626 to 650 of 919 NIST Jobs in the UK

Microsoft Entra ID and/or Okta. Experience designing enterprise logging and security monitoring architectures. Familiarity with security frameworks such as SABSA, TOGAF or NIST SP 800-53. If you're an experienced Security Architect available for your next contract and have a strong background in cyber transformation ...

security expert, with a strong background in application securityExperience in security testing diverse applicationExperience with infrastructure securityBasic familiarity with security frameworks (OWASP, NIST, etc)Excellent problem-solving skills and the ability to work in a dynamic, fast-paced environmentStrong communication and collaboration skills to effectively remotely work with stakeholders across ...

and privileged access management.Experience with threat modelling methodologies such as STRIDE, PASTA, or equivalent.Knowledge of security frameworks and standards including: - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - CIS Controls - SABSA - TOGAFUnderstanding of security operations concepts, incident response, and detection capabilities.Knowledge of application security principles, including secure coding practices and ...

and privileged access management. Experience with threat modelling methodologies such as STRIDE, PASTA, or equivalent. Knowledge of security frameworks and standards including: - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - CIS Controls - SABSA - TOGAFUnderstanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including secure ...

and privileged access management. Experience with threat modelling methodologies such as STRIDE, PASTA, or equivalent. Knowledge of security frameworks and standards including: - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - CIS Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including ...

and privileged access management. Experience with threat modelling methodologies such as STRIDE, PASTA, or equivalent. Knowledge of security frameworks and standards including: - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - CIS Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including ...

using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security … Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign ...

and platforms. Advise on identity and access management, encryption, data residency and cloud security. Align architectural decisions with frameworks and regulations including ISO 27001, NIST, CIS, GDPR and NIS2. Support client audits, security assessments and regulatory enquiries. Evaluate and recommend security technologies, vendors and strategic solutions. Produce and maintain high … with Azure cloud services and enterprise-scale architecture design. Knowledge of AI security risks, governance and secure adoption practices. Strong understanding of ISO 27001, NIST, GDPR, NIS2 and related compliance frameworks. Excellent stakeholder management and communication skills, with the ability to influence at executive level. Qualifications Degree in Computer Science ...

questionnaires, policies, certifications, audit reports, penetration testing results, independent assurance reports, and supporting evidence.Evaluate control effectiveness against recognised frameworks and standards including ISO 27001, NIST Cybersecurity Framework, SOC reports, DORA, and relevant SWIFT security requirements.Identify security gaps, residual risks, and compensating controls, providing clear risk ratings and recommendations to stakeholders.Supplier … experience conducting security assessments of cloud providers, SaaS vendors, technology suppliers, and outsourced service providers.Strong understanding of security frameworks and standards including ISO 27001, NIST, SOC 1/2, CIS Controls, and cloud security best practices.Experience evaluating security controls across identity management, network security, encryption, vulnerability management, incident response, resilience ...

policies, certifications, audit reports, penetration testing results, independent assurance reports, and supporting evidence. Evaluate control effectiveness against recognised frameworks and standards including ISO 27001, NIST Cybersecurity Framework, SOC reports, DORA, and relevant SWIFT security requirements. Identify security gaps, residual risks, and compensating controls, providing clear risk ratings and recommendations … conducting security assessments of cloud providers, SaaS vendors, technology suppliers, and outsourced service providers. Strong understanding of security frameworks and standards including ISO 27001, NIST, SOC 1/2, CIS Controls, and cloud security best practices. Experience evaluating security controls across identity management, network security, encryption, vulnerability management, incident response ...

Make In this role, you'll be: Providing expert advice on cyber risk management, assessment principles and frameworks, such as ISO27005 and the NIST Risk Management Framework. Working with multi-disciplinary teams, helping to ensure that products are delivered in a secure manner that is aligned with the wider business … working knowledge of: Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as NCSC Cyber Assurance Framework, ISO 27001, NIST CSF and CIS. HMG and NCSC security policies, standards and guidance. Have an understanding of cyber risk management in an agile delivery environment. Have ...

Make In this role, you'll be: Providing expert advice on cyber risk management, assessment principles and frameworks, such as ISO27005 and the NIST Risk Management Framework. Working with multi-disciplinary teams, helping to ensure that products are delivered in a secure manner that is aligned with the wider business … working knowledge of: Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as NCSC Cyber Assurance Framework, ISO 27001, NIST CSF and CIS. HMG and NCSC security policies, standards and guidance. Have an understanding of cyber risk management in an agile delivery environment. Have ...

Security Analyst contributes to the continuous improvement of information security processes and procedures, supporting compliance activities aligned with frameworks and standards such as the NIST Cybersecurity Framework, GDPR and SOX.Key Responsibilities:Monitor, triage, and investigate security alerts in coordination with the Security Operations Center (SOC) and internal teams.Analyze and validate … support of the essential job functions.Must have Cybersecurity certification(s) (CISSP, Sec+, CCSP, CEH) or equivalentKnowledge of security frameworks and regulatory compliance standards (NIST CSF, SOX ITGC, GDPR, etc.).Working technical knowledge and hands‐on experience securing enterprise IT environments within predominantly Windows‐based and cloud‐hosted ecosystems, with experience ...

successful candidate will lead security assessments, maturity reviews, regulatory readiness programmes, and strategic security transformation initiatives aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, DORA, NIS2, Cyber Essentials, and GDPR. They will confidently engage with C-level leaders, facilitate workshops and executive playbacks, develop high-quality proposals … and security transformation programmes. Comfortable operating across both business and technical stakeholder groups. Industry & Regulatory Knowledge – Strong understanding of: ISO 27001, 31000, 42001:2023 NIST Cybersecurity Framework (NIST CSF) 2.0 & NIST AI RMF CIS Controls Cyber Essentials & Cyber Essentials Plus DORA, NIS2, EU AI Act Requirements, GDPR Risk Management and ...

/CD related certifications or formal training ISO 27001 Lead Implementer or Lead Auditor, or demonstrable understanding of ISO control environments Familiarity with NIST frameworks, particularly NIST CSF and NIST SSDF, demonstrated through training or experience Relevant vendor certifications linked to SAST, DAST, SCA or pipeline tooling where used ...

solution architectures for National Security, Defence IT, C5ISR, mission systems, and secure services and consultancyLeading architectural governance, ensuring compliance with MOD standards, JSPs, DEFSTANs, NIST, and relevant NATO frameworksShaping technical roadmaps aligned with growth roadmaps and long-term defence strategiesevaluating and selecting technologies across cloud, edge computing, secure networks, data ...

/ML development teams on production systems. Experience in financial services, market data, media, enterprise technology, cloud, or other data-intensive environments. Familiarity with NIST AI RMF, ISO/IEC 23894, EU AI Act, OECD AI Principles, model risk management, or responsible AI frameworks. Experience with AI red teaming, model ...

and ComplianceImplement and enforce network security policies and procedures to safeguard the integrity and confidentiality of organizational data.· Ensure compliance with industry standards, including NIST, PCI-DSS, and GDPR, by enforcing firewall, VPN, and other security measures.· Collaboration and LeadershipWork closely with cross-functional teams, including cybersecurity, cloud architects, systems ...

energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum 2 days onsite/client site). Annual performance bonus. ...

energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum 2 days onsite/client site). Annual performance bonus. ...

energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum 2 days onsite/client site). Annual performance bonus. ...

energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum 2 days onsite/client site). Annual performance bonus. ...

dynamic working environment. You have an Engineering degree or equivalent experience in Computer Science, Electronics, Telecoms or a related field. Awareness of NIST, OWASP, GCF and UK TSA requirements and how they impact delivery and testing of secure networks. Willing to support an on-call rota as required. Ability ...

utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within Agile delivery environments. What's on Offer Hybrid working (minimum ...

utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within Agile delivery environments. What's on Offer Hybrid working (minimum ...