226 to 250 of 326 NIST Jobs in the UK excluding London

with clients, delivery teams, and senior stakeholders to embed security into solution design Standards & Compliance – Ensure adherence to industry standards such as ISO 27001, NIST, and government security policies Skills and Experience Experience working as a Security Architect or in a senior security role within complex environments Strong practical experience … experience conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. ...

party supplier risk management, identifying and mitigating vendor risk across the supply chain Contribute to the implementation of additional frameworks and standards such as NIST, FedRAMP and others as the business scales internationally Identify opportunities to streamline onboarding, security reviews and compliance workflows through smarter documentation and process design What … Computer Science, Information Security, Cybersecurity, Data Protection, Information Governance or Risk Recognised qualifications such as CISSP or CompTIA Security+ Exposure to frameworks including NIST, HIPAA, FedRAMP or DORA Knowledge of DevOps or DevSecOps practices Prior experience of a scale-up or growth‐stage SaaS company Please note ...

Head of IT Security, Head of Cyber Security, ISO27001, NIST, CISM, CISO, Leeds Head of IT Security required to work for an exciting Law Firm based in Leeds, West Yorkshire. This will be a hybrid role where you will be expected to be in the office circa 2 days ...

practical knowledge of NCSC CAPS Evaluation processes and practices with awareness of generic Secure by Design Principles as presented by NCSC, UK MOD and NIST* Practical experience of following DevSecOps lifecycles for embedded software/firmware* Experience in safety-critical engineering and/or developing embedded software/firmware ...

industrial, energy, utilities or Critical National Infrastructure environments Knowledge of OT security principles and frameworks such as IEC 62443, Purdue Model, NCSC CAF or NIST Networking certifications such as CCNA or CCNP would be advantageous At Sword, our core values and culture are based on caring about our people, investing ...

assurance experience, in-house or in practice CISA qualified or working towards it Strong grounding in ITGCs, cyber security controls and cloud Familiarity with NIST, and ideally ISO 27001 or COBIT Someone who can challenge technical people constructively and land findings without friction Comfortable working autonomously and owning their ...

tests are undertaken. Integrate OT asset visibility and threat detection platforms. Maintain compliance with energy sector regulations and frameworks, including ISA/IEC 62443, NIST SP 800-82, and others. Provide procedural and technical cybersecurity advice to project designers, engineers, and testers. Monitor and report on cybersecurity target achievements and ...

will partner with engineering and product teams to embed security-by-design and advance Zero Trust, IAM and compliance with PCI, ISO, CIS, NIST and GDPR. You will guide architecture decisions, evaluate emerging technologies, and drive incident readiness and resilience initiatives to protect a global mobility platform. #J-18808-Ljbffr ...

with security best practices. The ideal candidate brings cloud security expertise, familiarity with SIEM/SOAR/EDR tools, and knowledge of frameworks like NIST/ISO. Willingness to obtain required UK clearance is essential. #J-18808-Ljbffr ...

across air-gapped systems. DV clearance is essential. The position is hybrid remote based in Salisbury, working with Infrastructure, Platform and Security teams under NIST and MOD-aligned policies for a UK #J-18808-Ljbffr ...

handle audits, risk management, policy, and due diligence, while applying engineering skills like API integrations and data querying to evidence controls across SOC 2, NIST CSF, and ISO 27001. You’ll collaborate with auditors and engineers alike, helping modernize how we monitor and evidence controls using Anecdotes or equivalent platforms. ...

Fintech Solutions is seeking a hands-on GRC Engineer to help build, scale, and operate our governance, risk, and compliance program across SOC 2, NIST CSF, ISO 27001, and other frameworks. This role blends audits, risk management, and policy with engineering-oriented tasks like API integrations and data querying. ...

spanning London, Staines and Salford Quays. You will drive automation, mentor engineers, and partner with product, engineering and compliance teams to ensure ISO 27001, NIST and GDPR alignment across the software lifecycle. #J-18808-Ljbffr ...

leakage, model access control and agentic tool-use risk Familiarity with regulatory frameworks relevant to the sector, including DORA, UK GDPR, ISO 27001 and NIST CSF Experience running structured risk assessments and translating them into actionable controls Strong stakeholder management, with the confidence to engage both technical teams and senior … generative AI architectures, including agentic and tool-use/connector risk AI governance concepts and frameworks, such as ISO/IEC 42001 and the NIST AI Risk Management Framework DORA, ISO 27001, NIST CSF and UK/EU GDPR requirements Vendor and third-party risk assessment methodology Secure software development ...

Management: Establish robust cyber security governance frameworks tailored to OT environments. Spearhead comprehensive security risk assessments and gap analyses using industry frameworks such as NIST CSF and IEC 62443. Based on these assessments, identify the most cost-effective security controls in line with the client’s risk appetite, balancing risk … industrial control systems and SCADA environments is expected. Standards & Regulatory Knowledge: Strong familiarity with OT security standards and frameworks such as IEC 62443 and NIST CSF, and with relevant regulations like the NIS Regulations and HSE OG-0086. Ability to apply these frameworks in practice and guide organisations through compliance ...

Principal Accountabilities Information Security Develop, implement, and maintain information and cyber security policies, standards, and procedures Ensure alignment with recognized frameworks (ISO 27001, NIST CSF, CIS Controls) Conduct risk assessments across IT, cloud, and Operational Technology (OT) environments Support incident response planning and continuous improvement of security controls Embed secure … implementing data governance frameworks Strong understanding of international data protection and cybersecurity regulations JOB DESCRIPTION Experience working within regulated environments Familiarity with ISO 27001, NIST, or equivalent frameworks Experience supporting audit and compliance processes Desired Experience in the energy, utilities, or critical infrastructure sector Exposure to Operational Technology (OT) environments ...

Information Security Management System (ISMS) , including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST/CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks … purely theoretical knowledge. Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO 27001/27002, NIST, CIS Controls, PCI-DSS and Cyber Essentials Plus . Experience developing and maintaining security policies and procedures. Experience with third-party/vendor risk management ...

Assurance: Conducting thorough security risk assessments for partners, suppliers and third parties across the contract lifecycle. Framework Compliance: Supporting alignment with key frameworks including NIST CSF 2.0, Cyber Essentials Plus, UK GDPR/Data Protection Act 2018 and relevant industry regulations. IT Risk Management: Supporting group IT risk assessments, tracking … party assurance, or information security environments. Strong practical understanding of PCI DSS requirements and compliance frameworks. Solid understanding of common security standards and laws (NIST 800-53, ISO 27001, SOC 2 Type II, Cyber Essentials Plus, UK DPA 2018). Exceptional verbal and written communication skills with the confidence ...

Purdue Model and OT/IT network segregation principles Awareness of OT/ICS security frameworks such as IEC 62443, NCSC CAF or NIST 800-82 Experience of data centre facilities planning (power, cooling, rack layout), or willingness to work closely with facilities teams on this Working knowledge of PowerCLI ...

coordinating third-party security providers such as managed SOC or security service partners. Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF or similar. Experience in an engineering or manufacturing business delivering long-lived systems would be helpful. Experience in high-trust, regulated or mission-critical ...

latency, and strong cyber security defenses. The role focuses on OT network design, ICS management, and implementing security strategies per IEC 62443/NIST/ISO 27001 standards in a fast-paced scale-up environment. #J-18808-Ljbffr ...

implementing security standards, processes, and governance within large corporate IT environments Working knowledge of OT security frameworks and standards, including ISA/IEC 62443, NIST SP 800-82, and the Purdue Enterprise Reference Architecture (PERA) OT Security Technical Lead Due to the volume of applications received for positions, it will ...

Fairness, explainability, transparency, and AI safety AI risk management and governance AI/ML lifecycle and model development practices Regulatory frameworks (EU AI Act, NIST AI RMF, ISO 42001) Does this sound like your next career move? Apply today. Working with Certain Advantage We go the extra mile to find ...

identity, authorisation, supply‐chain integrity, and the need for guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. ...

advise on vulnerability, risk, audit and compliance in business contexts across multiple UK sites including Portsmouth, Farnborough and Bristol. You will apply frameworks like NIST and ISO27001, develop risk models, support accreditation and governance, and articulate mitigations to customers, while coordinating with stakeholders and expanding knowledge of MITRE ATT&CK. ...