19 of 19 NIST Jobs in Glasgow

security consultants and architects Working with clients and deliver teams to build government security standards and processes such as ISO27001 standards, CEF, Cyber Essentials, NIST & Cyber Essentials Plus into service and project delivery Performing Security Risk Management of services, projects and client operations. Designing, Building, maintaining and operating ISMS Managing ...

services and cloud-native security monitoring. Experience working within Operational Technology (OT), Critical National Infrastructure, utilities or energy environments. Understanding of security frameworks including NIST, MITRE ATT&CK and Cyber Essentials. Experience supporting SIEM migration or transformation programmes. Current Security Check (SC) clearance or eligibility to obtain clearance. At Sword ...

equivalent, or working towards them. ISO 27001 Lead Implementer or Lead Auditor is desirable. Practical knowledge of recognised frameworks and standards, including ISO 27001, NIST CSF, NCSC CAF, CIS Controls, Cyber Essentials/Cyber Essentials Plus and UK GDPR. Experience in higher education, further education or the public sector ...

and compliance. Security control design and assessment. Cyber security frameworks, standards, regulatory and contractual requirements (ISO/IEC 27001, Cyber Essentials, Defence Cyber Certification, NIST Cybersecurity Framework and more) Evidence gathering, review and traceability. Gap assessments, compliance readiness reviews, audit and certification preparation. Risk identification, documentation and treatment planning. Security ...

engagement. Knowledge or experience of recognised cyber security frameworks, standards and regulatory requirements would be beneficial, including: NCSC Cyber Assessment Framework (CAF) IEC 62443 NIST Cybersecurity Framework Network and Information Systems (NIS) Regulations ISO 27001 Experience working within critical national infrastructure, utilities, energy, manufacturing or other industrial environments would ...

reviews. Conducting OT and ICs risk assessments. Contributing to security architecture and secure-by-design reviews. Delivering assessments against frameworks such as IEC 62443, NIST CSF, NIST SP 800-82 and the NCSC CAF. Producing high-quality reports and client deliverables. Supporting workshops, interviews and stakeholder meetings. Working with colleagues … and conducting security risk assessments, including the identification of threats and vulnerabilities and the development of proportionate mitigation recommendations. Practical knowledge of ISO 27001, NIST, IEC 62443, UK GDPR and the NCSC Cyber Assessment Framework, together with experience delivering security audit and assurance activities. Nice to have ...

demonstrated expertise and experience in one of the following domains:##* **Security Assurance** – Leading the delivery of key security frameworks such as ISO 27001, NIST, and Cyber Essentials to clients, ensuring their systems and processes meet industry standards and are resilient to threats. This includes overseeing tailored implementations, guiding teams … applications through the assessment, design or implementation of effective and secure architectural patterns that align with industry standards (e.g. CIS L1/2, NIST, ISO27001, COBIT, etc.).* **Generative AI** – Enabling the secure design and adoption of Gen AI for business, IT and/or security functions in alignment with ...

analytics, or equivalent deep, hands‐on senior career experience. MLOps and LLMOps: model deployment, monitoring and retraining. Responsible AI frameworks (ISO/IEC 42001, NIST AI RMF, EU AI Act). Enterprise data architecture, data warehousing or semantic modelling (star schemas, dimensional models). Microsoft Fabric, Azure data services ...

digital workplace, cyber security, managed services Strong Azure, M365 and Entra ID/AD knowledge Strong grounding in Zero Trust, Defender/Sentinel, NCSC, NIST, ISO 27001 ITIL v4 Foundation; senior MS certs (SC-100, MS-102, AZ-305) desirable Desirable: team/capability scaling experience, IaC (PowerShell/Bicep ...

databases: MySQL Amazon RDS Amazon Aurora MariaDB CI/CD and build pipeline automation Tooling including: Helm Terragrunt Git ArgoCD Government cloud security standards: NIST OWASP CIS NCSC BASH scripting Python development RESTful microservices IT Service Management (ITSM) Leadership & Product Management Proven ability to lead teams in the design, implementation ...

MySQL compatible DBs: MySQL, RDS, Aurora, MariaDB Build Pipeline automation, CI/CD Build Tooling: Helm, Terragrunt, Git, ArgoCD Government Cloud Security standards (NIST, OWASP, CIS, NCSC etc...) BASH, Python RESTful microservices IT Service Management #J-18808-Ljbffr ...

methodologies, leading comprehensive risk assessments and delivering security audit and assurance programmes. Practical experience applying recognised cyber security frameworks and standards, including IEC 62443, NIST Cybersecurity Framework, NIST SP 800-82, ISO/IEC 27001 and the NCSC Cyber Assessment Framework. Experience planning, managing and delivering consultancy engagements, including managing … and experience to support colleagues. Nice to have CISM or CISA IEC ISA 62443 expert cyber security certificate. Experience with the Cyber Assessment Framework, NIST CSF, NIST SP 800-82, IEC ISA 99/62443 and CIS Controls. Strong understanding of IT and OT security risks. Knowledge of the threat ...

Knowledge of cyber culture development and organisational change practices. Familiarity with recognised cyber skills frameworks such as: SFIA (Skills Framework for the Information Age) NIST NICE Cybersecurity Workforce Framework UK Cyber Security Council Career Framework Relevant industry competency models Desirable Knowledge and Experience Experience within critical national infrastructure, utilities ...

with a pragmatic mindset and the confidence to operate across both technical and business environments. Familiarity with frameworks such as NIS CAF, ISO or NIST, and an understanding of modern threat landscapes, will set you up for success. In return, you'll gain exposure across critical infrastructure, renewable energy systems ...

party supplier risk management, identifying and mitigating vendor risk across the supply chain Contribute to the implementation of additional frameworks and standards such as NIST, FedRAMP and others as the business scales internationally Identify opportunities to streamline onboarding, security reviews and compliance workflows through smarter documentation and process design What … Computer Science, Information Security, Cybersecurity, Data Protection, Information Governance or Risk Recognised qualifications such as CISSP or CompTIA Security+ Exposure to frameworks including NIST, HIPAA, FedRAMP or DORA Knowledge of DevOps or DevSecOps practices Prior experience of a scale-up or growth‐stage SaaS company Please note ...

Purdue Model and OT/IT network segregation principles Awareness of OT/ICS security frameworks such as IEC 62443, NCSC CAF or NIST 800-82 Experience of data centre facilities planning (power, cooling, rack layout), or willingness to work closely with facilities teams on this Working knowledge of PowerCLI ...

security capability. Ideal candidates bring 5+ years in OT security consultancy, strong governance and risk background, and hands-on experience with IEC 62443, NIST CSF, #J-18808-Ljbffr ...

and the application of OT cyber security good practice. In-depth knowledge and practical experience of relevant standards and regulatory frameworks, including ISO 27001, NIST Cybersecurity Framework, IEC 62443, NCSC CAF, UK GDPR, the UK NIS Regulations and applicable energy-sector regulatory requirements. Someone who enjoys a varied environment, sharing … CISM UK Cyber Security Council - Chartered Cyber Security Professional (ChCSP) IEC ISA 62443 expert cyber security certificate. Experience with the Cyber Assessment Framework, NIST CSF, ISO27001, NIST SP 800-82, IEC ISA 99/62443 and CIS Controls. Strong understanding of IT and OT security risks. Knowledge of the threat ...

with active SC clearance. I am keen to speak with candidates who have Strong information risk management experience, including use of methodologies such as NIST 800-30/37 and ISO 31000. CISSP, CISM or CRISC qualification Experience working with system, operational and strategic levels of risk and performing threat … Proven experience using multiple cyber threat intelligence feeds and turning them into actionable reports. Experience providing advice, guidance and assurance against standards such as NIST, ISO 27001, CIS, CAF, HMG GovS 007 and NPSA. Experience managing internal and external cyber security risks to IT systems, services and data storage, particularly ...