276 to 300 of 326 NIST Jobs in the UK excluding London

effective risk management and assurance practices across the business. Support the ongoing development of the Technology Risk Management Framework aligned with recognised standards including NIST Cybersecurity Framework, ISO 27001 and industry best practice. Drive continuous improvement of governance, risk and compliance (GRC) processes, reporting, automation and assurance activities. Support regulatory … retail organisation. Professional certifications such as CRISC, CISA, CISM, CISSP or equivalent. Experience working within large retail, e-commerce or multinational organisations. Knowledge of NIST Cybersecurity Framework, ISO 27001, COBIT and ITIL. Experience with data analytics, continuous controls monitoring or assurance automation. Familiarity with PCI DSS, SOX or other regulatory ...

About the Role We are seeking an experienced Security Architect to provide critical security architecture expertise across our diverse portfolio of customer engagements. In this role, you will ensure that secure-by-design principles, proactive ...

risk and governance. Design and implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review … prompt injection, data leakage and excessive agency. Strong understanding of relevant AI regulation and frameworks, particularly EU AI Act, UK GDPR/ICO, DPIAs, NIST AI RMF and ISO 42001. Experience working with regulated organisations. The ability to communicate equally well with senior executives and technical teams. Nice to have ...

Salary Up to £40,000 per annum We are looking for a talented and motivated Information Security Analyst to join Stagecoach and play a vital role in protecting our network infrastructure, computer systems and data ...

cyber security, audit, risk management, or assurance within a regulated or technical environment Understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Strong attention to detail and ability to follow structured assurance processes Good communication and documentation skills Degree or equivalent in cyber security ...

The Student Loans Company is seeking a Security Risk Analyst in Glasgow to support change initiatives by assessing risks and defining security requirements across projects from concept to delivery. Responsibilities include creating security reports and ...

and delivery effort. Generate, iterate and maintain threat models and cyber risk assessments throughout the project lifecycle, using appropriate frameworks and methods such as NIST RMF. Identify and define proportionate risk treatments by applying suitable security baselines, including NIST RMF and IEC 62443, where appropriate. Generate, manage and track security … bids. Practical experience producing threat models and cyber risk assessments across the full project lifecycle. Knowledge of risk management approaches and frameworks such as NIST RMF. Knowledge of security baselines and control frameworks such as NIST, IEC 62443 or equivalent. Ability to define, manage and track cybersecurity requirements. Understanding of ...

support risk-based decision making, and work with customers, suppliers, and delivery teams to embed security throughout the lifecycle. You will drive maturity of NIST-aligned risk assessment methods, assurance processes, tooling, and reporting to improve consistency and visibility across projects. #J-18808-Ljbffr ...

like API integrations, data querying, and control automation. You'll be a key player in maintaining our compliance posture across frameworks like SOC 2, NIST CSF, and ISO 27001, while also helping modernize how we monitor and evidence controls using platforms like Anecdotes. This role suits someone who is equally … and execution of SOC 2 (Type I/II) audits, working directly with external auditors to scope, evidence, and remediate findings Lead or support NIST CSF assessments and gap analyses, translating results into actionable remediation plans Support alignment and readiness activities for ISO 27001 and other relevant frameworks (e.g. ...

business, security, infrastructure, and compliance teams to develop security roadmaps, assess risks, integrate modern security technologies, and ensure alignment with industry frameworks such as NIST 800-207. The role requires extensive experience in security architecture, cloud security, identity management, and enterprise risk management, combined with strong stakeholder engagement and … architecture, or related disciplines, with experience delivering security solutions within Defence or highly regulated environments.Proven experience designing and implementing Zero Trust Architectures, aligned to NIST SP 800-207 principles.Strong knowledge of Identity and Access Management (IAM), network security, endpoint security, cloud security, and security monitoring capabilities.Experience developing and integrating security ...

support application security platforms, providing expert troubleshooting and incident support. Make sure security controls align with industry standards and regulatory requirements including ISO 27001, NIST and GDPR. Develop performance metrics and reporting that help measure and improve application security outcomes. Work with technology, compliance and business teams to strengthen security … Terraform, PowerShell, Python and REST APIs. Experience leading technical teams and developing high-performing engineers. Knowledge of security frameworks and regulations including ISO 27001, NIST and GDPR. Excellent communication skills, with the ability to explain technical concepts clearly to different audiences. Degree‐level qualification in Cyber Security, Information Technology ...

with active SC clearance. I am keen to speak with candidates who have Strong information risk management experience, including use of methodologies such as NIST 800-30/37 and ISO 31000. CISSP, CISM or CRISC qualification Experience working with system, operational and strategic levels of risk and performing threat … Proven experience using multiple cyber threat intelligence feeds and turning them into actionable reports. Experience providing advice, guidance and assurance against standards such as NIST, ISO 27001, CIS, CAF, HMG GovS 007 and NPSA. Experience managing internal and external cyber security risks to IT systems, services and data storage, particularly ...

and development teams. Conduct risk assessments and threat modeling, proactively identifying vulnerabilities and mitigation strategies. Develop and maintain security policies and frameworks aligned with NIST, ISO 27001, and CIS Controls. Lead PCI‐DSS architecture and compliance, ensuring both front‐ and back‐office systems meet standards. Guide and mentor teams … security architecture or design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/ ...

of actionable insights that help clients strengthen cyber resilience Framework and Methodology Apply structured frameworks such as Cyber Essentials, CIS Controls (v8), CAF and NIST Contribute to the refinement of Saepio’s assessment methodology and supporting materials Maintain awareness of emerging threats, technologies, and regulatory requirements Collaboration and Development Work … technical information clearly Analytical and organised approach with strong attention to detail Eagerness to develop expertise in cyber resilience consultancy Familiarity with Cyber Essentials, NIST CSF, or CIS Controls Experience using common cyber security or IT management tools Exposure to governance, compliance, or policy development processes Certifications such as CISSP ...

management within a high-threat government environment. Skills and Experience: Proven expertise in risk management, particularly in information security, utilizing recognized methodologies such as NIST 800-30/37 and ISO 31000. Experienced in managing both internal and external cybersecurity risks related to IT systems, services, and data storage, especially … within digital cloud services. Demonstrated ability to provide advice, guidance, and assurance documentation in line with security standards, including NIST, ISO 27001, CIS, CAF, HMG GovS 007, and NPSA. Knowledgeable and hands-on experience with security architecture and Security Information and Event Management (SIEM) tools. Solid track record in risk ...

and technical teams to implement secure configurations Support and maintain security policies, procedures and controls Ensure alignment with recognised frameworks including ISO 27001 and NIST Deliver user awareness initiatives such as phishing simulations and training Stay up to date with emerging threats and recommend improvements to strengthen security posture Support … platforms, vulnerability management tools and detection response technologies such as EDR, XDR or MDR Knowledge of cyber security frameworks such as ISO 27001 or NIST Understanding of data protection legislation including GDPR Ability to investigate incidents, analyse findings and communicate clearly with stakeholders Strong analytical and problem-solving skills Ability ...

support application security platforms, providing expert troubleshooting and incident support. Make sure security controls align with industry standards and regulatory requirements including ISO 27001, NIST and GDPR. Develop performance metrics and reporting that help measure and improve application security outcomes. Work with technology, compliance and business teams to strengthen security … Terraform, PowerShell, Python and REST APIs. Experience leading technical teams and developing high-performing engineers. Knowledge of security frameworks and regulations including ISO 27001, NIST and GDPR. Excellent communication skills, with the ability to explain technical concepts clearly to different audiences. Degree-level qualification in Cyber Security, Information Technology ...

and risk management, information security, IT services and operational security positions. Knowledge across relevant information security and privacy management frameworks and legislation, such as NIST, the NIS Regulations 2018, ISO/IEC 27001, ITIL, COBIT, Data Protection Act 2018 (GDPR). Proven experience of working with strategic vendors and partners … management, information security, IT services and operational security positions. (Lead Criteria) Knowledge across relevant information security and privacy management frameworks and legislation, such as NIST, the NIS Regulations 2018, ISO/IEC 27001, ITIL, COBIT, Data Protection Act 2018 (GDPR). Proven experience of working with strategic vendors and partners ...

and risk management, information security, IT services and operational security positions. Knowledge across relevant information security and privacy management frameworks and legislation, such as NIST, the NIS Regulations 2018, ISO/IEC 27001, ITIL, COBIT, Data Protection Act 2018 (GDPR). Proven experience of working with strategic vendors and partners … management, information security, IT services and operational security positions. (Lead Criteria) Knowledge across relevant information security and privacy management frameworks and legislation, such as NIST, the NIS Regulations 2018, ISO/IEC 27001, ITIL, COBIT, Data Protection Act 2018 (GDPR). Proven experience of working with strategic vendors and partners ...

This job is with TE Connectivity, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At TE, you will unleash ...

technologies, architectures, protocols, threats and controls Proven experience building a security capability, service or function from the ground up Strong knowledge of IEC 62443, NIST CSF and NIST SP 800-82 Practical experience applying the Purdue model within manufacturing/engineering organisations Working knowledge of project management principles Willingness ...

with business, security, infrastructure and compliance teams to develop security roadmaps, assess risk, integrate modern security technologies and ensure alignment with frameworks such as NIST SP 800-207. Key Responsibilities Architect solutions and technically lead their implementation, including on-prem secure cloud and Zero Trust architecture, in line with … security, security architecture or related disciplines, including delivery within Defence or highly regulated environments Proven experience designing and implementing Zero Trust Architectures aligned to NIST SP 800-207 Strong knowledge of IAM, network security, endpoint security, cloud security and security monitoring Experience integrating security architectures into wider enterprise, cloud and ...

and assurance of Backend Platform and endpoint protection and vulnerability management capabilities within secure, offline (air-gapped) environments . The Architect must apply the NIST Cybersecurity Framework and MoD security policies to the backend platform, while supporting the Security and Infrastructure teams in designing and implementing security controls across … security controls. Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer. Ensure compliance with MOD, NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. Collaborate with infrastructure ...

and third-party risk assessments. Advising projects and stakeholders on cyber security and compliance requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology … Security or Cyber Security. Security Assurance or Risk Management. Infrastructure, Cloud or Security Operations environments. Compliance frameworks such as ISO 27001, CAF, PCI DSS, NIST and CIS Benchmarks. Working with auditors, suppliers and senior stakeholders. Experience of AI governance, ISO 42001 or modern Microsoft security technologies would be advantageous. ...

Privacy Manager/Senior Manager - Cyber Strategy & Transformation Overview Data privacy is a critical business priority and a key enabler for organisations seeking to grow in increasingly data-driven environments. This role focuses on shaping ...