51 to 75 of 85 NIST Jobs in London

with Microsoft Sentinel , Defender suite , and KQL Strong scripting/automation skills ( PowerShell, Python, Logic Apps ) Solid understanding of MITRE ATT&CK , NCSC CAF , NIST CSF Stakeholder management able to translate technical complexity to non-technical audiences Degree in Computer Science, Cyber Security, or equivalent Desirable: SC-200/ ...

Desirable Skills Experience with modern identity and security approaches (e.g. Zero Trust, adaptive authentication, API security) Familiarity with frameworks and standards (e.g. ISO 27001, NIST, COBIT) Experience integrating CIAM platforms into wider enterprise environments Exposure to cloud platforms, APIs, or directory services (e.g. Active Directory) Strong stakeholder management skills and ...

cloud strategies, security, data, AI, integration, M&A, workflow, automation and shift-left strategy. Familiar with corporate governance and controls; SOC, EU DORA, ITIL, NIST, regulator requirements, COBIT, ITGC. A true people partner with matrix management experience in a global environment. An analytical approach to architecture, understanding trade-offs between ...

IIoT) and industrial data communications Experience with OT cyber security architecture, risk management and security monitoring Familiarity with security frameworks and standards such as: NIST Cyber Security Framework, ISO 27001/ISO 27005, IEC 62443/ISA-99, NCSC CAF/NIS Guidance, NERC CIP Experience working within ...

Systems Analyst ...... Skills required: Cyber Security knowledge Knowledge of Cloud Architecture, AWS and DevOps process Familiar with governance frameworks such as ISO 27001, NIST, Cyber Essentials Stakeholder management skills and ideally management of 3rd part suppliers ...

analytical and problem-solving skills with a pragmatic approach to risk management. Desirable: CIPM certification. CIPT qualification. Experience with AI/ML governance frameworks, NIST AI Risk Management Framework, or equivalent AI governance standards. Got your attention? If you believe that you have the skills and experience for this Data ...

judgment, and ability to work with senior stakeholders. Preferred qualifications Cyber legal experience. Familiarity with AI governance frameworks and risk management such as the NIST AI Risk Management Framework. Benefits Opportunities to innovate in fintech. Tools for personal and professional growth. Inclusive and diverse work environment. Resources to invest ...

Governance Support Support the organisation's cyber security governance framework and compliance activities. Assist in maintaining alignment with recognised security frameworks such as the NIST Cybersecurity Framework (CSF). Monitor policy compliance and support internal and external audit requirements. Maintain and update security policies, procedures, and documentation. Vulnerability Management & Reporting ...

communication protocols (e.g. A2A) Familiarity with MCPs for tool and context integration in agentic systems Familiarity with secure-by-design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open-source AI/ML projects Soft Skills Delivery-focused - you ship working ...

support and infrastructure teams as and when required. You will develop and maintain the incident response plan, cyber essentials and ISO27001 and follow the NIST framework. You will also work with the infrastructure team on a written DR plan and BC plan. Principal Duties/Responsibilities * Design and implement short ...

queues via CrowdStrike Falcon and integrated log management tools. Investigate and escalate alerts where required. 2. Compliance & Governance Support: Assist in maintaining alignment with NIST CSF, track documentation, policy compliance, and audit requirements across ICT teams. 3. Vulnerability Tracking & Reporting: Oversee regular vulnerability scanning schedules. Analyze scan results and recent ...

Head of Information Security - CISSP, CISM, ISO27001, NIST, PCI DSS, GDPR, DevSecOps, Cloud Security, SIEM, SOC, AI Security. Permanent, West London, Hybrid Working. c.£100k +Benefits Head of Information Security/CISO/Senior InfoSec Consultant required to lead and develop a modern, security-first function within a growing technology … Security strategy, policies and governance framework. Define and develop robust security controls inline with both business practices and compliance requirements inc ISO27001, CE+, SOC2, NIST CSF, GDPR and PCI DSS. Embed Secure by Design and DevSecOps principles across engineering teams. Lead cyber risk management, incident response, threat modelling and vulnerability ...

Owning and delivering Moneybox’s information security strategy, roadmap and operating model. Leading the ongoing development of Moneybox’s Information Security Programme, using NIST CSF as the practical risk‐management framework while aligning with ISO 27001 for governance, control maturity and assurance. Reducing real security risk across Moneybox’s technology … model. Experience & Skills Proven experience leading or significantly contributing to an information security function. Strong working knowledge of risk‐based security management and the NIST Cyber Security Framework. Experience developing and delivering information security strategy, roadmaps, policies and controls. Practical knowledge of security technologies and business systems, including identity and ...

stakeholders and technical teams to deliver pragmatic, risk-led outcomes. Key Responsibilities Provide expert advice on cyber risk management frameworks including ISO 27005 and NIST RMF Lead risk identification, assessment and treatment across applications, infrastructure and digital services Facilitate structured risk workshops and threat modelling sessions Assess solution architectures … and sound judgement Any candidates must have an active SC level of security clearance to be considered. Technical Knowledge Security frameworks including ISO 27001, NIST CSF, CIS and NCSC guidance Regulatory landscape including GDPR and PCI DSS Familiarity with HMG and NCSC standards Modern technology environments: Cloud platforms such ...

Greater London is hiring a Contract Cloud Security Consultant to support their Cyber Transformation Programme. The role involves ensuring security alignment with standards like NIST CSF 2.0, leading threat modelling and risk assessments, and promoting best security practices within a matrixed environment. Ideal candidates will have deep knowledge in DevSecOps ...

teams, clients, and formal reports Assist senior penetration testers with research, evidence collection, and report writing Adhere to internal methodologies and industry frameworks, including NIST, OWASP, and CREST best practices What They're Looking For: 1-2 years' experience in vulnerability assessment, security testing, or junior penetration testing Good understanding ...

with clients, delivery teams, and senior stakeholders to embed security into solution design Standards & Compliance - Ensure adherence to industry standards such as ISO 27001, NIST, and government security policies Skills and Experience: Experience working as a Security Architect or in a senior security role within complex environments Strong practical experience … experience conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. ...

technology-led organisation would be highly desirable Qualifications CIPP/E is strongly preferred CIPM would also be beneficial CIPT, ISO 27701, ISO/NIST AI governance or related AI governance training would be advantageous ...

and operational documentation (e.g. operating models, runbooks, DR plans). Desirable Skills IAM/IGA platform certifications. Familiarity with security frameworks (e.g. ISO 27001, NIST, COBIT). Exposure to identity infrastructure (e.g. Active Directory), reporting tools (e.g. Power BI), or cloud integrations. Experience onboarding applications or cloud platforms into ...

scale, SaaS or cloud‐first experience where architecture decisions carried real consequences. Nice to have Published research, talks, or contributions to standards such as NIST, ISO, or OWASP. Experience designing for enterprise and regulated environments. An offensive grounding, formal or informal, that you use to pressure‐test your own designs. ...

designing, negotiating, or managing third‐party testing protocols, incident disclosure frameworks, or auditing regimes. Experience with international standards bodies (e.g., ISO/IEC, INCITS, NIST) or industry coalitions (e.g., Frontier Model Forum), with a track record of drafting, negotiating, or influencing technical and governance standards. An established, high‐trust network ...

identity, authorisation, supply‐chain integrity, and the need for guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. ...

design SMEs to identify threats, develop secure-by-design guidance, and ensure risk remediation across workstreams. The role requires strong experience applying ISO/NIST standards, managing security risks, and collaborating across regional/global teams. #J-18808-Ljbffr ...

forExperience in cyber security, audit, risk management, or assurance within a regulated or technical environmentUnderstanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53)Strong attention to detail and ability to follow structured assurance processesGood communication and documentation skillsDegree or equivalent in cyber security, engineering ...

Define and AI governance frameworks covering model risk management, responsible AI, data lineage, bias/fairness testing, explainability, and regulatory alignment (EU AI Act, NIST AI RMF, ISO/IEC 42001). Act as trusted technical advisor to client CTOs, CIOs and Heads of Data/AI on platform strategy … privacy regulation (GDPR, CCPA) as applied to AI training and inference data. Working knowledge of emerging AI‐specific regulation and standards: EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001. Experience establishing model documentation, audit trail, and approval‐gate processes for production AI systems. Security & Cloud ...