701 to 725 of 772 NIST Jobs in the UK

technologies, architectures, protocols, threats and controls Proven experience building a security capability, service or function from the ground up Strong knowledge of IEC 62443, NIST CSF and NIST SP 800-82 Practical experience applying the Purdue model within manufacturing/engineering organisations Working knowledge of project management principles Willingness ...

Head of Information Security Network Security/Microsoft 365/Azure/Identity and Access/NIST CSF London (Hybrid -2 Days Onsite, 3 Days WFH per week) Up to £125,000 depending on skills and experience + Benefits + Bonus Are you a hands-on security professional ready … Good knowledge of cloud security, ideally within Microsoft 365 and Azure A strong understanding of identity, authentication, privileged access and access control Experience applying NIST CSF, CIS Controls or ISO 27001 as practical tools, with a record of improving security standards and policies Desirable: Google Enterprise knowledge, a recognised security ...

Extensive experience with the NIST RMF and independently leading security control assessments from start to finish using the NIST Framework. Experience in several of the following areas is required: understanding of IT security practices and procedures; knowledge of current security tools available; different communication protocols; encryption techniques/tools; secure ...

with business, security, infrastructure and compliance teams to develop security roadmaps, assess risk, integrate modern security technologies and ensure alignment with frameworks such as NIST SP 800-207. Key Responsibilities Architect solutions and technically lead their implementation, including on-prem secure cloud and Zero Trust architecture, in line with … security, security architecture or related disciplines, including delivery within Defence or highly regulated environments Proven experience designing and implementing Zero Trust Architectures aligned to NIST SP 800-207 Strong knowledge of IAM, network security, endpoint security, cloud security and security monitoring Experience integrating security architectures into wider enterprise, cloud and ...

scheme. Broad familiarity with UK Government physical and personnel security such as NPSA and UKSV. Risk assessment using recognised standards such as IS1 and NIST SP800-30. Able to express yourself effectively, with a high degree of clarity, in English, especially when justifying and explaining required security measures. Able … prioritise and manage your time to achieve multiple different tasks. (Desirable) Familiarity with broader international security standards such as ISO27001, CMMC, and the NIST Cyber Security Framework (especially SP800-30 and SP800-53). (Desirable) Familiarity with UK nuclear regulations such as the ONR SyAPs. (Desirable) Familiarity with the AtkinsRéalis ...

and assurance of Backend Platform and endpoint protection and vulnerability management capabilities within secure, offline (air-gapped) environments . The Architect must apply the NIST Cybersecurity Framework and MoD security policies to the backend platform, while supporting the Security and Infrastructure teams in designing and implementing security controls across … security controls. Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer. Ensure compliance with MOD, NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. Collaborate with infrastructure ...

and implement comprehensive Information Assurance Strategies to meet complex customer security requirements. Lead risk management activities that align with an industry standard such as NIST SP 800-37 or the ISO/IEC 27000 series. Create and maintain security documentation including system security plans, policies, procedures, and compliance evidence. Interface … Engineer - Product Security The ability to interpret and implement industry security standards and frameworks such as the ISO/IEC 27000 series or NIST SP-800 series. Experience in information assurance, security engineering, cyber security, or a similar field. Deep understanding of security risk management and assurance methodologies & processes. Experience ...

support application security platforms, providing expert troubleshooting and incident support. Make sure security controls align with industry standards and regulatory requirements including ISO 27001, NIST and GDPR. Develop performance metrics and reporting that help measure and improve application security outcomes. Work with technology, compliance and business teams to strengthen security … Terraform, PowerShell, Python and REST APIs. Experience leading technical teams and developing high-performing engineers. Knowledge of security frameworks and regulations including ISO 27001, NIST and GDPR. Excellent communication skills, with the ability to explain technical concepts clearly to different audiences. Degree-level qualification in Cyber Security, Information Technology ...

and contribute to the delivery and continuous improvement of the Information Security Management System (ISMS), ensuring alignment with regulatory requirements and recognised frameworks (e.g. NIST CSF, NYDFS, ISO 27001). Translate strategic direction into operational assurance activities, ensuring effective tracking, governance and reporting of security activities, control performance and … assessment and assurance delivery. Demonstrable experience in technical security assurance across infrastructure, applications and cloud environments. Strong working knowledge of recognised frameworks such as NIST CSF and ISO 27001. Experience supporting regulatory compliance obligations (e.g. FCA, PRA, NYDFS or equivalent). Experience supporting audit activities and remediation tracking. Experience ...

relevant frameworks (e.g., GovAssure, JSP 604) and supporting the client in securing Authority to Operate (ATO) status. Implement and manage security risk processes (e.g., NIST RMF), producing assurance and risk artefacts, and embedding a culture of continuous risk management. Collaborate with clients to understand their security needs, provide solution advice … trusted advisor, and shape solutions that embed Secure by Design (SbD) principles from inception. Lead security maturity assessments (e.g., against ISO 27001, NIST CSF, DevSecOps practices) and deliver remediation roadmaps to uplift client cyber resilience and support external audit requirements. We are always listening to our growing teams and evolving ...

Information Security Risk Framework. Assess the effectiveness of information security controls and identify opportunities for improvement. Apply recognised security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, PCI-DSS, and other relevant best practices in a proportionate and risk-based manner. Liaise with Cyber Security, IT, Business Continuity … Management principles and methodologies. Experience conducting risk assessments, control reviews, audits, or assurance activities. Technical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS, and related security practices. Strong communicator with positive influencing and interpersonal skills. Ability to synthesise complex technical and ...

Cyber Security Solution Architect - Banking Client - TOGAF, NIST Cybersecurity Framework (CSF),SABSA 12 Month Contract Rate: Flexible Hybrid Working: 8 days onsite in office per month UK Applicant must use an Umbrella (Inside of IR35) We are seeking an experienced Infrastructure Security Solution Architect for a daily rate contract (rate … Solution Architect on large transformation programs. Proven expertise in Cyber Security architecture, ideally in regulated industries. Strong knowledge of security frameworks (e.g. SABSA, NIST, ISO 2700x). Familiarity with enterprise architecture frameworks (TOGAF, SAFe) and Agile delivery models. Ability to operate at both strategic (roadmaps, reference models) and detailed technical ...

and network environments and play a central role in maturing our compliance programme through ISO 27001 renewal, Cyber Essentials certification and alignment with the NIST and CMMC frameworks. This is a senior, hands-on role for someone who thrives taking on a task, shaping the plan, bringing the right people … lead the response alongside our external Security Operations Centre (SOC). You’ll drive our compliance and accreditation work for ISO 27001, Cyber Essentials, NIST and CMMC, using Vanta to manage control coverage and evidence collection. You’ll also contribute to the ongoing development of our Information Security Management System ...

development Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering organization … communication with peers, stakeholders, auditors, and customers Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance A degree ...

development Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering organization … communication with peers, stakeholders, auditors, and customers Understanding of industry-recognised security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance A degree ...

tooling developmentDevelop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us)Develop systems, automations, and methods of security observability to push the GRC engineering organization … require communication with peers, stakeholders, auditors, and customersUnderstanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidanceA degree ...

exposure to prompt injection) Map findings to frameworks: link the issues we find to MITRE ATLAS, OWASP Top 10 for LLM Applications, and NIST AI RMF so customers understand the risk behind what we show them Write up findings: write clear technical notes on what each platform shares, which checks … of: Microsoft Copilot Studio, Azure AI Foundry, AWS Bedrock, Anthropic Claude, OpenAI Assistants Exposure to security frameworks: OWASP, MITRE ATT&CK/ATLAS, NIST Any experience with Python or .NET, even from coursework or personal projects Experience with cloud platforms (Azure, AWS) at any level Signs that you enjoy technical ...

Privacy Manager/Senior Manager - Cyber Strategy & Transformation Overview Data privacy is a critical business priority and a key enabler for organisations seeking to grow in increasingly data-driven environments. This role focuses on shaping ...

systems and programmes. Support security reviews, risk assessments and assurance activities using relevant frameworks such as NCSC CAF, IEC 62443, ISO 27001 and NIST CSF. Support accreditation, regulatory and compliance activities where required. Produce clear, client-ready deliverables, including assessments, reports, roadmaps, requirements and proposals. Contribute to account growth, bids … considerations. Practical knowledge of cyber risk and threat assessment approaches. Familiarity with relevant standards and frameworks, such as IEC 62443, NCSC CAF, ISO 27001, NIST CSF and the NIS Regulations. Awareness of common OT and IT security technologies, networks, architectures and protocols. The ability to work with limited supervision, make ...

banking, investment banking or investment management environment; Managing cyber security incidents; Experience working with Cyber Security and Incident Response frameworks such as NIST, Kill Chain, Attack life Cycle, & MITRE). Relevant experience with MITRE Att&Ck alignment with security monitoring use cases. Relevant experience with cloud security assessments aligning … of information security principles and best practices; In-depth understanding of legislation affecting security, privacy and systems assurance; experiencing working to recognised standards – e.g. NIST, COBIT. GCIA, GCIH, GCFA or equivalent. What Mizuho Can Offer You Here at Mizuho, there are fantastic progression opportunities and clear paths to promotion. ...

Partner London | Hybrid 2 days office | Up to £100,000 + Bonus + Benefits Technology Risk | IT Risk | Cyber Risk | Technology Controls | Risk & Controls | NIST Auricoe is searching for an experienced Technology Risk professional to join a leading UK financial services organisation in London. This is a Technology Risk Business … Technology risks and controls are managed within the business. Formal second-line experience is advantageous but isn't essential. Knowledge of frameworks such as NIST and broader Technology/Cyber risk and maturity frameworks is useful. CRISC, CISA, CISM or CISSP would be advantageous but aren't essential. This could ...

approach to identifying and explaining cyber risks within complex transformation initiatives Project management and delivery experience across the following Cyber Security areas: frameworks (e.g. NIST CSF, CPMI-IOSCO, ISO, ‘Profile’ - Financial Services sector-specific distillation of the NIST CSF, etc.), assessments, implementation, roadmap definition (tactical and strategic), strategy, risk identification ...

governance of enterprise systems, including SAP S/4HANA. Assess existing architectures, identify risks and recommend improvements. Apply cyber security principles and frameworks, including NIST and ISO 27001. Conduct and support cyber security assessments, identifying vulnerabilities and recommending appropriate controls. Consider operational technology requirements and security risks within defence manufacturing … architecture governance. Experience within the defence manufacturing sector . Knowledge and experience of operational technology (OT) environments. Experience applying cyber security frameworks, particularly NIST and ISO 27001 . Experience conducting or supporting cyber security assessments. Knowledge of TOGAF or an equivalent enterprise architecture framework , supported by relevant practical experience. Strong ...

governance of enterprise systems, including SAP S/4HANA. Assess existing architectures, identify risks and recommend improvements. Apply cyber security principles and frameworks, including NIST and ISO 27001. Conduct and support cyber security assessments, identifying vulnerabilities and recommending appropriate controls. Consider operational technology requirements and security risks within defence manufacturing … architecture governance. Experience within the defence manufacturing sector . Knowledge and experience of operational technology (OT) environments. Experience applying cyber security frameworks, particularly NIST and ISO 27001 . Experience conducting or supporting cyber security assessments. Knowledge of TOGAF or an equivalent enterprise architecture framework , supported by relevant practical experience. Strong ...

and vulnerability scanners. Knowledge of common adversarial Tactics, Techniques and Procedures (Mitre Att&ck TTPs). Knowledge of security standards and frameworks (e.g. ISO27001, NIST CSF, AWS FSBP) is beneficial. Relevant security certifications (e.g. GCLD, Security+, AWS/GCP Security Certifications) are a plus. Excellent problem-solving and analytical skills. … and vulnerability scanners. Knowledge of common adversarial Tactics, Techniques and Procedures (Mitre Att&ck TTPs). Knowledge of security standards and frameworks (e.g. ISO27001, NIST CSF, AWS FSBP) is beneficial. Relevant security certifications (e.g. GCLD, Security+, AWS/GCP Security Certifications) are a plus. Excellent problem-solving and analytical skills. ...