151 to 175 of 288 NIST Jobs in the UK

and client engagement skills Experience with automation and scripting (PowerShell, Python, etc.) Desirable: Experience with vulnerability and exposure management tools Knowledge of security frameworks (NIST, ISO 27001, CIS) Relevant security certifications (e.g. CISSP ...

digital product development environments. Familiarity with AI model life cycle management, MLOps or AI-enabled SDLC practices. Knowledge of AI governance frameworks such as NIST AI RMF, ISO/IEC 42001, ISO 23894 or similar. Experience assessing third-party AI vendors or AI-enabled SaaS platforms. Understanding of model explainability ...

practice. This is a hands-on, client-facing role covering: OT/ICS security assessments SCADA and control system environment reviews IEC 62443, NIST SP 800-82 and NCSC CAF aligned work IT/OT convergence, segmentation and remote access reviews OT-aware vulnerability assessments using non-disruptive approaches Reporting ...

control frameworks and advising stakeholders accordingly. * Knowledge of TSA (Telecoms Security Act) is highly desirable. * Experience working with frameworks such as ISO 27001, SOX, NIST or similar governance and compliance standards. * Excellent analytical and impact assessment skills. * The ability to translate technical or regulatory requirements into clear business outcomes. * Strong ...

and automation * REST APIs and JSON * Microsoft technologies including Intune, Entra ID, Active Directory, Defender and Azure * Vulnerability and compliance frameworks such as CIS, NIST and DISA STIG * Operational Technology (OT) and highly regulated environments Why Apply? * Work on large-scale endpoint security and resilience programmes * Deliver solutions across enterprise ...

RMADS or SbD documentation Strong communication skills with the ability to work autonomously and adapt to changing project demands Nice to Have Experience with NIST 800 series, CESG Good Practice Guides, or NCSC risk assessment methodology Familiarity with Defence Security Standards (Def Stan 05-138, Def Stan 05-139, JSP440 ...

Exceptional: Provide additional assistance to the Supportability Function What you’ll need Key Must Have skills: Experience in Project Security planning and implementation e.g. NIST 800 series. Experience in delivering project documentation using SbD principles. Experience in Security/Information Assurance e.g. CESG Good Practice Guides. Experience in Security risk ...

Trade advantageous. A solid general understanding of IT systems, architecture and data management highly desired. Familiarity with IT security standards such as ISO27001/NIST 2 etc. advantageous. Experience in leading complex privacy assessments, comfortable completing PIA’s, TIA’s, DPA/DSA’s, TOM’s evaluations, RoPA’s etc. ...

runtime security. Experience within highly regulated or enterprise-scale environments. Exposure to cloud-native security platforms and zero-trust architectures. Understanding of SOC2, ISO27001, NIST or Cyber Essentials frameworks. What Success Looks Like Security becomes embedded within the engineering lifecycle rather than acting as a gatekeeper. Automated controls reduce risk ...

runtime security. Experience within highly regulated or enterprise-scale environments. Exposure to cloud-native security platforms and zero-trust architectures. Understanding of SOC2, ISO27001, NIST or Cyber Essentials frameworks. What Success Looks Like Security becomes embedded within the engineering life cycle rather than acting as a gatekeeper. Automated controls reduce ...

and programmes, and applying strong security risk methodologies and engineering practices. Governance, frameworks and certifications: Strong working knowledge of ISO/IEC 27001 and NIST, supported by a relevant degree (or equivalent experience) and one or more professional certifications (e.g., CISSP/CISM/CISA/CRISC) or progress towards ...

variety of infrastructures, including cloud environments. We are looking for someone who has experience: performing risk assessments using MOD methodologies (such as NIST 800-53), supporting development in a secure by design methodology, and working at a technical level with teams. You will need knowledge of JSP 604/ ...

architectures and solution designs, such as Privilege Access Management, SSO, IDAM, Network security and encryption. Advise clients on regulatory compliance (e.g., ISO 27001, NIST, GDPR, PCI-DSS) Identify security vulnerabilities in system architectures and articulate these via risk terminology Due to the nature of the role Government Security Clearance ...

Skills & Experience Essential Experience in cyber risk management, ideally within a regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk ...

Skills & Experience Essential Experience in cyber risk management, ideally within a regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk ...

with Microsoft Sentinel , Defender suite , and KQL Strong scripting/automation skills ( PowerShell, Python, Logic Apps ) Solid understanding of MITRE ATT&CK , NCSC CAF , NIST CSF Stakeholder management able to translate technical complexity to non-technical audiences Degree in Computer Science, Cyber Security, or equivalent Desirable: SC-200/ ...

with Microsoft Sentinel , Defender suite , and KQL Strong scripting/automation skills ( PowerShell, Python, Logic Apps ) Solid understanding of MITRE ATT&CK , NCSC CAF , NIST CSF Stakeholder management able to translate technical complexity to non-technical audiences Degree in Computer Science, Cyber Security, or equivalent Desirable: SC-200/ ...

Owning and delivering Moneybox’s information security strategy, roadmap and operating model. Leading the ongoing development of Moneybox’s Information Security Programme, using NIST CSF as the practical risk‐management framework while aligning with ISO 27001 for governance, control maturity and assurance. Reducing real security risk across Moneybox’s technology … model. Experience & Skills Proven experience leading or significantly contributing to an information security function. Strong working knowledge of risk‐based security management and the NIST Cyber Security Framework. Experience developing and delivering information security strategy, roadmaps, policies and controls. Practical knowledge of security technologies and business systems, including identity and ...

Owning and delivering Moneybox’s information security strategy, roadmap and operating model. Leading the ongoing development of Moneybox’s Information Security Programme, using NIST CSF as the practical risk‐management framework while aligning with ISO 27001 for governance, control maturity and assurance. Reducing real security risk across Moneybox’s technology … model. Experience & Skills Proven experience leading or significantly contributing to an information security function. Strong working knowledge of risk‐based security management and the NIST Cyber Security Framework. Experience developing and delivering information security strategy, roadmaps, policies and controls. Practical knowledge of security technologies and business systems, including identity and ...

risk registers, ensuring clear visibility, prioritisation, and mitigation progress. Ensure alignment with key standards and regulatory frameworks including: NCSC guidance and CAF ISO 27001 NIST CSF Cyber Essentials Plus Secure by Design principles Work with procurement to ensure cyber requirements are appropriately flowed down to suppliers, partners, and third-party … SIEM platforms and log analytics Firewalls, boundary protection, and secure networking Endpoint security and system hardening Hands-on implementation experience of frameworks such as: NIST CSF ISO 27001 CIS Controls Cyber Essentials (Plus) Secure by Design/Security by Design Proven ability to balance strategic thinking with tactical execution. Experience ...

high-performing technology risk team. Requirements Senior leadership in technology risk within regulated financial services. Ownership of control frameworks aligned to recognised standards (NIST, ISO, COBIT). Strong track record in risk governance and remediation of systemic issues. Operational resilience and incident management expertise. Experience engaging with regulators and executive ...

Security standards relating to the sector, including: NCSC NIS Guidance and CAF ISO 27001 and ISO 27005 NERC CIP ISA‐99/IEC 62443 NIST CSF Benefits Health and lifestyle perks accompanying private healthcare for you and your family 25 days annual leave (plus a bonus half day on Christmas ...

Desirable Skills Experience with modern identity and security approaches (e.g. Zero Trust, adaptive authentication, API security) Familiarity with frameworks and standards (e.g. ISO 27001, NIST, COBIT) Experience integrating CIAM platforms into wider enterprise environments Exposure to cloud platforms, APIs, or directory services (e.g. Active Directory) Strong stakeholder management skills and ...

Zones and secured, well-governed configurations and resource deployments. Align deployments with best practice security standards and guidelines such as National Institute of Standards (NIST) Cybersecurity Framework, ISO27001, Centre for Internet Security (CIS) and zero-trust principles. Person, Skills & Experience: Microsoft Azure experience Excellent skills in infrastructure as code ...

and mitigating controls Security controls experience - basic IT knowledge, networking principles Cyber Security GRC Analyst : Desirable Areas of Experience InfoSec and Data Protection - CIS, NIST, ISO27001 and GDPR The permanent opportunity for a Cyber Security GRC Analyst will be based out of the Birmingham offices on a hybrid basis. This ...