76 to 100 of 762 NIST Jobs in England

management, data protection and security operations. Knowledge of Salesforce security architecture, including profiles, permission sets and sharing models. Familiarity with security frameworks such as NIST, ISO 27001 or Cyber Essentials Plus. Professional certifications such as Salesforce Administrator, Advanced Administrator, Platform App Builder, PSPO, SAFe POPM, ITIL, CISSP or CISM. ...

/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical use of MITRE ATT&CK, STIX/TAXII, CVE, CWE, CAPEC, NIST frameworks, CIS Controls, and common threat-intelligence vocabularies. GenAI and GraphRAG: LLM-based extraction, retrieval orchestration, agent/tool integration, prompt design, evaluation, grounding, guardrails ...

advice to technical and business stakeholders. Support wider compliance, risk and assurance engagements. Essential Skills & Experience Security Assurance and Risk Management. ISO 27001 and NIST CSF. Risk Assessments and Risk Treatment. Stakeholder Management and Communication. Security Governance and Compliance. Knowledge of GDPR and related legislation. Desirable Azure and/ ...

knowledge of risk assessment methodologies (e.g. ISO 31000, FAIR, OWASP risk rating). Strong understanding of Gov Assure, CAF, ISO 27001, Cyber Essentials, and NIST frameworks. Experience conducting or supporting security audits and implementing remediation plans. Proficiency in assessing and securing platforms such as Entra ID (Azure AD), Microsoft ...

ingestion strategies, detection engineering and security posture management. Strong working knowledge of Zero Trust architecture and the application of recognised security frameworks such as NIST CSF, ISO 27001, PCI DSS, DORA, MITRE ATT&CK and CSA guidance. Demonstrable experience operating within a Partner delivery model, including customer-facing consultancy, reference ...

security controls are maintained To thrive in this role, you need to have Awareness and understanding of industry security frameworks and guidance such as NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelines Good knowledge of networking (switching, routing, firewalls) Awareness or limited experience with the design concepts ...

across technology, risk, audit, and product teams Industry-recognised risk certifications such as CISM, CRISC, or CISSP Familiarity with frameworks and regulations such as NIST CSF, ISO 27001, SOX ITGC, FFIEC, OCC Heightened Standards, and PCI DSS Preferred Qualifications, Capabilities, and Skills: Experience with AI prompt engineering to enhance stakeholder ...

Familiarity with government and defence security standards such as: HMG/NCSC IA Policies and Guidelines JSP440 and other MoD IA standards Cyber Essentials NIST, NIS-D You will ideally hold CISM/CISSP or similar higher level recognised and current Information Security or Assurance certification Excellent stakeholder communication skills ...

of third-party technology risk and assurance, including interpretation of SOC reports and independent assurance outputs. Experience applying relevant frameworks and regulatory requirements, including NIST, PCI DSS, data protection and emerging AI governance requirements. Experience operating in multi-entity or multi-fascia environments where governance is established centrally and executed ...

Trust & ComplianceEmbed Zero Trust principles across hybrid cloud—identity, segmentation, encryption, and posture control.Align infrastructure with regulatory and compliance frameworks (ISO 27001, SOC2, CIS, NIST).Define security integration patterns across cloud and on‐prem: IAM, PAM, KMS, certificates, secrets management.Partner with security architects to ensure platform designs meet enterprise security ...

Essential Experience 7+ years' experience in cyber security consulting, advisory services, or security programme delivery. Strong knowledge ofcyber security frameworks and standards including: NIST ISO 27001 CAF NIS Experience managing senior stakeholders and delivering complex security projects. Expertise in one or more of the following: OT Security Security Operations ...

Provide guidance for Cyber Assessment Framework and DSPT toolkit. Develop, communicate and implement the security architecture framework (based on ISO 27001/27002 and NIST 800-53). Embed Rackspace’s information security policies, standards and procedures into IT services methodologies. Proactively work with the Rackspace Sovereign Services security team ...

experience in an equivalent role in the technology industry Knowledge and experience with Information Security and Risk Management standards and frameworks such as NIST, ISO 27001/27002 and modern development practices and supporting toolsets (e.g. Agile, DevOps) Ability to understand complex technical systems and the business processes they support ...

accreditation and secure by design processes (ISN2023/09), and associated policies, practices and deliverables across the lifecycle. In the application of standards including NIST Special Publications (e.g. SP 800-30, 37 & 53), and/or RTCA-DO-326A/B, 355A & 356A. That extends outside of traditional enterprise ...

reflected in decisions. About you You will bring: Proven experience in information security, cyber security, technology risk or governance. Strong knowledge of ISO 27001, NIST, CIS Controls and Cyber Essentials. Experience of risk management, audit support and regulatory compliance. An understanding of cloud security, identity management and third-party risk. ...

with ISO27001 principles and broader operational standards such as ISO9001. Implement and maintain security controls aligned with recognised frameworks (e.g. ISO27001, Cyber Essentials Plus, NIST). Lead vulnerability management, patching, endpoint protection, SIEM, and threat monitoring activities. Manage identity and access controls, MFA, privileged access, and conditional access policies. Lead ...

qualifications, such as OSCP or OSCE, are beneficial. Certifications complement, but do not replace, technical credibility, practical risk judgement and executive communication capability. Knowledge NIST Cybersecurity Framework ISO 27001 and ISO 27002 CIS Controls Relevant regulations such as DORA Security architecture principles Cyber threat and attack-path analysis Cloud security ...

accreditation and secure by design processes (ISN2023/09), and associated policies and practices across the lifecycle. In the application of standards including NIST Special Publications (e.g. SP 800-30, 37 & 53), and/or RTCA-DO-326A/B, 355A & 356A. In the application of Defence security standards, such ...

security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled connectivity. Applied knowledge of cybersecurity frameworks and standards, including NIST, ISO 27001, IEC 62443 and the NCSC Cyber Assessment Framework (CAF). Strong understanding of Networking, Ethernet-based industrial networks, switching technologies, high-availability and ...

security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled connectivity. Applied knowledge of cybersecurity frameworks and standards, including NIST, ISO 27001, IEC 62443 and the NCSC Cyber Assessment Framework (CAF).Strong understanding of Networking, Ethernet-based industrial networks, switching technologies, high-availability and network ...

experience across cybersecurity governance, risk and compliance * A solid technical cybersecurity or cyber engineering background * Deep knowledge of cybersecurity principles and recognised frameworks, including NIST and ISO 27001 * Experience within financial services or another highly regulated environment * Knowledge of relevant financial-services regulations, ideally including FCA requirements and DORA * Strong ...

Cyber Assessment Framework and Cyber Essentials • MOD security assurance approaches, including JSP 440, Secure by Design and CSMv4 • ISO/IEC 27001 and NIST frameworks • FSC, IPSA and List N • ONR Security Assessment Principles (SyAPs) • UK GDPR, the Data Protection Act 2018, the Computer Misuse Act, the Official Secrets ...

relevant technologies Information security subject matter expert Expert understanding of industry standards such as CVE, CPE, and CVSS Strong understanding of security frameworks and NIST standards Appropriate security-based qualification; CISSP, GCIH (or demonstrated skills and ability to obtain certification) – more than one certification preferred. Public cloud certifications (or demonstrated ...

property, proprietary technologies, engineering systems, or research and development environments. Comprehensive understanding of cybersecurity risk management, governance, compliance, and frameworks such as ISO 27001, NIST CSF, and SOC 2 Proven ability to establish resilient, scalable, and secure infrastructure, including disaster recovery, business continuity, monitoring, and incident management. Experience managing ...

architectures, including cloud, identity, endpoint and Zero Trust security, together with a sound understanding of recognised frameworks and guidance such as ISO 27001, the NIST Cybersecurity Framework, the Cyber Assessment Framework and NCSC guidance. You will be able to develop technical roadmaps, standards and architectural patterns, assess complex technical risks ...