51 to 75 of 135 NIST Jobs in the UK excluding London

. Familiarity with SaaS security, user lifecycle management, and enterprise access models. Working knowledge of security and compliance frameworks such as CAF, ISO 27001, NIST CSF, and GDPR. Analytical and investigative skills with the ability to identify risk patterns and remediation actions. Knowledge of Privileged Identity Management (PIM), Just ...

Auditor certification is desirable CISM, CISSP, CRISC, an information security degree or equivalent professional background. Understanding of risk assessment methods such as ISO 27005, NIST or similar. Experience planning and conducting internal audits. Good understanding of GDPR, data protection principles and breach notification requirements. Confidence working with senior stakeholders, technical ...

Auditor certification is desirable CISM, CISSP, CRISC, an information security degree or equivalent professional background. Understanding of risk assessment methods such as ISO 27005, NIST or similar. Experience planning and conducting internal audits. Good understanding of GDPR, data protection principles and breach notification requirements. Confidence working with senior stakeholders, technical ...

tools and practices; excellent communication, reporting, and stakeholder management. Desirable: Certifications such as CISSP, CISM, or CEH; knowledge of CAF, ISO 27001, or NIST frameworks. Soft skills: Strong problem-solving and decision-making; ability to collaborate with technical and non-technical teams; proactive, detail-oriented approach; able to communicate complex ...

APIs) Excellent stakeholder management and communication skills Desirable Experience in telecommunications or other highly regulated environments Knowledge of frameworks such as ISO 27001 and NIST Relevant certifications including Qualys Certified Specialist, CISSP or CISM This is an excellent opportunity to play a key role in scaling and enhancing a major ...

service improvement. Cyber Security Define and maintain the Cyber Security strategy, governance framework and operating model. Ensure compliance with recognised security frameworks including ISO27001, NIST Cyber Security Framework and IEC62443. Lead security architecture, Security Operations Centre (SOC), vulnerability management, incident response and cyber resilience activities. Conduct technology and cyber risk … contracts. Essential – Strong knowledge of enterprise infrastructure architecture, cloud computing, cyber security, IT Service Management, business continuity and disaster recovery. Essential – Knowledge of ISO27001, NIST Cyber Security Framework, IEC62443 and relevant regulatory requirements including GDPR and GxP. Essential – Experience working within regulated pharmaceutical, biotechnology or healthcare environments. Preferred – Professional certifications ...

reporting. Demonstrated experience challenging and independently validating data submitted by operating entities, identifying inaccuracies, and managing escalations professionally. Familiarity with regulatory frameworks such as NIST CSF, ISO 27001/2, PCI DSS, GDPR, NIS/NIS2/UK NIS. Strategic, analytical, and capable of defining long‐term transformational assurance roadmaps. ...

and standards. Strong understanding of security governance, risk management, and assurance processes. Experience supporting accreditation, compliance, and assurance activities within secure environments. Familiarity with: NIST 800-53 NCSC guidance MOD security policies JSP 440 Defence assurance and accreditation processes Secure by Design principle Industry certifications such as: CISSP SABSA TOGAF ...

complex Managed Services environments Strong understanding of cloud infrastructure, networking and cybersecurity Experience delivering within Agile environments Knowledge of frameworks such as ISO 22301, NIST, ITIL or similar Excellent stakeholder management and communication skills Desirable certifications include TOGAF, CISSP, CBCP or equivalent. What's on Offer ...

decision-making processes. Risk, Vulnerability & Compliance Management – Lead vulnerability management, third-party security assurance, policy governance, and compliance activities aligned with Cyber Essentials Plus, NIST CSF 2.0, and organisational risk appetite. Incident Response & Threat Management – Coordinate major cyber incident response, act as a senior escalation point, and maintain awareness of ...

GPG14 and SDIP-29. Knowledge of handling highly classified environments, including STRAP. Experience working with JSP440, JSP453, JSP604, Defence Standards, NCSC guidance and the NIST Risk Management Framework. Desirable Experience Experience working within change-controlled environments. Project delivery across multiple internal and external stakeholders. Experience transitioning from traditional accreditation ...

security assessments and producing assurance reports. Ability to engage and influence stakeholders at all levels. Familiarity with security frameworks and standards (e.g., ISO 27001, NIST, CIS Controls). Excellent communication, planning, and organisational skills. Experience managing teams and developing talent. Ability to interpret complex technical and business information to assess ...

security assessments and producing assurance reports. Ability to engage and influence stakeholders at all levels. Familiarity with security frameworks and standards (e.g., ISO 27001, NIST, CIS Controls). Excellent communication, planning, and organisational skills. Experience managing teams and developing talent. Ability to interpret complex technical and business information to assess ...

depth, proven experience in security operations, and the ability to translate complex risks into clear business impact. A background in frameworks such as ISO27001, NIST or similar, alongside relevant certifications, will be highly beneficial. Excellent benefits, flexible hybrid working, and the chance to make a genuine impact in a forward ...

such as 10 or more years in a Product, data, cyber, or technology operations role Strong understanding of cybersecurity principles, practices, and frameworks (e.g., NIST, ISO 27001) Familiarity with third party outsourcing, cloud, data protection, and privacy regulations (e.g., GDPR, CCPA) Ability to collaborate with high-performing teams and individuals ...

executing triage processes. Ensuring regulatory compliance across the service desk, adhering to OFGEM licence conditions, SEC/REC requirements and cybersecurity standards (ISO 27001, NIST-aligned controls), and preparing for and managing audits, including Independent Compliance Officer (ICO) reviews. Collaborating on cross-functional projects, such as integrating L&D with ...

and client engagement skills Experience with automation and scripting (PowerShell, Python, etc.) Desirable: Experience with vulnerability and exposure management tools Knowledge of security frameworks (NIST, ISO 27001, CIS) Relevant security certifications (e.g. CISSP ...

practice. This is a hands-on, client-facing role covering: OT/ICS security assessments SCADA and control system environment reviews IEC 62443, NIST SP 800-82 and NCSC CAF aligned work IT/OT convergence, segmentation and remote access reviews OT-aware vulnerability assessments using non-disruptive approaches Reporting ...

control frameworks and advising stakeholders accordingly. * Knowledge of TSA (Telecoms Security Act) is highly desirable. * Experience working with frameworks such as ISO 27001, SOX, NIST or similar governance and compliance standards. * Excellent analytical and impact assessment skills. * The ability to translate technical or regulatory requirements into clear business outcomes. * Strong ...

runtime security. Experience within highly regulated or enterprise-scale environments. Exposure to cloud-native security platforms and zero-trust architectures. Understanding of SOC2, ISO27001, NIST or Cyber Essentials frameworks. What Success Looks Like Security becomes embedded within the engineering lifecycle rather than acting as a gatekeeper. Automated controls reduce risk ...

runtime security. Experience within highly regulated or enterprise-scale environments. Exposure to cloud-native security platforms and zero-trust architectures. Understanding of SOC2, ISO27001, NIST or Cyber Essentials frameworks. What Success Looks Like Security becomes embedded within the engineering life cycle rather than acting as a gatekeeper. Automated controls reduce ...

variety of infrastructures, including cloud environments. We are looking for someone who has experience: performing risk assessments using MOD methodologies (such as NIST 800-53), supporting development in a secure by design methodology, and working at a technical level with teams. You will need knowledge of JSP 604/ ...

architectures and solution designs, such as Privilege Access Management, SSO, IDAM, Network security and encryption. Advise clients on regulatory compliance (e.g., ISO 27001, NIST, GDPR, PCI-DSS) Identify security vulnerabilities in system architectures and articulate these via risk terminology Due to the nature of the role Government Security Clearance ...

Risk Team Lead.Knowledge, Skills & ExperienceEssentialExperience in cyber risk management, ideally within a regulated or critical infrastructure environment.Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF.Degree or equivalent in cyber security, risk management, or a related field.Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk Manager).DesirableExperience ...

Skills & Experience Essential Experience in cyber risk management, ideally within a regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk ...