26 to 50 of 85 NIST Jobs in London

leading a risk & control function in a financial services organisation.* Extensive experience working with Risk Management tools e.g Open Pages* Understanding of the COBIT, NIST 2 framework* Extensive experience leading internal audit and external audit bodies.* Proven track record of managing risk related issues for large departments, through the lifecycle ...

services, such as AWS Bedrock, Amazon Q, SageMaker, Google Vertex AI, Anthropic Claude, OpenAI APIs or open‐source model ecosystems Familiarity with ISO 42001, NIST AI RMF, EU AI Act readiness or other AI governance and risk management frameworks Relevant Microsoft certifications across Azure AI, Azure architecture, Power Platform, security ...

and experience • Experience in Information Security, Cyber Security, Technology Risk or Security Governance • Experience in FCA-regulated financial services • Strong knowledge of ISO 27001, NIST and CIS Controls • Strong understanding of Microsoft Entra ID and AWS security • Experience conducting access reviews, risk assessments and supplier assurance • Excellent stakeholder management skills ...

RFPs and vendor management Knowledge of IGA, PAM, JML, MFA, and SSO Experience in complex, federated or global environments Understanding of frameworks (ISO 27001, NIST, GDPR) Strong stakeholder management and delivery capability Relevant certifications (PMP, MSP, CISSP, CISM) advantageous This is a high-impact role for a delivery-focused leader ...

planning, budgeting, risk and dependency management Experience managing multiple stakeholders across Group and divisional IT environments Strong understanding of cyber security frameworks such as NIST and ISO 27001 Excellent communication and stakeholder engagement skills at senior and executive level Relevant certifications (CISSP, CISM, SABSA, TOGAF, MSP) highly desirable This ...

security assessments and producing assurance reports. Ability to engage and influence stakeholders at all levels. Familiarity with security frameworks and standards (e.g., ISO 27001, NIST, CIS Controls). Excellent communication, planning, and organisational skills. Experience managing teams and developing talent. Ability to interpret complex technical and business information to assess ...

CASB, ZTNA, DLP, cloud Firewalling) Ensure every design meets internal and external compliance needs, applying a strong GRC and security-awareness lens (ISO 27001, NIST, PCI-DSS, GDPR) Provide technical assurance across Firewalls, SD-WAN security and identity-based access Present complex security concepts credibly to both technical and executive ...

APIs) Excellent stakeholder management and communication skills Desirable Experience in telecommunications or other highly regulated environments Knowledge of frameworks such as ISO 27001 and NIST Relevant certifications including Qualys Certified Specialist, CISSP or CISM This is an excellent opportunity to play a key role in scaling and enhancing a major ...

APIs) Excellent stakeholder management and communication skills Desirable Experience in telecommunications or other highly regulated environments Knowledge of frameworks such as ISO 27001 and NIST Relevant certifications including Qualys Certified Specialist, CISSP or CISM This is an excellent opportunity to play a key role in scaling and enhancing a major ...

and continual service improvement.Cyber SecurityDefine and maintain the Cyber Security strategy, governance framework and operating model.Ensure compliance with recognised security frameworks including ISO 27001, NIST Cyber Security Framework and IEC 62443.Lead security architecture, Security Operations Centre (SOC), vulnerability management, incident response and cyber resilience activities.Conduct technology and cyber risk assessments … Strong knowledge of enterprise infrastructure architecture, cloud computing, cyber security, IT Service Management (ITSM), business continuity and disaster recovery. (E)Knowledge of ISO 27001, NIST Cyber Security Framework, IEC 62443 and relevant regulatory requirements including GDPR and GxP. (E)Experience working within regulated pharmaceutical, biotechnology or healthcare environments. (P)Excellent ...

experience across security, resilience and risk management within a complex organisation. You will bring: Extensive cyber security leadership experience. Strong knowledge of ISO 27001, NIST or equivalent frameworks. Experience of business continuity, disaster recovery and organisational resilience planning. Knowledge of Facilities Management and Estates, including statutory compliance and contractor management. ...

Data Security and Protection Toolkit and Cyber Assessment Framework (DSPT-CAF), National Cyber Security Centre Cyber Assessment Framework (NCSC CAF), ISO27001:2013/2022, NIST Cyber Security Framework and other relevant regulatory or assurance requirements. Advising healthcare organisations on DSPT-CAF readiness, gap assessment, remediation planning, evidence development, assurance, reporting ...

substantial training leading to nationally recognised certifications, such as chartered or principal status with the UK Cyber Security Council, or certifications such as CompTIA, NIST, PCiIAA, CISMP, CISSP, CREST, ISO27001 Lead Implementer/Auditor, SABSA, and TOGAF. A Mentor will be on hand to provide support and guidance throughout your ...

risk management, and governance frameworks.* Experience with recognized industry benchmarks and certifications such as SOC 1, SOC 2, ISO 27001, PCI-DSS, WLA-SCS, NIST, COBIT, or comparable frameworks.* Strong analytical, problem-solving, and decision-making capabilities.* Excellent communication, presentation, and collaborator management skills.* Ability to balance regulatory obligations with ...

complex Managed Services environments Strong understanding of cloud infrastructure, networking and cybersecurity Experience delivering within Agile environments Knowledge of frameworks such as ISO 22301, NIST, ITIL or similar Excellent stakeholder management and communication skills Desirable certifications include TOGAF, CISSP, CBCP or equivalent. What's on Offer ...

complex Managed Services environments Strong understanding of cloud infrastructure, networking and cybersecurity Experience delivering within Agile environments Knowledge of frameworks such as ISO 22301, NIST, ITIL or similar Excellent stakeholder management and communication skills Desirable certifications include TOGAF, CISSP, CBCP or equivalent. What's on Offer ...

decision-making processes. Risk, Vulnerability & Compliance Management – Lead vulnerability management, third-party security assurance, policy governance, and compliance activities aligned with Cyber Essentials Plus, NIST CSF 2.0, and organisational risk appetite. Incident Response & Threat Management – Coordinate major cyber incident response, act as a senior escalation point, and maintain awareness of ...

access models using cloud based platforms and identity led controls including SSO, MFA and least privilege Developing security blueprints and reference architectures aligned to NIST 800-207, SASE and SSE Supporting network transformation including WAN modernisation, segmentation and secure access Aligning endpoint and network security with modern cloud first architectures ...

experience designing and implementing cybersecurity target operating models, covering governance, processes, capabilities, and organisational structure. Robust knowledge of key cybersecurity regulations and frameworks, including NIST CSF, NIS/NIS2 and other relevant sector standards, and the ability to embed these into strategy and design activities. Ideally, You’ll Also Have ...

and stakeholder environments Strong understanding of secure design principles and risk management Desirable Skills & Knowledge Familiarity with frameworks and standards such as ISO 42001, NIST AI RMF , and relevant AI regulations (e.g. EU AI Act) Experience working in highly collaborative, global environments Background in engineering or hands-on technical delivery ...

practice. This is a hands-on, client-facing role covering: OT/ICS security assessments SCADA and control system environment reviews IEC 62443, NIST SP 800-82 and NCSC CAF aligned work IT/OT convergence, segmentation and remote access reviews OT-aware vulnerability assessments using non-disruptive approaches Reporting ...

runtime security. Experience within highly regulated or enterprise-scale environments. Exposure to cloud-native security platforms and zero-trust architectures. Understanding of SOC2, ISO27001, NIST or Cyber Essentials frameworks. What Success Looks Like Security becomes embedded within the engineering lifecycle rather than acting as a gatekeeper. Automated controls reduce risk ...

runtime security. Experience within highly regulated or enterprise-scale environments. Exposure to cloud-native security platforms and zero-trust architectures. Understanding of SOC2, ISO27001, NIST or Cyber Essentials frameworks. What Success Looks Like Security becomes embedded within the engineering life cycle rather than acting as a gatekeeper. Automated controls reduce ...

architectures and solution designs, such as Privilege Access Management, SSO, IDAM, Network security and encryption. Advise clients on regulatory compliance (e.g., ISO 27001, NIST, GDPR, PCI-DSS) Identify security vulnerabilities in system architectures and articulate these via risk terminology Due to the nature of the role Government Security Clearance ...

Skills & Experience Essential Experience in cyber risk management, ideally within a regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk ...