626 to 650 of 778 NIST Jobs in the UK

OT Projects Manager

Location
City of Edinburgh, Scotland, United Kingdom
engineering knowledge to support and advise on projects to the required technical specifications and standards* Awareness of standards such as ISA99/IEC-62443, NIST CSF, ISO 27001 desirable* Co-ordinate and liaise with multiple internal/external resources, and subject matter experts* Empower projects to deliver scope safely ...

Data Governance Capability Lead – Central Digital Factory

Location
East Midlands, England, United Kingdom
Knowledge and skills Knowledge of some or all of the following would be advantageous: DAMA-DMBOK ISO/IEC 38505 ISO 8000 ISO 27001 NIST frameworks Data protection and privacy regulation Data sovereignty and information classification principles Data quality management Metadata and semantic management Information lifecycle and records management Benefits ...

Security Controls Assurance Expert

Location
Greater London, England, United Kingdom
ensure the design, implementation, and ongoing effectiveness of security controls across the organization. The role emphasizes testing, audits, and compliance with ISO 27001, NIST, SOC 2, and NIS2. You will collaborate with IT and business teams to assess controls, support remediation efforts, and provide clear assurance documentation for management and ...

Product Security Engineer — Hybrid, Mission Technologies

Location
West of England, England, United Kingdom
that support national security and critical infrastructure, shaping security from concept to operation. You’ll lead Information Assurance strategies, manage risk using ISO27001 and NIST, and create security documentation while collaborating with multidisciplinary teams and external stakeholders. #J-18808-Ljbffr ...

Cyber Risk & Resilience Analyst: Audit & Assurance

Location
City Of London, England, United Kingdom
enhance security posture and ensure resilience against evolving cyber threats. The role requires strong experience in cyber assurance, familiarity with ISO 27001/NIST CSF/SOC 2, and the ability to communicate risk to board-level audiences. #J-18808-Ljbffr ...

Senior IT & Cyber Security Leader

Location
United Kingdom
services, manage budgets, and drive cross-site improvements. Reporting to Operations, you will lead a team of IT professionals, oversee cyber security and compliance (NIST CSF 2.0, Cyber Essentials Plus), and partner with stakeholders to deliver impactful IT-enabled #J-18808-Ljbffr ...

Principal Product Security Engineer - Hybrid Defense Tech

Location
Lincoln, England, United Kingdom
product lifecycle, advising multidisciplinary teams and aligning with governance standards to protect defence technologies. The role requires experience in security risk management, RMF/NIST, and recognised security bodies. You will liaise with security experts and managers, contribute to security strategy, and support pre-employment #J-18808-Ljbffr ...

Lead Product Security Engineer — Hybrid, Next-Gen Defence

Location
Southampton, England, United Kingdom
define security requirements and guide cross‐functional teams to embed security by design. You will bring experience with ISO27001/27004/27005 and NIST RMF, and you will work within a hybrid setup in the UK, contributing to resilient, compliant security solutions for national defence programmes. #J-18808-Ljbffr ...

Network Engineer

Location
Sheffield, England, United Kingdom
of Ansible or Terraform for network configuration management. Familiarity with Cisco NSO or RESTCONF/NETCONF interfaces. Exposure to industrial cybersecurity frameworks: IEC 62443, NIST SP 800-82, or NIS2. Experience with SCADA/ICS systems (e.g., Ignition, Wonder ware, Siemens TIA Portal, Rockwell FactoryTalk). Familiarity with network monitoring ...

Director, DFIR & Security Monitoring

Location
Greater London, England, United Kingdom
lead the DFIR and security monitoring function across the organization. You will drive incident response, forensics capabilities, and threat hunting aligns with MITRE, NIST, and industry best practices. The role requires senior leadership with extensive experience across security monitoring, incident response, and forensics tools. Hybrid working arrangements and competitive remuneration ...

Agentic AI Security Engineer — Red Team & Governance

Location
Greater London, England, United Kingdom
will work hands-on at first and grow into wider governance and mentorship across teams. You will map findings to OWASP, MITRE ATLAS and NIST AI RMF, define controls for internal vs client-facing views, and help roll out tooling and incident response processes across accounts. #J-18808-Ljbffr ...

Azure Cloud Engineer: Security, CI/CD & AI Foundry

Location
England, United Kingdom
work closely with the Cloud Architect to design, governance, and optimise cloud infrastructure, while managing Azure Firewall, Azure SQL, and cost controls. CIS/NIST/ISO compliance experience is beneficial. #J-18808-Ljbffr ...

Senior OT Cyber Security Consultant – ICS/SCADA (Hybrid UK)

Location
Greater London, England, United Kingdom
and help expand OT capabilities globally. Based in a hybrid role in London or Manchester, travel to client sites as required. You will apply NIST and IEC 62443 frameworks, design and implement security controls, and report on security posture for critical infrastructure. #J-18808-Ljbffr ...

Cloud Platform Security Engineer Software engineering London

Location
Greater London, England, United Kingdom
checks so security scales without friction Defining and enforcing cloud security architecture standards, guardrails, and policy-as-code inline with industry best practices including NIST, CIS, and PCI DSS. Use Wiz or equivalent CNAPP/CSPM to continuously assess, prioritise, and drive remediation of misconfigurations and vulnerabilities against CIS, NIST … coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate. Maintain alignment to PCI DSS, SOC2, ISO27001 NIST, and CIS frameworks. Produce documentation and evidence to support audit and assurance activities. AI Security Design and implement guardrails for AI/LLM systems, covering ...

Sr Manager - IT Governance, Risk, and Compliance

Location
Livingston, Scotland, United Kingdom
Risk, and Compliance Program Leadership: Develop and maintain the Cybersecurity GRC framework, policies, standards, and procedures in alignment with regulatory requirements (e.g., ISO 27001, NIST CSF, Cyber Essentials +, SOC 2, GDPR, CMMC Level 2,3) Develop, maintain, and socialize IT and cybersecurity policies, standards, and procedures across the organization. … management skills. Must be self-motivated with the ability to work independently and in a team environment. Knowledge of industry-standard security frameworks (e.g., NIST CSF, ISO 27001, CIS Controls) and regulatory requirements (e.g., SOX, SEC, GDPR, HIPAA, CMMC). Preferred Qualifications: Experience building an IT GRC function within ...

Head of Security Information Security

Location
London Borough of Barking and Dagenham, England, United Kingdom
and engineering teams to embed security across the product lifecycle. Key responsibilities Own and evolve the information security strategy. Lead ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance. Embed secure-by-design and DevSecOps across engineering. Drive security improvements through AI, automation and technical controls. Lead security risk … engineering teams to improve detection and response. Support client assurance and security audits. Experience required CISSP, CISM or equivalent. Strong knowledge of ISO 27001, NIST, CIS, PCI DSS and GDPR. Proven leadership across information security, cyber risk or assurance. Strong technical understanding of cloud, application, network, endpoint and data security. ...

Cyber Security Manager

Location
Slough, England, United Kingdom
Advising on security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments Cyber Security Manager Essential Skills Strong background within cyber or information … security Experience working within Defence, Government or National Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing communication skills Understanding of network ...

Senior Cyber Security Consultant

Location
West of England, England, United Kingdom
maintaining quality and managing stakeholder expectations. Willingness and flexibility to travel throughout the UK (and occasionally overseas) as required. Relevant professional certifications (e.g., ISO27000, NIST Cyber Security Professional, CISMP, CISM, CISSP, CCSP, Chartered Cyber Security Professional) are highly desirable. Solid understanding of ‘Secure by Design’ methodology. Commitment to ongoing professional … and help them deploy that technology in live OT/ICS environments. Familiarity with OT cyber security standards or regulatory frameworks (e.g., IEC 62443, NIST CSF, NIS Regulations, HSE OG-0086). Relevant OT cyber security qualifications (e.g., GICSP, IEC/ISA 62443). Membership of recognised security professional bodies ...

Quantum Cryptography Architect

Location
Southampton, England, United Kingdom
management, digital signatures, key management systems (KMS), and HSMs. Post-Quantum Cryptography (PQC) Knowledge: Strong understanding of quantum computing threats to modern encryption, NIST PQC standards, hybrid key exchange, and strategies for achieving crypto‐agility. Threat Modeling & System Design: Demonstrated ability to perform threat modeling on complex cloud-native applications … clear guidance for both technical teams and senior leadership. Desirable Experience in Fintech, Banking, or highly regulated cloud environments (e.g. PCI-DSS, ISO 27001, NIST guidelines). Demonstrated background in a highly technical role (e.g. Security Engineering, Infrastructure Engineering, Penetration Testing). Experience in infrastructure, application, and AI security (e.g. ...

Lead Cyber Security Advisor

Location
Greater London, England, United Kingdom
Will have either CISSP, CISM or CRISC qualification. Comprehensive knowledge of risk management, specifically around information security. With experience in recognised methodologies such as NIST 800-30/37, ISO 31000 etc. Experience of working with system, operational and strategic level risk. Demonstrable experience of threat modelling system solutions. Demonstrable … intelligence into actionable reports. Working knowledge of information security. Demonstrable experience of providing advice, guidance and assuring documentation against security standards such as NIST, ISO27001, CIS, CAF, HMG GovS 007 and NPSA. Experience of working in multiple projects and initiatives with limited supervision; working effectively across multiple internal and external ...

GRC Engineer

Location
Belfast City District, Northern Ireland, United Kingdom
like API integrations, data querying, and control automation. You'll be a key player in maintaining our compliance posture across frameworks like SOC 2, NIST CSF, and ISO 27001, while also helping modernize how we monitor and evidence controls using platforms like Anecdotes. This role suits someone who is equally … and execution of SOC 2 (Type I/II) audits, working directly with external auditors to scope, evidence, and remediate findings Lead or support NIST CSF assessments and gap analyses, translating results into actionable remediation plans Support alignment and readiness activities for ISO 27001 and other relevant frameworks (e.g. ...

IT Security Governance, Risk & Controls Analyst

Hiring Organisation
Ricoh
Location
London, United Kingdom
Employment Type
Permanent
effectiveness of security controls and identify control gaps, weaknesses and opportunities for improvement . Translate security frameworks and requirements, including ISO 27001 and NIST CSF , into practical operational controls. Support audit, assurance and compliance activities , including ISO 27001, Cyber Essentials and internal control programmes. Work with technology teams to ensure … Experience conducting or supporting technology/security risk assessments and maintaining risk registers. Good knowledge of security control frameworks such as ISO 27001 and NIST CSF . Experience assessing control design and effectiveness , identifying gaps and supporting remediation. Understanding of key IT security disciplines including vulnerability management, patching, identity and ...

Information Security Risk Analyst

Location
Greater London, England, United Kingdom
their risk over the life of the relationship.* **Assess controls.** Review the design and operation of security controls against recognised frameworks (e.g. ISO 27001, NIST CSF), identify gaps, and track remediation through to closure.* **Maintain the Information Security Risk Register.** Identify, assess and record security risks across our systems, data … tracking remediation.* **Good technical understanding across core technology domains** such as infrastructure, networks, cloud, identity and applications.* **Working knowledge of security frameworks** (ISO 27001, NIST CSF or similar) and experience applying regulatory requirements such as FCA, DORA and GDPR.* **Relevant certifications** (e.g. CISM, CRISC, CISSP, ISO 27001 Lead Implementer/ ...