26 to 50 of 102 NIST Jobs in the North of England

Security, Cyber Risk, IT Audit or Operational Risk . Proven second line risk experience within a regulated environment. Good understanding of frameworks such as NIST, ISO 27001 and operational resilience principles. Knowledge of emerging technology and AI-related risks. Strong stakeholder management, communication and analytical skills. Ability to influence senior ...

e.g. Microsoft Fabric, Databricks) Broad enterprise technology background (e.g. ServiceNow, CRM, ERP, cloud, infrastructure) Solid knowledge of Azure and cyber security frameworks (SIEM, XDR, NIST, ISO27001) Additional Information Location: Remote, with ~2 days onsite travel Requirement: Must be a sole UK national ...

Experience with threat modelling methodologies (STRIDE, MITRE ATT&CK etc.). Understanding of IAM, encryption, networking and cloud-native security controls. Knowledge of CIS, NIST, ISO27001 and security architecture frameworks. Experience working within Agile delivery environments. Excellent stakeholder engagement and communication skills. CISSP, CCSP or equivalent certifications desirable. What ...

environments, including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems.Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent.GenAI security: experience assessing and mitigating risks ...

environments, including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems.Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent.GenAI security: experience assessing and mitigating risks ...

reporting, while managing tasks to time and quality across multiple priorities.You are familiar with recognised frameworks and standards such as ISO/IEC 27001, NIST CSF, IEC 62443 or NIS 2, and can communicate clearly with technical and non-technical stakeholders within multidisciplinary teams.You hold a degree-level qualification ...

and incident response processes.Experience exposure to red-teaming would be great but not crucialExperience of use case developmentAn understanding of security best practice frameworks (NIST, ISO27001 etc)Good understanding of threat assessmentA technical IT backgroundStrong problem-solving skills and go-getter attitudeExcellent communication skills and ability to work independently ...

Service Edge (SSE) technologies. Experience within large-scale financial services, banking, or other highly regulated environments. Knowledge of regulatory frameworks including PCI-DSS, ISO27001, NIST Cyber Security Framework, CIS Controls, and relevant financial industry regulations. Experience supporting network security transformation, cloud migration, and hybrid networking programmes. Familiarity with software-defined ...

equivalent experienceRelevant qualifications, for example ITIL, CISSP, CIPP/E, COMPTIA SECURITY+, SANS401, 501 etc. Familiarity with information security frameworks such as ISO27001, NIST etc; Willingness to operate as part of an ‘on-call roster’, travelling to assist our UK and EMEA clients when required in an incident management capacity ...

migrated workloads. Define encryption standards (at rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. ...

migrated workloads. Define encryption standards (at rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. ...

Desirable Experience Experience with Microsoft Copilot for Microsoft 365 and/or Copilot Studio. Knowledge of AI governance frameworks such as ISO 42001 or NIST AI RMF. Experience working within cybersecurity, technology, financial services, or other regulated environments. Exposure to Microsoft Purview, Power Platform, or Azure AI. Experience delivering ...

response exercises and real incidentsOwn cyber risk management and contribute to the enterprise risk register.Ensure compliance with relevant standards and frameworks (e.g. ISO 27001, NIST, Cyber Essentials, ICS security guidance).Define and maintain cyber security policies, standards, and procedures across IT and OT.Support audits, assessments, and regulatory or customer assurance ...

programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve challenging security problems through research ...

internal and external assessmentsSupport the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning the security risk management process to include ...

weaknesses, non-compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility of: Security risks, Compliance status ...

and segmentation. Knowledge of Zero Trust architecture. Understanding of secure network design principles. Experience with threat modelling and security risk management. Familiarity with CIS, NIST and ISO27001 frameworks. Strong stakeholder management and documentation skills. CISSP, CCNP Security or equivalent desirable. What's in It for You High-profile enterprise transformation ...

implementing enterprise-scale security automation and orchestration. Strong understanding of Security Operations and Incident Response. Deep knowledge of security frameworks including: MITRE ATT&CK NIST Cybersecurity Framework Experience with Windows, Linux/UNIX and database technologies. Strong scripting and automation skills, ideally with Python, alongside experience with Java, Perl ...

and client engagement skills Experience with automation and scripting (PowerShell, Python, etc.) Desirable: Experience with vulnerability and exposure management tools Knowledge of security frameworks (NIST, ISO 27001, CIS) Relevant security certifications (e.g. CISSP ...

design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR, and PCI-DSS Working closely with engineers, architects, and stakeholders to embed security by design Contributing to Agile delivery teams and supporting continuous improvement About ...

design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR, and PCI-DSS Working closely with engineers, architects, and stakeholders to embed security by design Contributing to Agile delivery teams and supporting continuous improvement About ...

risks and limitations.Experience designing Power BI dashboards, compliance scorecards, KPI/KRI reporting or executive management information.Experience reviewing general IT controls including: ISO27001, NIST, user access (including management of joiner and leavers), segregation of duties, information security, cyber security and personal data.InclusionFreshfields is an equal opportunities employer and all applications ...

assessments on internal products and third-party SaaS vendors, turning technical flaws into clear risk recommendations Framework Alignment: Ensuring applications comply with PCI-DSS, NIST, and OWASP standards without creating operational friction for developers What you'll bring Experience: 6+ years in InfoSec, cybersecurity advisory, or application security Tech Depth ...

Defender for Cloud) or CrowdStrike . Experience with SOC design, SIEM/XDR integrations, detection engineering, and cloud security . Knowledge of Zero Trust, NIST, ISO 27001, PCI DSS, DORA, and MITRE ATT&CK . Relevant certifications such as CISSP, CISM, CISA, CySA+ ...

executing triage processes. Ensuring regulatory compliance across the service desk, adhering to OFGEM licence conditions, SEC/REC requirements and cybersecurity standards (ISO 27001, NIST-aligned controls), and preparing for and managing audits, including Independent Compliance Officer (ICO) reviews. Collaborating on cross-functional projects, such as integrating L&D with ...