6 of 6 NIST Jobs in the North East

of proportionate remediation and security improvements. Knowledge of recognised cyber security frameworks, standards and guidance, such as DSPT, CAF, CIS Controls, NCSC guidance or NIST, and experience of supporting compliance or assurance activity. Ability to communicate technical cyber security information clearly to a range of audiences and produce high-quality ...

environments, including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems.Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent.GenAI security: experience assessing and mitigating risks ...

migrated workloads. Define encryption standards (at rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. ...

will be comfortable working with a range of stakeholders and possess: Experience working with frameworks such as ISO 27001, SOC 2, Cyber Essentials, NIST or CIS Controls Experience supporting organisations through audits or compliance assessments Strong communication and stakeholder management skills The ability to translate technical or regulatory requirements into ...

security strategies, frameworks, and best practi cesConduct security risk assessments, gap analyses, and aud itsSupport clients in achieving and maintaining compliance (e.g. ISO 27001, NIST, GD PR)Develop and review security policies, procedures, and documentat ionPerform vulnerability assessments and coordinate remediation effo rtsDeliver threat modelling workshops and support secure solution … security into business proces ses Required Skills & Experi enceProven experience in an Information Security Consultant or similar roleStrong understanding of security frameworks (ISO 27001, NIST, CIS Contr ols)Experience conducting threat modelling exercises and risk-based security assessm ents Desirable Qualifica tionsProfessional certifications such as CISSP, CISM, CRISC ...

and delivering regular executive presentations. Able to challenge unsafe practices and translating between technical teams, cyber, legal, privacy, and business.AI regulatory landscape — familiarity with NIST AI RMF, ISO 42001, EU AI Act, or equivalent frameworks.Your BackgroundEssentialDegree in data governance, data science, computer science, or a related field.Significant experience leading technical … business-critical reporting data.Practical experience embedding governance into data platform delivery — CI/CD, automated checks, data contracts.Familiarity with AI governance frameworks such as NIST AI RMF, ISO 42001, or EU AI Act.Python or SQL used in a data quality or governance automation context.Relevant certifications: DAMA/CDMP, DCAM, CIPP ...