … security controls. Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer. Ensure compliance with MOD, NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. Collaborate with infrastructure ...

and third-party risk assessments. Advising projects and stakeholders on cyber security and compliance requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology … Security or Cyber Security. Security Assurance or Risk Management. Infrastructure, Cloud or Security Operations environments. Compliance frameworks such as ISO 27001, CAF, PCI DSS, NIST and CIS Benchmarks. Working with auditors, suppliers and senior stakeholders. Experience of AI governance, ISO 42001 or modern Microsoft security technologies would be advantageous. ...

and risk mitigation. Develop meaningful risk reporting, dashboards and management information for senior stakeholders. Ensure alignment with regulatory and industry frameworks including DORA, NIS2, NIST and ISO 27001. Act as the subject matter expert for third-party cyber risk across the organisation. What We're Looking For We are particularly … assessments and supplier assurance processes. Experience working within regulated environments and supporting compliance initiatives. Understanding of frameworks and standards including DORA, NIS2, ISO 27001, NIST and SOC reports. Excellent stakeholder management skills and experience engaging both technical and non-technical audiences. Relevant certifications such as CISSP, CISM, CRISC ...

This role will provide Cyber Security Technology and Integration Assessment for QBE's IT Change Projects utilising a Secure Design Framework based on the NIST framework. The role will require the ability to work with Architects and Solution Design SME's across a range of technologies to identify Cyber threats … risks. Your new role Lead security assurance, assessments, advisory for IT and Business projects (Cloud and On-prem) within EO and globally against the NIST 800-53 cyber security standard and compliance framework Partner with the security architecture and other relevant teams to define security patterns and ensure that appropriate ...

relevant frameworks (e.g., GovAssure, JSP 604) and supporting the client in securing Authority to Operate (ATO) status. Implement and manage security risk processes (e.g., NIST RMF), producing assurance and risk artefacts, and embedding a culture of continuous risk management. Collaborate with clients to understand their security needs, provide solution advice … trusted advisor, and shape solutions that embed Secure by Design (SbD) principles from inception. Lead security maturity assessments (e.g., against ISO 27001, NIST CSF, DevSecOps practices) and deliver remediation roadmaps to uplift client cyber resilience and support external audit requirements. We are always listening to our growing teams and evolving ...

and risk management frameworks Reviewing the effectiveness of security controls and recommending proportionate improvements Assessing clients against recognised standards and frameworks, including ISO 27001, NIST and similar methodologies Supporting ISO 27001 implementation, readiness and assurance activities Developing risk registers, treatment plans, policies, standards and security documentation Conducting risk assessments … management or security assurance A strong understanding of cyber security governance, risk and compliance principles Practical experience working with frameworks such as ISO 27001, NIST, Cyber Essentials or similar standards Experience conducting risk assessments, security assessments or compliance reviews An understanding of information security policies, controls, risk registers and assurance ...

Cyber Security Solution Architect - Banking Client - TOGAF, NIST Cybersecurity Framework (CSF),SABSA 12 Month Contract Rate: Flexible Hybrid Working: 8 days onsite in office per month UK Applicant must use an Umbrella (Inside of IR35) We are seeking an experienced Infrastructure Security Solution Architect for a daily rate contract (rate … Solution Architect on large transformation programs. Proven expertise in Cyber Security architecture, ideally in regulated industries. Strong knowledge of security frameworks (e.g. SABSA, NIST, ISO 2700x). Familiarity with enterprise architecture frameworks (TOGAF, SAFe) and Agile delivery models. Ability to operate at both strategic (roadmaps, reference models) and detailed technical ...

technologies, including Zscaler, while working with cross-functional security, networking and infrastructure teams. Key Responsibilities Design and implement enterprise Zero Trust architectures aligned to NIST 800-207 and CISA principles. Develop secure access models using Zscaler ZIA, ZPA, ZDX and Client Connector . Design identity-centric controls covering … Client Connector or similar Zero Trust technologies. Experience with App Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASB . Strong understanding of Zero Trust, NIST 800-207, SASE and SSE . Knowledge of IAM, Entra ID/Azure AD, Okta or Ping . Understanding of SD-WAN, DNS security, routing ...

technologies, including Zscaler, while working with cross-functional security, networking and infrastructure teams. Key Responsibilities Design and implement enterprise Zero Trust architectures aligned to NIST 800-207 and CISA principles. Develop secure access models using Zscaler ZIA, ZPA, ZDX and Client Connector . Design identity-centric controls covering … Client Connector or similar Zero Trust technologies. Experience with App Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASB . Strong understanding of Zero Trust, NIST 800-207, SASE and SSE . Knowledge of IAM, Entra ID/Azure AD, Okta or Ping . Understanding of SD-WAN, DNS security, routing ...

and project stakeholders. Identifying opportunities to improve security services through upgrades, automation and better operational processes. You'll also help maintain alignment with the NIST Cybersecurity Framework and applicable Network and Information Systems (NIS) Regulations. What You'll Bring You'll have significant hands-on experience supporting complex IT, network … of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability to maintain security policies, procedures, technical documentation and audit evidence. A methodical approach ...

data centers, critical facilities, manufacturing, utilities, pharmaceuticals, energy, or other high‐availability industrial environments Knowledge of OT cybersecurity practices and frameworks, including IEC 62443, NIST Cybersecurity Framework, NIST SP 800‐82, or equivalent industry guidance Relevant certifications in industrial automation, networking, Windows or cloud infrastructure, virtualization, cybersecurity, or project/ ...

executive reporting for leadership and the board Own end-to-end audit readiness for SOC 2 Type II, ISO 27001, Cyber Essentials Plus, and NIST 800-53 Embed DevSecOps and secure SDLC practices into CI/CD pipelines Oversee penetration testing, red teaming, and threat modeling across core infrastructure Serve … leadership role Experience with Zero-Trust security roadmaps, policies, and risk assessments Experience with SOC 2 Type II, ISO 27001, Cyber Essentials Plus, and NIST 800-53 Experience embedding DevSecOps and secure SDLC practices into CI/CD pipelines Experience overseeing penetration testing, red teaming, and threat modeling Experience with ...

frameworks into practical improvements. Key Responsibilities Own and develop the Group cyber risk register. Develop and embed security policies, standards and governance processes. Apply NIST CSF and CIS Controls in a real-world environment — practical implementation experience is essential. Support alignment with NIST CSF, CIS Controls and ISO 27001 . … third-party security assurance and supplier risk management. About You You’ll have proven experience in Cyber GRC , with demonstrable hands-on experience using NIST CSF and CIS Controls to assess, improve or implement security controls. We’re looking for someone who is: Practical and commercially minded, rather than purely ...

frameworks into practical improvements. Key Responsibilities Own and develop the Group cyber risk register. Develop and embed security policies, standards and governance processes. Apply NIST CSF and CIS Controls in a real-world environment - practical implementation experience is essential. Support alignment with NIST CSF, CIS Controls and ISO 27001 . … third-party security assurance and supplier risk management. About You You’ll have proven experience in Cyber GRC , with demonstrable hands-on experience using NIST CSF and CIS Controls to assess, improve or implement security controls. We’re looking for someone who is: Practical and commercially minded, rather than purely ...

against internal security requirements and external commitments, including certification and regulatory requirements. Provide subject matter expertise in the application of established standards such as NIST, PCI-DSS, GDPR, COBIT, ISO 27001 and Cyber Essentials to current and future programs of work. Prepare for and support internal and external compliance audit … frameworks and governance across the company. Qualifications One of the risk or security certifications (CISSP, CRISC, CISM). Good knowledge and practical experience of NIST, PCI-DSS, GDPR, COBIT, ISO 27001 or Cyber Essentials. Previous experience in a similar role with the ability to work in a dynamic and changing ...

developing security artefacts such as Security Management Plans, Risk Assessments, and Security Architecture Documents. Strong technical understanding of information systems, cybersecurity frameworks (ISO 27001, NIST, CE+, DCC), and related controls. Ability to facilitate certification processes, including writing, coordinating, and prioritising remediation actions. Professional qualifications such as ChCSP, CISM, CISA, CISMP … residency of at least 5 years. Preferred but not essential: Experience within space or aerospace communication systems. Knowledge of cybersecurity standards such as NIST SP 800-53. Higher‐level security vetting such as DV, supported by a 10‐year unbroken UK residency. This role offers a unique chance ...

Information Security Risk Framework. Assess the effectiveness of information security controls and identify opportunities for improvement. Apply recognised security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, PCI-DSS, and other relevant best practices in a proportionate and risk-based manner. Liaise with Cyber Security, IT, Business Continuity … Management principles and methodologies. Experience conducting risk assessments, control reviews, audits, or assurance activities. Technical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS, and related security practices. Strong communicator with positive influencing and interpersonal skills. Ability to synthesise complex technical and ...

risksLogical Security control architectures, mapping to conceptual and contextual architecturesOrganizational and Operational architectures. Security controls in line with good industry Security practices (for example: NIST, ISO, CIS, NCSC, etc.), and relevant UK Cyber Regulation and Standards. Programmes or project to design and implement those controlsReview, challenge/validateClient requirements and … assure new and existing informationDiscovery and audits, for extraction of findings and documentation of recommendationsThe adoption of Cyber/Technology Security Controls Frameworks (NIST/ISO/ISF/COBIT/etc.) and using this to implement solutions. DemonstrateSubject matter knowledge in the architecture of specific Security domains (for example ...

Security control architectures, mapping to conceptual and contextual architectures Organizational and Operational architectures. Security controls in line with good industry Security practices (for example: NIST, ISO, CIS, NCSC, etc.), and relevant UK Cyber Regulation and Standards. Programmes or project to design and implement those controls Review, challenge/validate Client … and existing information Discovery and audits, for extraction of findings and documentation of recommendations The adoption of Cyber/Technology Security Controls Frameworks (NIST/ISO/ISF/COBIT/etc.) and using this to implement solutions. Demonstrate Subject matter knowledge in the architecture of specific Security domains ...

Security control architectures, mapping to conceptual and contextual architectures. Organizational and Operational architectures. Security controls in line with good industry Security practices (for example: NIST, ISO, CIS, NCSC, etc.), and relevant UK Cyber Regulation and Standards. Programmes or project to design and implement those controls. Client requirements and supporting … and existing information. Discovery and audits, for extraction of findings and documentation of recommendations. The adoption of Cyber/Technology Security Controls Frameworks (NIST/ISO/ISF/COBIT/etc.) and using this to implement solutions. Demonstrate Subject matter knowledge in the architecture of specific Security domains ...

London/Birmingham Hybrid | 2 days onsite per week Up to £140,000 + package We are looking for a Global Senior Security & Compliance Architect to shape security, governance and assurance across large-scale cloud ...

About Marex Marex Group plc (NASDAQ: MRX) is a diversified global financial services platform providing essential liquidity, market access and infrastructure services to clients across energy, commodities and financial markets. The group provides comprehensive breadth ...

SailPoint Machine Identity Security (MIS) Consultant Key Responsibilities Lead the implementation, configuration, and integration of SailPoint MIS across cloud and on-prem environments. Deploy automated discovery to identify service accounts, machine credentials, and unmanaged non ...