26 to 50 of 644 NIST Jobs in the UK

information security, or enterprise risk management roles. Strong understanding of cyber risk management principles and methodologies. Experience working with recognised frameworks and standards, including: NIST Cybersecurity Framework (CSF) NCSC Cyber Assessment Framework (CAF) ISO/IEC 27001 and ISO/IEC 27005 CIS Critical Security Controls COBIT Experience analysing risk ...

information security, or enterprise risk management roles. Strong understanding of cyber risk management principles and methodologies. Experience working with recognised frameworks and standards, including: NIST Cybersecurity Framework (CSF) NCSC Cyber Assessment Framework (CAF) ISO/IEC 27001 and ISO/IEC 27005 CIS Critical Security Controls COBIT Experience analysing risk ...

technical cyber role working across public sector/government agencies . Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure ...

and the wider estate are sufficiently tested for signs of vulnerability. Governance, Risk & Compliance (GRC) Ensure audit readiness, control effectiveness (key SOX/ITGC, NIST/ISO mappings), and remediation governance; lead policy lifecycle and attestations. Oversee the enterprise risk process (RCSA, KRIs), executive reporting, and board risk briefings. Improve ...

including Defender for Cloud, Secure Score, and Azure Policy. Risk assessment, threat modelling, and vulnerability management. Strong understanding of security frameworks including ISO 27001, NIST, Secure by Design, and Cyber Essentials. Secure system integration, API security, and DevSecOps principles. Excellent stakeholder management skills with the ability to communicate effectively with ...

and the wider estate are sufficiently tested for signs of vulnerability. Governance, Risk & Compliance (GRC) Ensure audit readiness, control effectiveness (key SOX/ITGC, NIST/ISO mappings), and remediation governance; lead policy lifecycle and attestations. Oversee the enterprise risk process (RCSA, KRIs), executive reporting, and board risk briefings. Improve ...

observability, and cloud operating models. Zero Trust & Cybersecurity ArchitectureLead Zero Trust transformation strategies across enterprise and operational technology environments. Develop security architectures aligned to NIST, IEC 62443, CIS, and industry compliance requirements. Collaborate with security teams to implement: Identity & Access Management (IAM)Privileged Access Management (PAM)Secure Access Service Edge ...

Cybersecurity capability (strong experience across some of these areas): Cybersecurity strategy and operating model design. Cyber risk management, governance and compliance (e.g. ISO 27001, NIST, NIS2, GDPR). Security architecture and secure‐by‐design principles in cloud and hybrid environments. Identity and access management, security operations or cyber controls engineering. ...

Cybersecurity capability (strong experience across some of these areas): Cybersecurity strategy and operating model design Cyber risk management, governance and compliance (e.g. ISO 27001, NIST, NIS2, GDPR) Security architecture and secure‐by‐design principles in cloud and hybrid environments Identity and access management, security operations or cyber controls engineering Cyber ...

effective remediation co-ordination. • Threat intelligence: experience consuming TI feeds (MISP, OpenCTI, commercial TI platforms) to contextualise vulnerabilities. • Familiarity with compliance frameworks: ISO 27001, NIST CSF, CIS Controls, PCI DSS, SOC 2 – as they relate to vulnerability management. SOFT SKILLS & COMPETENCIES • Strong risk communication skills – translates technical vulnerability data into ...

defence infrastructure projects, or government contractors . Knowledge of JSP 440, DEFCON 76, Secure by Design, Cyber Essentials Plus, ISO 27001, and NIST frameworks . Key Attributes We're looking for someone who demonstrates: Integrity, professionalism, and discretion. Strong risk awareness and sound judgement. Excellent analytical and problem-solving skills. ...

security requirements. Key Responsibilities Zero Trust Strategy & Architecture Define and deliver enterprise-wide Zero Trust strategies and roadmaps Design Zero Trust architectures aligned to NIST 800-207 principles Implement identity-first security models across users, devices, applications and data Develop continuous verification and adaptive access control frameworks Lead micro-segmentation … regulated sectors Experience leading security transformation and modernisation initiatives Technical Knowledge Deep expertise in Zero Trust Architecture principles and implementation methodologies Strong knowledge of NIST 800-207 and modern security architecture frameworks Expert understanding of Identity & Access Management technologies Experience with Microsoft Entra ID, Conditional Access, PIM and PAM solutions ...

Microsoft Azure, identity, governance, security, and cloud architecture. Experience working with outsourced service providers and technology partners. Understanding of cyber security frameworks such as NIST and ISO27001. Knowledge of networking, infrastructure, security operations, and vulnerability management. The confidence to challenge, influence, and drive decisions at all levels. A pragmatic, hands ...

Security initiatives within complex environments. Understanding of Security Architecture Design and secure-by-design principles. Familiarity with cyber frameworks such as MITRE ATT&CK, NIST, or Cyber Kill Chain. Experience producing intelligence reports and presenting findings to stakeholders. Strong analytical and problem-solving abilities. Excellent written and verbal communication skills. ...

leading consulting teams. Strong knowledge of governance, risk management and cyber security best practice. Experience delivering projects aligned to frameworks including ISO 27001, NIST CSF, CIS Controls and Cyber Essentials. Ability to conduct and oversee security maturity assessments, risk assessments and compliance programmes. Excellent client-facing communication skills with ...

Microsoft Intune Microsoft Purview Microsoft Copilot for Security Desirable Experience within Local Government, Public Sector, NHS, Education or other regulated environments Knowledge of ISO27001, NIST, Cyber Essentials and related security frameworks Experience supporting digital transformation and cloud-based security initiatives What's on Offer? Opportunity to shape and influence cyber ...

secure access solutions. Lead network patching, firmware upgrades, vulnerability remediation, and security hardening activities. Ensure compliance with industry standards and frameworks, including ISO 27001, NIST, CIS Benchmarks, and PCI-DSS. Partner with Cyber Security teams to identify risks, strengthen controls, and enhance enterprise security posture. Performance, Reliability & Automation Monitor, troubleshoot ...

detection, investigation and root cause analysis. Security automation, scripting or workflow improvement. You'll also be comfortable working with recognised security frameworks such as NIST CSF, ISO 27001, CIS Controls or the NCSC Cyber Assessment Framework. About youWe're looking for someone who: Has significant experience within cyber security, information ...

Logic Apps or similar technologies. Knowledge of cloud security principles across Azure and ideally AWS or Google Cloud. Familiarity with industry frameworks such as NIST and ISO 27001.Personal AttributesWe are particularly interested in individuals who demonstrate: Calmness under pressureStrong ownership and accountabilityExcellent communication and stakeholder management skillsCommercial awareness alongside technical ...

cloud‐security monitoring and investigations across Microsoft Azure, Amazon Web Services, or other cloud environments. Familiarity with recognized AI‐risk guidance such as the NIST AI Risk Management Framework and Generative AI Profile. Relevant certifications such as Security+, SC‐200, AZ‐500, CISSP, GCIH, or equivalent credentials. Post‐secondary education ...

Experience of security incident management and cyber crisis response. Experience of supplier cyber risk assessments and 3rd-party risk management. Understanding of ISO 27001, NIST CSF, FCA/PRA expectations and operational resilience requirements. Strong stakeholder management, communication and reporting skills. Qualifications: Minimum of one below is required: ISO27001 Lead ...

enterprise. Hands‐on experience with ISO/IEC 27001 (ISMS lifecycle, Annex A controls, risk assessment and treatment) and related security control frameworks (e.g., NIST CSF, ISO 27000, TISAX, etc.).Demonstrated experience with Integration Risk Management (project/solution risk assessments) and Third‐Party Risk Management (vendor due diligence, ongoing ...

Architect, CISSP, CCSP or comparable qualifications. Experience with AWS security services and platform capabilities. Familiarity with security frameworks and standards such as CIS Benchmarks, NIST, ISO 27001 or AWS Well-Architected Security Pillar. Experience working in a regulated, financial, energy or other business-critical technology environment. Experience applying AI-assisted ...

sector, government, defence, or highly regulated environments. Knowledge of Zero Trust security principles. Experience with cloud-native security tooling and security automation. Familiarity with NIST, ISO 27001, CIS Controls, or similar security frameworks. Experience supporting DevSecOps and secure software delivery practices. Relevant cloud and security certifications such as: CISSPCCSPAWS Security ...

emerging legal, regulatory and industry standards. Liaise with external suppliers to ensure smooth delivery of their work. Required Skills Good knowledge of ISO 27001, NIST CSF, NIS 2.0 Legal and Regulatory requirements across UK and Europe incl. GDPR. Supporting knowledge of CIS controls. Familiarity with cloud platforms: AWS, Azure ...