10 of 10 NIST Jobs in Scotland

generative AI platforms, machine learning environments or AI governance and security controls. ** A solid understanding of cybersecurity principles, frameworks and best practices, such as NIST, ISO 27001 and GDPR. ** Knowledge of AI-specific security risks, including prompt injection, data privacy, model security and AI supply chain vulnerabilities. ** Experience securing enterprise ...

risk into practical architectural solutions that support organisational objectives and digital transformation. Strong knowledge of security, regulatory and industry frameworks (e.g. including ISO 27001, NIST, GDPR and IEC 62443), with the ability to apply these across business, IT and OT environments. Demonstrable experience designing and evaluating secure Cloud and ...

engineering, operations, IT, cybersecurity teams, and third-party providers. Excellent documentation, risk management, reporting, and security assurance capabilities. Desirable Experience Familiarity with IEC 62443, NIST Cybersecurity Framework, ISO 27001, or equivalent standards. Experience with SIEM, OT security monitoring, vulnerability management, asset discovery, and endpoint security technologies. Relevant certifications such ...

influence future actions/processes. Strong coaching, teamworking, collaboration and partnering skills. Awareness of recognised technology governance and cybersecurity frameworks, including COBIT 2019, NIST CSF 2.0 and NCSC CAF would be beneficial but not essential. Experience of auditing AI implementation, multi-year technology change programmes, and use of data analytics ...

engineering teams. Skills & Experience 3+ years' experience in Cyber Security, Information Security, or a related role. Strong knowledge of security frameworks and standards including NIST, CIS, and ISO 27001. Experience implementing and managing IT security solutions and controls. Good understanding of vulnerability management, security monitoring, and incident response. Strong communication ...

with a pragmatic mindset and the confidence to operate across both technical and business environments. Familiarity with frameworks such as NIS CAF, ISO or NIST, and an understanding of modern threat landscapes, will set you up for success. In return, you'll gain exposure across critical infrastructure, renewable energy systems ...

Knowledge of cyber culture development and organisational change practices. Familiarity with recognised cyber skills frameworks such as: SFIA (Skills Framework for the Information Age) NIST NICE Cybersecurity Workforce Framework UK Cyber Security Council Career Framework Relevant industry competency models Desirable Knowledge and Experience Experience within critical national infrastructure, utilities ...

business impact. Relevant professional qualification such as CISA, CISM or CRISC. Desirable: Experience in technology risk functions, knowledge of COBIT, ITIL, ISO 27001 or NIST frameworks, exposure to cyber security, resilience, cloud, data, AI and third-party technology assurance, and experience using data analytics or AI-enabled audit tools. ...

practical knowledge of NCSC CAPS Evaluation processes and practices with awareness of generic Secure by Design Principles as presented by NCSC, UK MOD and NIST Practical experience of following DevSecOps lifecycles for embedded software/firmware Experience in safety-critical engineering and/or developing embedded software/firmware ...

management within a high-threat government environment. Skills and Experience: Proven expertise in risk management, particularly in information security, utilizing recognized methodologies such as NIST 800-30/37 and ISO 31000. Experienced in managing both internal and external cybersecurity risks related to IT systems, services, and data storage, especially … within digital cloud services. Demonstrated ability to provide advice, guidance, and assurance documentation in line with security standards, including NIST, ISO 27001, CIS, CAF, HMG GovS 007, and NPSA. Knowledgeable and hands-on experience with security architecture and Security Information and Event Management (SIEM) tools. Solid track record in risk ...