1 to 25 of 85 NIST Jobs in the North of England

often well suited due to the breadth of technical exposure and security focus these environments can provide. Desirable Experience Knowledge of security frameworks including NIST, MITRE ATT&CK and ISO 27001. Experience leading, mentoring or influencing technical teams. Professional certifications such as CISSP, CISM or equivalent. Experience securing cloud and ...

and cyber threat intelligence processes. Security certifications such as CISSP, CISM, CompTIA Security+, GICSP, CEH, or ISO 27001 Lead Implementer/Auditor. Knowledge of NIST 2.0 CSF or NCSC guidance for Security of IT Systems. Experience working in or supporting nuclear, energy, or manufacturing environments. Familiarity with Active Directory hardening ...

reviews.Strong analytical, troubleshooting and problem-solving skills.Ability to communicate effectively and influence both technical and non-technical stakeholders.Experience working with recognised frameworks such as NIST CSF, ISO 27001 or PCI DSS.DesirableProfessional certifications such as CISSPExperience with Zero Trust security architectures.Experience with CNAPP, CSPM or cloud security platforms.Experience with AI security ...

security controls and monitoring measures, rather than relying solely on templates or standard security checklists. Familiarity with at least one recognised security framework – e.g. NIST, NCSC, MITRE, CyberEssentials, DCC. General attributes required: Strong analytical and problem‐solving skills, with the ability to make informed security recommendations based on technical evidence. ...

Testing and Vulnerability Disclosure Programmes. Understanding of Cyber Threat Intelligence, phishing, social engineering and insider risk management. Good understanding of MITRE ATT&CK and NIST Cybersecurity Frameworks. Strong analytical and problem-solving skills, with the ability to investigate technical security issues and recommend appropriate actions. Ability to produce clear technical ...

validation. Understanding of DevOps, CI/CD and secure delivery practices in an Agile, value-stream environment. Understanding of security frameworks, such as ISO27001, NIST and PCI-DSS. Skills and Qualifications Relevant technical security qualification or equivalent experience, for example AZ-500, SC-200, SC-300, SC-100, CISSP ...

including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems. Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent. GenAI security: experience assessing and mitigating risks ...

network security and encryption. Experience with threat modelling, security assessments and architectural risk analysis. Understanding of regulatory and security frameworks such as ISO 27001, NIST, GDPR and PCI-DSS. Experience with cloud and/or network security would be highly advantageous. Strong stakeholder management and communication skills, with the ability ...

/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical use of MITRE ATT&CK, STIX/TAXII, CVE, CWE, CAPEC, NIST frameworks, CIS Controls, and common threat-intelligence vocabularies. GenAI and GraphRAG: LLM-based extraction, retrieval orchestration, agent/tool integration, prompt design, evaluation, grounding, guardrails ...

of third-party technology risk and assurance, including interpretation of SOC reports and independent assurance outputs. Experience applying relevant frameworks and regulatory requirements, including NIST, PCI DSS, data protection and emerging AI governance requirements. Experience operating in multi-entity or multi-fascia environments where governance is established centrally and executed ...

with ISO27001 principles and broader operational standards such as ISO9001. Implement and maintain security controls aligned with recognised frameworks (e.g. ISO27001, Cyber Essentials Plus, NIST). Lead vulnerability management, patching, endpoint protection, SIEM, and threat monitoring activities. Manage identity and access controls, MFA, privileged access, and conditional access policies. Lead ...

of vulnerability scanning and remediation workflows and the division of responsibility between vulnerability‐program governance, threat‐led escalation, and asset‐owner remediation. Knowledge of NIST CSF, ISO 27001, PCI DSS, NYDFS cybersecurity requirements, or privacy and breach‐response obligations. Relevant certification such as Security+, CySA+, SC‐200, GCIH, GCIA ...

which could include: br/-ISO/IEC 27001 (Cyber Security Management) br/-UK NIS 18 regulations br/-NCSC guidance br/-NIST SP 800 Series br/-Codes and Standards for the Cyber Security of AI (2025) - DSIT br/-NR Security Assessment Principles (SyAPs)/ ...

technologies, Cloud and Emerging technologies, and related risks In‐depth knowledge of compliance standards and governance frameworks including but not limited to Cobit, ITIL, NIST, ISO Professional information technology auditing designation (CISA) Efficient management and execution of the engagements Strong analytical, problem solving and negotiation skills and able to work ...

security programmes. Experience working with security controls, risk management, security processes or security operations. Exposure to frameworks such as ISO 27001, SOC 2, CAF, NIST or similar is useful, but strong practical security experience is more important than framework knowledge alone. Strong client‐facing and consulting skills. Excellent written and ...

will bring 7+ years in information security CISSP, CISM, CISA, an MSc or equivalent Hands-on ISO 27001 experience, plus frameworks such as NIST and PCI DSS Information security risk management and supplier assurance Working knowledge of FCA, PRA, ICO and GDPR requirements The ability to explain technical risk ...

environments (Azure, Microsoft 365, Microsoft Security). Experience leading security operations, incident response, vulnerability management, and cyber risk programmes. Strong understanding of ISO 27001, NIST, and CIS Controls . Ability to engage and influence senior stakeholders, including executives and board-level leadership. Experience managing third-party security providers and driving ...

assessments and support customers in achieving compliance and maturity objectives. Perform cyber security maturity assessments using recognised frameworks such as NCSC CAF, IEC 62443, NIST SP 800-82, and ISO 27001. Advise clients on NIS and NIS2 compliance requirements and support readiness programmes. Produce remediation roadmaps, improvement plans, and strategic ...

security, risk and governance Additional qualifications such as SABSA, TOGAF, CCSP, CCSK, CISM or CRISC Familiarity with standards such as ISO 22301, ISO 42001, NIST CSF or IEC 62443 Oscar Associates (UK) Limited is acting as an Employment Agency in relation to this vacancy. To understand more about what ...

ideally gained within a regulated, high-consequence or security-conscious environment. You'll have a strong understanding of recognised cyber security frameworks such as NIST CSF, ISO 27001 and CAF , alongside experience leading cross-functional cyber initiatives. Excellent communication skills are essential, particularly the ability to take complex technical ...

years + Experience in a cyber-security role Working knowledge of technical and cyber security standards Working knowledge of industry best practices (such as NIST Framework, OWASP top ten, SANS and NCSC Guidance) Technical knowledge of information systems, infrastructure, and networks Security monitoring and testing technologies such as vulnerability scanning ...

Strong understanding of core IT and networking principles Awareness of the evolving threat landscape Skills and experience Experience working within frameworks such as ISO27001, NIST or similar Significant experience in IT security Financial services or e-commerce experience preferred Strong problem-solving skills and attention to detail Ability to take ...

Management Microsoft Defender and Microsoft security technologies SIEM and security monitoring tools Security governance and cyber resilience Frameworks such as ISO27001, Cyber Essentials or NIST Why Apply? This is an opportunity to take ownership of cyber security within an organisation where you'll have genuine influence, direct access to senior ...

/4HANA architecture, integration or governance experience. Defence, manufacturing or engineering sector experience. Operational Technology (OT) architecture and cyber security experience. Knowledge of NIST, ISO27001 or similar security frameworks. Experience supporting cyber assessments, security accreditation activities and remediation programmes. TOGAF, CISSP or equivalent professional certifications. Security Requirements: SC & UK EYES ...

and your team will be involved in the following activities; Advising the client on Cyber Security compliance especially in regard to NIS-D, NIST, ISO 27001, ISA/IEC 62443 and other relevant industries standards and best practices Developing a framework for governance as well as developing Cyber Security and ...