551 to 575 of 644 NIST Jobs in the UK

LonWorks or similar Comfortable owning platform lifecycle, servers, databases, backups Vendor certs a bonus (Trend, Siemens, Schneider, Honeywell, Tridium Niagara) IEC 62443/NIST/CIS awareness advantageous, not essential RG Setsquare is acting as an Employment Agency in relation to this vacancy. ...

compliance checks so security scales without frictionDefining and enforcing cloud security architecture standards, guardrails, and policy-as-code inline with industry best practices including NIST, CIS, and PCI DSS.Use Wiz or equivalent CNAPP/CSPM to continuously assess, prioritise, and drive remediation of misconfigurations and vulnerabilities against CIS, NIST, and … coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate. Maintain alignment to PCI DSS, SOC2, ISO27001 NIST, and CIS frameworks. Produce documentation and evidence to support audit and assurance activities. AI SecurityDesign and implement guardrails for AI/LLM systems, covering data ...

checks so security scales without friction Defining and enforcing cloud security architecture standards, guardrails, and policy-as-code inline with industry best practices including NIST, CIS, and PCI DSS. Use Wiz or equivalent CNAPP/CSPM to continuously assess, prioritise, and drive remediation of misconfigurations and vulnerabilities against CIS, NIST … coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate. Maintain alignment to PCI DSS, SOC2, ISO27001 NIST, and CIS frameworks. Produce documentation and evidence to support audit and assurance activities. AI Security Design and implement guardrails for AI/LLM systems, covering ...

certifications. Microsoft Azure Security Engineer Associate. AWS Security Specialty. Google Professional Cloud Security Engineer. DevSecOps or CI/CD related certifications. ISO 27001 certifications. NIST CSF and NIST SSDF knowledge. Package & Benefits Competitive salary Annual bonus Car allowance Hybrid working Comprehensive benefits package Ongoing training and professional development Industry-recognised ...

and access management (IAM).Strong engineering background with expertise in Windows Server, endpoint platforms, macOS, and Linux. Strong knowledge of information security frameworks, including NIST and relevant NIST 800-series publications. Hands-on experience with SIEM technologies, including data ingestion, monitoring, alerting, and integration with security operations processes. Proficiency ...

and access management (IAM).Strong engineering background with expertise in Windows Server, endpoint platforms, macOS, and Linux. Strong knowledge of information security frameworks, including NIST and relevant NIST 800-series publications. Hands-on experience with SIEM technologies, including data ingestion, monitoring, alerting, and integration with security operations processes. Proficiency ...

audits. Strong knowledge of ISO 27002 and experience delivering against its requirements. Strong knowledge of Cyber Essentials/Cyber Essentials Plus. Experience working with NIST security frameworks. Knowledge of CAF/Cyber Assessment Framework and its application to organisational security. Understanding of NIS2, GDPR and the Data Protection Act. Strong … landscape and assess their impact on the organisation. Ensure compliance with relevant legislation, regulations, frameworks and security standards, including GDPR, Data Protection Act, NIS2, NIST, Cyber Essentials and ISO 27002. Lead and coordinate information security metrics, reporting and management information. Support and oversee offensive security activities, vulnerability management and security ...

maintaining quality and managing stakeholder expectations. Willingness and flexibility to travel throughout the UK (and occasionally overseas) as required. Relevant professional certifications (e.g., ISO27000, NIST Cyber Security Professional, CISMP, CISM, CISSP, CCSP, Chartered Cyber Security Professional) are highly desirable. Solid understanding of ‘Secure by Design’ methodology. Commitment to ongoing professional … and help them deploy that technology in live OT/ICS environments. Familiarity with OT cyber security standards or regulatory frameworks (e.g., IEC 62443, NIST CSF, NIS Regulations, HSE OG-0086). Relevant OT cyber security qualifications (e.g., GICSP, IEC/ISA 62443). Membership of recognised security professional bodies ...

based security and zero-trust platforms (e.g., Zscaler ZIA, ZPA, ZDX)Creating enterprise-wide security blueprints and reference architectures aligned with Zero Trust principles (NIST 800-207, CISA).Designing scalable identity-centric security controls using SSO, MFA, device posture, and least-privilege access models. Collaborating with networking teams to modernize … hands-on expertise with: Zscaler ZIA, ZPA, ZDX or similarZscaler Client ConnectorApp Connectors, Cloud Firewall, Cloud Sandbox, DLP, CASBDeep understanding of: Zero Trust frameworks (NIST 800-207, SASE, SSE)Identity and access management (Azure AD, Okta, Ping)Modern network design (SD-WAN, DNS security, routing fundamentals)Endpoint security (EDR/ ...

Security Operations Threat Modelling Security Assessments And some exposure to AI, GenAI, LLMs or emerging AI security risks . Knowledge of frameworks such as NIST CSF, NIST AI RMF, OWASP, MITRE ATLAS or ISO 27001 would be useful, but isn't essential. Why this opportunity? AI Security is moving quickly ...

compliance/infrastructure support services operating therein Understanding of common security and privacy management frameworks and participation in audit/certification such as: GDPR, NIST SP800-53, ISO 27001, NIST CSF, etc Experience evaluating logging activities for ingestion into SIEM as part of continuous monitoring plan Experience with security technologies ...

with developers, and help embed secure coding practices across the SDLC. We value strong hands-on testing expertise, knowledge of OWASP Top Ten and NIST CSF, and the ability to communicate findings clearly to stakeholders and guide remediation. #J-18808-Ljbffr ...

with continuous improvement of MTTR and service stability. Define, implement, and continuously mature infrastructure governance and compliance frameworks, ensuring alignment to ISO27001 (Annex A), NIST CSF, CIS benchmarks, and regulatory expectations, including secure configuration, logging, monitoring, and audit readiness. Act as control owner for infrastructure and cloud services, ensuring effective … within financial services regulatory frameworks, including FCA/PRA requirements and operational resilience obligations. Knowledge of industry standards and control frameworks including ISO 27001, NIST CSF, CIS Benchmarks and ITIL. Qualifications: Minimum of one below is required: Microsoft Certified: AZ-104 Azure AdministratorMicrosoft Certified: Azure DevOps Engineer Minimum of ...

with continuous improvement of MTTR and service stability. Define, implement, and continuously mature infrastructure governance and compliance frameworks, ensuring alignment to ISO27001 (Annex A), NIST CSF, CIS benchmarks, and regulatory expectations, including secure configuration, logging, monitoring, and audit readiness. Act as control owner for infrastructure and cloud services, ensuring effective … within financial services regulatory frameworks, including FCA/PRA requirements and operational resilience obligations. Knowledge of industry standards and control frameworks including ISO 27001, NIST CSF, CIS Benchmarks and ITIL. Qualifications: Minimum of one below is required: Minimum of one below is required: ITIL V4 Microsoft Certified: Azure Security Engineer ...

infrastructure and cloud environments, and ensure risk-based controls throughout the development lifecycle. The role requires deep knowledge of IT assurance frameworks (ISO 44001, NIST 800-53/171/172, NIS2, DEFSTAN, JSP), strong cross-functional leadership, excellent communication, and the ability to implement secure #J-18808-Ljbffr ...

decided, not a franchise to defend. What you'll do: Lead the delivery of AI security and governance engagements — operationalising frameworks (ISO 42001, NIST AI RMF, EU AI Act readiness) into programmes clients can actually run. Bridge advisory design and hands-on execution across multi-workstream cyber transformation. Grow accounts ...

Define and AI governance frameworks covering model risk management, responsible AI, data lineage, bias/fairness testing, explainability, and regulatory alignment (EU AI Act, NIST AI RMF, ISO/IEC 42001).Act as trusted technical advisor to client CTOs, CIOs and Heads of Data/AI on platform strategy, build … privacy regulation (GDPR, CCPA) as applied to AI training and inference data. Working knowledge of emerging AI-specific regulation and standards: EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001.Experience establishing model documentation, audit trail, and approval-gate processes for production AI systems. Security & CloudAI-specific security ...

understanding of networking, systems and application security Experience with risk assessments and security controls Knowledge of security frameworks and standards, including ISO 27001 and NIST Understanding of vulnerability management Experience using security tools and technologies Strong analytical, problem-solving and communication skills Degree in Cyber Security, Information Technology … vacancy only. KEY SKILLS Cyber Security Engineer, Security Engineering, Cyber Security, Risk Assessment, Security Controls, Vulnerability Management, Security Management Plans, Security Case, ISO 27001, NIST, CISSP, CISM, CEH, Security Clearance ...

to. 5+ years of relevant experience in the medical device space (either industry or through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat … modeling, security testing) and determining residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle ...

to. 5+ years of relevant experience in the medical device space (either industry or through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat … modeling, security testing) and determining residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle ...

risk and governance. Design and implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review … prompt injection, data leakage and excessive agency. Strong understanding of relevant AI regulation and frameworks, particularly EU AI Act, UK GDPR/ICO, DPIAs, NIST AI RMF and ISO 42001. Experience working with regulated organisations. The ability to communicate equally well with senior executives and technical teams. Nice to have ...

access reviews, and firewall configuration reviews. Policy, Controls and Regulatory CoverageApply working knowledge of PCI DSS v4.0.1, ISO 27001/27002, SOC 2, DORA, NIST CSF, and other applicable frameworks to day-to-day GRC work. Support meeting regulatory change across Checkout's operating markets including FCA/PRA requirements … function, ideally within payments, financial services, or fintech. Practical working knowledge of PCI DSS (v4.0.1 preferred), ISO 27001, and SOC 2. Familiarity with DORA, NIST CSF, or the EU AI Act is a plus. Experience supporting or directly managing external audits and assessments, including evidence collation and assessor liaison. Demonstrated ...

current SMR technology, security controls and capabilities. Develop a comprehensive target-state Cyber Security Architecture. Map current and future-state capabilities against the NIST Cybersecurity Framework (NIST CSF). Identify gaps in security controls, implementation, adoption and utilisation. Develop recommendations and a clear roadmap to address identified gaps. Work closely … background in Cyber Security Architecture or Security Engineering. Experience assessing complex enterprise security environments. Strong understanding of Security Monitoring, Detection & Response. Good knowledge of NIST CSF and security control frameworks. Experience conducting security gap analysis and developing transformation roadmaps. Strong stakeholder management and communication skills. Experience working within financial services ...

equivalent experience.* Strong and demonstrable experience in Excel, PowerPoint, and other Office applications.* An understanding of cybersecurity control and risk assessment frameworks (e.g., NIST CSF, CIS, NIST 800-53, ISO 27001) and their unique differences.* Awareness of the regulatory landscape and well-known data privacy, cybersecurity, and operational resilience regulations.Preferred ...

Reviewing IT architecture to identify potential security gaps and/or vulnerabilities Assessing compliance with IT security policies and technical standards (e.g. ISO 27001, NIST, Cyber Essentials, COBIT, etc...) Additional technical qualifications (e.g. CRISC, CISM, NCSC CCP, ISSAP, CompTIA SecurityX, CCSK, CCSP, GDSA, ISO 27001 Lead Implementer, ISO 27001 Lead … Auditor) Knowledge of well-known Frameworks (e.g., NIST, MITRE ATT&CK, ISO 27001) and how they are applied pragmatically within delivery. Ability to work with limited supervision. By applying for this role you will automatically be considered for a Junior Cyber Risk and Assurance Analyst role ...