76 to 100 of 100 NIST Jobs in the South East

Experience in designing or uplifting a TPRM framework, not just operating one Working knowledge of relevant standards and regulation (e.g. DORA third-party requirements, NIST/ISO 27036, SIG/VSA questionnaires) Confident engaging both procurement/legal stakeholders and technical vendor contacts CISSP, CISM or equivalent preferred; TPRM-specific ...

need strong infrastructure foundations combined with enough cyber security expertise to drive a genuine security-by-design approach. Experience with frameworks such as NIST, ISO27001, Cyber Essentials+ or PCI-DSS would be advantageous. #J-18808-Ljbffr ...

drift. Agent orchestration and inter-agent communication protocols such as A2A. Model Context Protocol (MCP). Secure-by-design development principles, including ISO 27001, NIST or OWASP. Experience working with highly regulated, mission-critical or data-intensive organisations. Experience with large-scale data platforms and distributed search. Contributions to open ...

supervising others and the motivation to develop leadership and people‐management skills. Desirable – expertise & experience in any of the following Working knowledge of NIST frameworks (e.g. SP 800-53, SSDF) or equivalent (Software Cyber, AI Cyber Security Code of Practice, ISO 27001, CIS, OWASP) and their application within software development ...

will analyze controls in the GRC platform, drive engineering integration, and ensure continuous, audit-ready controls across cloud and internal systems. Strong knowledge of NIST, ISO 27001, SOC 2 and related frameworks, plus AI-enabled compliance approaches, are essential for success in this role. #J-18808-Ljbffr ...

with clients, delivery teams, and senior stakeholders to embed security into solution design Standards & Compliance – Ensure adherence to industry standards such as ISO 27001, NIST, and government security policies Skills and Experience Experience working as a Security Architect or in a senior security role within complex environments Strong practical experience … experience conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. ...

Information Security Management System (ISMS) , including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST/CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks … purely theoretical knowledge. Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO 27001/27002, NIST, CIS Controls, PCI-DSS and Cyber Essentials Plus . Experience developing and maintaining security policies and procedures. Experience with third-party/vendor risk management ...

Fairness, explainability, transparency, and AI safety AI risk management and governance AI/ML lifecycle and model development practices Regulatory frameworks (EU AI Act, NIST AI RMF, ISO 42001) Does this sound like your next career move? Apply today. Working with Certain Advantage We go the extra mile to find ...

and supporting planning, scheduling and delivery activities. Ideal candidates will have Defence/Aerospace experience in regulated environments, with strong knowledge of ISO 27001, NIST, CAF and security accreditation processes. #J-18808-Ljbffr ...

Advising on security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments Cyber Security Manager Essential Skills Strong background within cyber or information … security Experience working within Defence, Government or National Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing communication skills Understanding of network ...

Advising on security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments Cyber Security Manager Essential Skills Strong background within cyber or information … security Experience working within Defence, Government or National Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing communication skills Understanding of network ...

suspicious activity and potential threats. Ensure the organization's adherence to relevant information security regulations, laws, and industry standards (e.g. HIPAA, PCI DSS, NIST, CIS, ISO 27001, Cyber Essentials+). Coordinate and participate in internal and external security audits, provide evidence, and ensure timely remediation of audit findings. Develop and … related field (or equivalent practical experience). Experience creating Cyber Security roadmaps. Strong understanding of information security principles, frameworks (e.g., ISO 27001, NIST, Cyber Essentials), and best practices. Hands-on experience with security technologies such as firewalls, SIEM, IDS/IPS, vulnerability scanners, endpoint detection and response (EDR), and identity ...

management, digital signatures, key management systems (KMS), and HSMs. Post-Quantum Cryptography (PQC) Knowledge: Strong understanding of quantum computing threats to modern encryption, NIST PQC standards, hybrid key exchange, and strategies for achieving crypto‐agility. Threat Modeling & System Design: Demonstrated ability to perform threat modeling on complex cloud-native applications … clear guidance for both technical teams and senior leadership. Desirable Experience in Fintech, Banking, or highly regulated cloud environments (e.g. PCI-DSS, ISO 27001, NIST guidelines). Demonstrated background in a highly technical role (e.g. Security Engineering, Infrastructure Engineering, Penetration Testing). Experience in infrastructure, application, and AI security (e.g. ...

of actionable insights that help clients strengthen cyber resilience Framework and Methodology Apply structured frameworks such as Cyber Essentials, CIS Controls (v8), CAF and NIST Contribute to the refinement of Saepio’s assessment methodology and supporting materials Maintain awareness of emerging threats, technologies, and regulatory requirements Collaboration and Development Work … technical information clearly Analytical and organised approach with strong attention to detail Eagerness to develop expertise in cyber resilience consultancy Familiarity with Cyber Essentials, NIST CSF, or CIS Controls Experience using common cyber security or IT management tools Exposure to governance, compliance, or policy development processes Certifications such as CISSP ...

guiding or mentoring others. Strong program and project management skills, with a track record of delivering across multiple teams. Solid knowledge of cybersecurity frameworks (NIST 800-53, ISO 27001, SOC 2, and/or FedRAMP) and hands‐on audit experience. Enough technical depth to be the team's technical point … technical SME, or as a bridge between compliance and engineering teams. Experience leading a SOC 2 Type II, ISO 27001, FedRAMP, or NIST 800-53 audit end‐to‐end, and familiarity with OSCAL or other compliance‐automation tooling. Familiarity with security monitoring tools (e.g., Tenable, Splunk), Git, and cloud infrastructure ...

security across manufacturing suppliers and third-party vendors. Support alignment with relevant frameworks and standards, including IEC 62443, ISO/IEC 27001 and the NIST Cybersecurity Framework. Essential Requirements Proven experience developing and implementing cyber security controls and governance in a manufacturing environment. Deep understanding of industrial protocols, network segmentation … improvement. Desirable Requirements A relevant professional certification, such as GICSP, CISSP or CISM. Knowledge of operational technology cyber security standards, including IEC 62443 and NIST SP 800-82. Experience working across multidisciplinary teams in a complex organisation. What Makes This Role Compelling This is an opportunity to influence cyber ...

security components architectures (e.g. SIEM, IAM, gateways, detection and deception capabilities ) Evaluate architectures against Business Line policy and major cyber security standards & regulation frameworks (NIST, ISO, JSP, etc.) Produce justification for architectural choices Ensure technical coordination across a multi-discipline team Present, recommend and demonstrate solutions to customer representatives, peers … and give support to the rest of the team Familiar with Risk Analysis, Network Security, Cryptography, Identity & Access Management (software/hardware development, the NIST Cybersecurity Framework, cloud technologies) Familiarity with threat modelling Able to monitor and measure risk as well as compliance You have the ability to work with ...

and experience • Experience in Information Security, Cyber Security, Technology Risk or Security Governance • Experience in FCA-regulated financial services • Strong knowledge of ISO 27001, NIST and CIS Controls • Strong understanding of Microsoft Entra ID and AWS security • Experience conducting access reviews, risk assessments and supplier assurance • Excellent stakeholder management skills … and experience • Experience in Information Security, Cyber Security, Technology Risk or Security Governance • Experience in FCA-regulated financial services • Strong knowledge of ISO 27001, NIST and CIS Controls • Strong understanding of Microsoft Entra ID and AWS security • Experience conducting access reviews, risk assessments and supplier assurance • Excellent stakeholder management skills ...

and risk management frameworks Reviewing the effectiveness of security controls and recommending proportionate improvements Assessing clients against recognised standards and frameworks, including ISO 27001, NIST and similar methodologies Supporting ISO 27001 implementation, readiness and assurance activities Developing risk registers, treatment plans, policies, standards and security documentation Conducting risk assessments … management or security assurance A strong understanding of cyber security governance, risk and compliance principles Practical experience working with frameworks such as ISO 27001, NIST, Cyber Essentials or similar standards Experience conducting risk assessments, security assessments or compliance reviews An understanding of information security policies, controls, risk registers and assurance ...

and project stakeholders. Identifying opportunities to improve security services through upgrades, automation and better operational processes. You'll also help maintain alignment with the NIST Cybersecurity Framework and applicable Network and Information Systems (NIS) Regulations. What You'll Bring You'll have significant hands-on experience supporting complex IT, network … of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability to maintain security policies, procedures, technical documentation and audit evidence. A methodical approach ...

against internal security requirements and external commitments, including certification and regulatory requirements. Provide subject matter expertise in the application of established standards such as NIST, PCI-DSS, GDPR, COBIT, ISO 27001 and Cyber Essentials to current and future programs of work. Prepare for and support internal and external compliance audit … frameworks and governance across the company. Qualifications One of the risk or security certifications (CISSP, CRISC, CISM). Good knowledge and practical experience of NIST, PCI-DSS, GDPR, COBIT, ISO 27001 or Cyber Essentials. Previous experience in a similar role with the ability to work in a dynamic and changing ...

developing security artefacts such as Security Management Plans, Risk Assessments, and Security Architecture Documents. Strong technical understanding of information systems, cybersecurity frameworks (ISO 27001, NIST, CE+, DCC), and related controls. Ability to facilitate certification processes, including writing, coordinating, and prioritising remediation actions. Professional qualifications such as ChCSP, CISM, CISA, CISMP … residency of at least 5 years. Preferred but not essential: Experience within space or aerospace communication systems. Knowledge of cybersecurity standards such as NIST SP 800-53. Higher‐level security vetting such as DV, supported by a 10‐year unbroken UK residency. This role offers a unique chance ...

technologies, including Zscaler, while working with cross-functional security, networking and infrastructure teams. Key Responsibilities Design and implement enterprise Zero Trust architectures aligned to NIST 800-207 and CISA principles. Develop secure access models using Zscaler ZIA, ZPA, ZDX and Client Connector . Design identity-centric controls covering … Client Connector or similar Zero Trust technologies. Experience with App Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASB . Strong understanding of Zero Trust, NIST 800-207, SASE and SSE . Knowledge of IAM, Entra ID/Azure AD, Okta or Ping . Understanding of SD-WAN, DNS security, routing ...

Cyber GRC Controls SME - NIST CSF 2.0, Controls Frameworks, Assurance £Market Rate (Inside IR35) London/Hybrid 8-10 Week Contract My client is an instantly recognisable organisation seeking a Cyber GRC Controls SME to support a strategic cyber security controls and governance initiative.This role requires expertise in enterprise cyber … control frameworks Proven experience developing and maintaining control libraries Strong understanding of control taxonomy, control objectives and control effectiveness measures Experience mapping controls to NIST CSF 2.0 Knowledge of NIST 800-53 and/or ISF Standards of Good Practice Experience supporting audits, assurance reviews and regulatory requirements Ability ...

Identity & Access Management (IAM) Specialist A large organisation is seeking an experienced Senior IAM Specialist to support a major identity and access management transformation programme. Key Responsibilities * Support Delivery of IAM strategy, architecture and best ...