26 to 41 of 41 NIST Jobs in the South West

security strategy and transformation Experience leading teams through significant change Strong executive and Board-level communication Knowledge of NIS/CAF, ISO 27001, NIST and GDPR OT/Critical National Infrastructure experience highly desirable Consultancy or complex regulated-sector backgrounds also considered Existing CISO experience not essential. Strong Deputy CISO ...

alongside business-as-usual, and of managing an IT budget and delivery plan Understanding of security controls and frameworks (Cyber Essentials Plus, ISO 27001, NIST CSF) as they apply to a corporate IT estate, without needing to be a certification specialist The ability to lead, coach and develop a small ...

testing methods are in compliance with SOX 404 requirements. Qualifications You possess deep knowledge of SOX 404 requirements, COSO framework, and IT control frameworks (NIST, ISO27001). You understand how compliance frameworks map to dynamic infrastructures. You have 3+ years of experience in Technology Risk or IT Audit, with ...

haves’ Great communication skills The ability to clearly and confidently convey security risks Knowledge of Cyber Security standards, e.g. Cyber Essentials, ISO 27001, NIST Framework. Administering Active Directory, Group Policy, Office 365, Azure AD, SCCM PowerShell or other scripting languages. This fantastic role comes with a salary of ...

indicators of compromise Windows, Linux and/or macOS internals, with knowledge of key system artefacts for each Memory analysis Ability to explain the NIST incident response phases and work with the MITRE ATT&CK Enterprise framework Understanding of threat actor motivations and methods, and how systems are exploited Excellent ...

repeatable code. Monitoring and enforcement: Use telemetry and automated controls to detect, contain and respond to anomalies. Core Technical Skills : Zero Trust: NCSC and NIST frameworks, micro-segmentation, software-defined perimeters and context-aware access. Cloud and infrastructure security: Azure, AWS, and on-premises virtualised infrastructure. Infrastructure as Code: Terraform ...

into infrastructure designs for mission-critical, business-critical services * Technical leadership that brings clarity and guidance across infrastructure, platform and hosting domains * Understanding of NIST and CIS security controls * Demonstrable experience across several areas such as: - VMware Cloud Foundation - Enterprise server platforms and Windows Server - Linux (e.g., RHEL, Rocky Linux ...

initiatives and projects aligned with the wider Information Security Strategy Provide authoritative guidance on regulatory requirements, data protection and security frameworks including ISO 27001, NIST, PCI DSS and GDPR Oversee security governance across projects, procurement and development activity, ensuring risks are addressed throughout the SDLC and DPIA process Maintain information … such as CISSP, CISM, CISA, an MSc or an equivalent recognised qualification Proven experience managing ISO 27001 and other security governance frameworks such as NIST or PCI DSS Strong understanding of data protection and regulatory requirements including GDPR, FCA, ICO and PRA expectations Experience assessing and managing supplier security risks ...

security assurance requirements, supporting Secure by Design (SbD), cyber risk management and security control implementation in line with JSP 440, JSP 604 and NIST methodologies. Working closely with project teams, security architects, engineers and wider Defence security functions, you will coordinate assurance activities, manage security risks and produce the evidence … Responsibilities Provide security assurance advice and guidance in line with MOD Secure by Design principles and JSP 440. Conduct security risk assessments using NIST 800 methodologies and manage associated mitigation actions. Develop security documentation, assurance evidence, security operating procedures (SyOPs) and awareness briefings. Implement and monitor physical, procedural, personnel and ...

and robust protection. INFORMATION SECURITY CONSULTANT ESSENTIAL SKILLS: Information assurance and risk management experience within government or regulated environments Strong knowledge of ISO 27001, NIST, and government security standards Experience reviewing AWS security controls including IAM, logging, and encryption Strong stakeholder engagement and communication skills TO BE CONSIDERED: Please either … submit (subject to required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS Information Security, Risk Management, ISO 27001, NIST, AWS, Cloud Security, Stakeholder Engagement ...

security assessments, reviewing existing controls, policies and procedures against recognised frameworks and standards. Support audit and assurance activities aligned with ISO 27001 and the NIST Cybersecurity Framework. Identify information security risks, control gaps and areas requiring remediation. Assist clients with risk assessments, compliance reviews and the development of practical recommendations. … security or information security consultancy. Experience conducting information security assessments, audits, risk reviews or compliance activities. Knowledge of ISO 27001 and/or the NIST Cybersecurity Framework. Understanding of information security controls, risk management and governance principles. Strong analytical skills, with the ability to assess security requirements and communicate findings ...

responsibility for operating the controls being assured. Set the enterprise assurance approach, standards and evidence expectations, aligned to organisational risk and recognised frameworks including NIST CSF, ISO 27001 and the Government Cyber Assessment Framework. Ensure assurance coverage is risk-based, proportionate and consistent across UKRI's federated environment, while maintaining … Experience setting proportionate remediation expectations, tracking delivery and escalating material concerns through senior governance routes. (I) Strong knowledge and proportionate application of NIST CSF, ISO 27001 and the Government Cyber Assessment Framework. (S&I) Ability to produce and communicate an authoritative, evidence-based view of enterprise security risk and control ...

JOB SUMMARY Deliver Red Team and Adversary Simulation Activities Deliver threat-led security assessments, adversary emulation and red team activities within complex defence and government environments. You will work as part of the Leonardos delivery ...

outside IR35 Six-month contract with an established UK financial services organisation London/remote working arrangements Ownership of an existing NIST-aligned standards suite Opportunity to influence how controls are implemented and assessed Direct collaboration with technical specialists across multiple disciplines Your responsibilities as Cyber Security Policy & Standards Consultant … Review existing NIST-aligned documentation, identifying where updates or complete rewrites are required. Personally draft and redraft technical requirements, ensuring they are clear, practical and testable. Work with specialists across access management, cryptography, firewalls and Privileged Access Management (PAM). Challenge outdated requirements, resolve gaps and ensure documentation reflects current ...

DV cleared Red Team Operator/Offensive Security Consultant Bristol HQ (3-4 days a week onsite) with travel to local sites Up to £86 p/h Inside IR35 Are you an experienced DV ...

Red Team Consultant Location: Bristol OR Gloucestershire Contract: 6 months Pay: Up to 89p/h (Inside IR35) Please note that due to the nature of the work, you will need to hold active DV ...