76 to 100 of 211 NIST Jobs in London

existing system designs, including recommending sensible mitigations that balance cost, risk and usability. Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). Experience in one of the following specialisms: AI/ML/Data/Cloud/M365/Security Architecture Experience in application architecture ...

existing system designs, including recommending sensible mitigations that balance cost, risk and usability. Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). Experience in one of the following specialisms: AI/ML/Data/Cloud/M365/Security Architecture Experience in application architecture ...

multi‐brand or multi‐region organisations. Experience of system integrations, APIs and data flows. Knowledge of IT governance (ITIL V4), security frameworks (ISO27001, NIST CSF 2.) and compliance requirements (PCI DSS). ATTRIBUTES (Essential): Strong communicator, able to engage confidently with both technical and non‐technical stakeholders. Organised, methodical and ...

management and communication skills. Experience working within regulated environments. Excellent analytical and problem-solving capabilities. Desirable Experience Knowledge of DORA, NIS2, ISO 27001 and NIST Cybersecurity Framework. Experience designing and facilitating cyber resilience scenario testing. Governance, RACI and RAID management experience. Experience supporting large-scale Operational Resilience programmes. What ...

management and communication skills. Experience working within regulated environments. Excellent analytical and problem-solving capabilities. Desirable Experience Knowledge of DORA, NIS2, ISO 27001 and NIST Cybersecurity Framework. Experience designing and facilitating cyber resilience scenario testing. Governance, RACI and RAID management experience. Experience supporting large-scale Operational Resilience programmes. What ...

and/or workstreams within complex client environments. Background spanning advisory, project delivery and hands‐on technical implementation Familiarity with security regulations and frameworks (NIST, NIS, CAF, ISO 27001) Experience working with both technical teams and executive stakeholders Commercial awareness, including experience contributing to business development, bids, or account growth ...

security risks, including LLM threat modeling, prompt injection, data leakage via AI tools, and agentic workflows. Familiarity with AI governance frameworks such as NIST AI RMF, ISO 42001, or the EU AI Act. Experience conducting security architecture reviews, threat modeling, and risk assessments. Technical Knowledge Identity & Access Architecture (IAM, CIAM ...

programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve challenging security problems through research ...

both technical and non-technical audiences. Strong leadership, problem-solving and stakeholder-management capabilities. Familiarity with security frameworks such as ISO 27001 and NIST is advantageous. Relevant professional qualifications such as CISSP, ITIL, CompTIA Security+, SANS or equivalent would be beneficial. Existing Government Security Clearance is advantageous, although candidates should ...

regulatory consultations and certification body interactions. What We're Looking For Proven, hands‐on experience with ISO 27001/27004/27005 and the NIST Risk Management Framework (RMF), applied to regulated hardware or embedded product programmes. Experience owning a security risk management system for highly regulated, safety‐critical products ...

Strong experience configuring EDR tools CrowdStrike Falcon or MS Defender Experience with Incident Response and Vulnerability management Knowledge of frameworks such as ISO 27001, NIST, CIS or PCI-DSS Experience with modern Microsoft security tooling Experience working in Professional Services or enterprise environments Hybrid working: 3 days onsite/ ...

their timeline, without breaking the systems that run their business. Lead architecture reviews, threat modelling sessions, and control gap assessments against frameworks like NIST, ISO 27001, and industry-specific regulation. Translate risk into a roadmap Turn assessment findings into a prioritised remediation plan the client's engineering teams can actually ...

years of hands‐on experience as a Devops or Platform engineer Excellent understanding of networking andA WS cloud. Knowledge of security frameworks (ISO 27001, NIST) applied in practice. Experience with DevOps tooling, automation, and secure system design. Certifications such as CISSP, CISM, CCSP, or cloud security certifications are desirable. Desirable ...

and other regional laws in those fields; it helps if you understand related frameworks and standards, such as ISO 27001, 27701, 23894 and 42001, NIST Privacy and AI Risk Management frameworks, SOC 2, and Privacy by Design (PbD) principles. On the last bullet: we are interested in your practical abilities ...

fraud detection, digital banking security, and third-party/vendor risk management. Advise financial institutionsonregulatory compliance(e.g., FCA/PRA, - relevant regulations, , ISO 27001, NIST,CSF, Data Privacy regulation). Act as a thought leader, contributing to industry forums, white papers, and public discussions ondigital security, cyber risks, and operational ...

technology platforms (OneTrust, ServiceNow GRC, Archer, MetricStream, or similar). Familiarity with widely used GRC frameworks and standards (ISO 27001, ISO 27701, SOC 2, NIST CSF, COSO, or similar). Working knowledge of GDPR, the EU AI Act, and the wider regulatory landscape across the UK and EU. Exposure ...

and influence outcomes in support of enterprise projects. You will be confident working across the major information security frameworks and standards, including ISO 27001, NIST and SOC 2, and able to shape risk, compliance and control decisions in a way that keeps both us and our clients secure without slowing ...

qualification in cyber security, IT or a related field, or equivalent demonstrable experience. Strong working knowledge of industry frameworks and standards such as NIST, CAF and ISO27001. Strong interpersonal skills and a proven desire for continued personal development. Due to the nature of the work we can only represent sole ...

appropriately recorded and accepted. Ensure penetration testing and remediation activities align with relevant security standards, regulatory requirements and industry best practice, including OWASP, NIST, ISO 27001, PCI-DSS, GDPR and CAF. Ensure appropriate governance, documentation and evidence is maintained throughout the testing lifecycle. Provide assurance over the quality and effectiveness ...

recovery and business continuity Data platforms and integration architectures Familiarity with one or more of the following technology frameworks and best practices: ITIL COBIT NIST ISO 27001 Well-Architected Frameworks Cloud Adoption Frameworks Experience evaluating technology risks, technical debt and technology investment requirements. Solid understanding of core cybersecurity principles and … transformation programmes. Exposure to cybersecurity risk assessments, cloud security reviews, security architecture, or technology control frameworks. Familiarity with cybersecurity frameworks and standards such as NIST CSF, CIS Critical Security Controls or ISO 2701. Industry-recognised certifications, such as: ITIL TOGAF COBIT CISSP CISM CCSP CRISC Experience working with private equity ...

substantial training leading to nationally recognised certifications, such as chartered or principal status with the UK Cyber Security Council, or certifications such as CompTIA, NIST, PCiIAA, CISMP, CISSP, CREST, ISO27001 Lead Implementer/Auditor, SABSA, and TOGAF. A Mentor will be on hand to provide support and guidance throughout your ...

system designs or products, including recommending sensible mitigations that balance cost, risk and usability. - Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). - Deep architectural xxperience in one of the following specialisms: AI/ML Security/Cloud/M365/DevSecOps Security Architecture - Experience ...

system designs or products, including recommending sensible mitigations that balance cost, risk and usability. - Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). - Deep architectural xxperience in one of the following specialisms: AI/ML Security/Cloud/M365/DevSecOps Security Architecture - Experience ...

certifications (SC‐100, SC‐200, SC‐401, etc.). Industry‐recognised certifications such as CISSP, CCSP, CISM, GIAC, etc. Familiarity with compliance frameworks – GDPR, NIST AI RMF, ISO27001, SOC2, etc. Ability to build organisational culture, drive employee engagement, strengthen inclusion and diversity, reduce attrition, and attract top talent. Growth mindset ...

experience desirable. Degree or qualificationin cyber security, IT or a related field, or equivalent demonstrableexperience. Strong working knowledgeof industry frameworks and standards such as NIST, CAF and ISO27001. Strong interpersonalskills and a proven desire for continued personal development. Due to the nature of thework we can only represent sole British ...