776 to 800 of 919 NIST Jobs in the UK

CWPP, CASB)Manage identities and roles effectively across cloud and hybrid environmentsMonitor and remediate infrastructure to comply with regulations and best practices (e.g., PCI, NIST CSF, GDPR, HIPAA)Platform, containers & developer enablementDesign and implement secure container standards and automation that enable frictionless developer workflowsMaintain Kubernetes security aligned with current best … cloud environments and cloud-to-cloud securityKnowledge of CI/CD best practices and toolsFamiliarity with regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS, NIST CSF)Strong proficiency with Python, Terraform, and configuration management (e.g., Puppet)Hands-on experience building GitHub Actions and workflowsExperience with observability and security operations tooling ...

network design).Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial.Experience with regulatory and compliance frameworks (e.g., ISO 27001, GDPR, NIST) and security best practices.Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes.Bachelor … and their advantages and disadvantagesSecurity Zone Design and considerationsNetwork and Security Architecture Design and ConsiderationsUnderstanding of Information Security (Confidentiality, Integrity, Availability), MITRE ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etcRisk Management in Cyber Security, SSL Blind spots, what causes them and how to mitigateMalware/Ransomware ...

evolving and scaling incident response capabilities, tooling, automation, and AI augmentation across Security Operations’ function.• Define and maintain the RESPOND capability taxonomy, mapped to NIST CSF (Respond/Recover), NIST SP 800-61r3, MITRE ATT&CK, and D3FEND.• Set roadmap and strategy for SOAR platforms (Splunk SOAR, Microsoft Sentinel ...

identity, authorisation, supply‐chain integrity, and the need for guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. ...

identity, authorisation, supply‐chain integrity, and the need for guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. ...

architecture surface: identity, authorisation, supply-chain integrity, and the need for guardrails.Nice to haveWorking familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10.Hands-on experience with policy-as-code and turning standards into enforced controls.Contributions ...

reports, IPE) in a SOX environment. Strong working knowledge of internal control and IT governance frameworks, including but not limited to COSO, COBIT, NIST CSF, and IIA Standards. Strong project management skills and the ability to produce timely and high-quality deliverables and manage multiple and shifting priorities ...

areas such as: OT/ICS environments SCADA, DCS, PLCs or industrial networks OT network security Cyber risk/security assessments Industrial control systems NIST, IEC 62443 or similar frameworks Network security, segmentation or monitoring Why this opportunity? You're joining while the Belfast OT capability is being built. ...

LonWorks or similar Comfortable owning platform lifecycle, servers, databases, backups Vendor certs a bonus (Trend, Siemens, Schneider, Honeywell, Tridium Niagara) IEC 62443/NIST/CIS awareness advantageous, not essential RG Setsquare is acting as an Employment Agency in relation to this vacancy. ...

compliance checks so security scales without frictionDefining and enforcing cloud security architecture standards, guardrails, and policy-as-code inline with industry best practices including NIST, CIS, and PCI DSS.Use Wiz or equivalent CNAPP/CSPM to continuously assess, prioritise, and drive remediation of misconfigurations and vulnerabilities against CIS, NIST, and … coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate. Maintain alignment to PCI DSS, SOC2, ISO27001 NIST, and CIS frameworks. Produce documentation and evidence to support audit and assurance activities. AI SecurityDesign and implement guardrails for AI/LLM systems, covering data ...

checks so security scales without friction Defining and enforcing cloud security architecture standards, guardrails, and policy-as-code inline with industry best practices including NIST, CIS, and PCI DSS. Use Wiz or equivalent CNAPP/CSPM to continuously assess, prioritise, and drive remediation of misconfigurations and vulnerabilities against CIS, NIST … coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate. Maintain alignment to PCI DSS, SOC2, ISO27001 NIST, and CIS frameworks. Produce documentation and evidence to support audit and assurance activities. AI Security Design and implement guardrails for AI/LLM systems, covering ...

certifications. Microsoft Azure Security Engineer Associate. AWS Security Specialty. Google Professional Cloud Security Engineer. DevSecOps or CI/CD related certifications. ISO 27001 certifications. NIST CSF and NIST SSDF knowledge. Package & Benefits Competitive salary Annual bonus Car allowance Hybrid working Comprehensive benefits package Ongoing training and professional development Industry-recognised ...

identity and access management (IAM).Strong engineering background with expertise in Windows Server, endpoint platforms, macOS, and Linux.Strong knowledge of information security frameworks, including NIST and relevant NIST 800-series publications.Hands-on experience with SIEM technologies, including data ingestion, monitoring, alerting, and integration with security operations processes.Proficiency in Terraform and ...

identity and access management (IAM).Strong engineering background with expertise in Windows Server, endpoint platforms, macOS, and Linux.Strong knowledge of information security frameworks, including NIST and relevant NIST 800-series publications.Hands-on experience with SIEM technologies, including data ingestion, monitoring, alerting, and integration with security operations processes.Proficiency in Terraform and ...

and access management (IAM).Strong engineering background with expertise in Windows Server, endpoint platforms, macOS, and Linux. Strong knowledge of information security frameworks, including NIST and relevant NIST 800-series publications. Hands-on experience with SIEM technologies, including data ingestion, monitoring, alerting, and integration with security operations processes. Proficiency ...

and access management (IAM).Strong engineering background with expertise in Windows Server, endpoint platforms, macOS, and Linux. Strong knowledge of information security frameworks, including NIST and relevant NIST 800-series publications. Hands-on experience with SIEM technologies, including data ingestion, monitoring, alerting, and integration with security operations processes. Proficiency ...

audits. Strong knowledge of ISO 27002 and experience delivering against its requirements. Strong knowledge of Cyber Essentials/Cyber Essentials Plus. Experience working with NIST security frameworks. Knowledge of CAF/Cyber Assessment Framework and its application to organisational security. Understanding of NIS2, GDPR and the Data Protection Act. Strong … landscape and assess their impact on the organisation. Ensure compliance with relevant legislation, regulations, frameworks and security standards, including GDPR, Data Protection Act, NIS2, NIST, Cyber Essentials and ISO 27002. Lead and coordinate information security metrics, reporting and management information. Support and oversee offensive security activities, vulnerability management and security ...

and compliant responses to client inquiries.Risk & Compliance Support:Support clients in understanding BCG's compliance with relevant frameworks (e.g. ISO 27001, SOC 2, GDPR, NIST) and help translate technical security concepts into business-relevant assurance responses.Quality & Continuous Improvement:Support the continuous improvement of Client Assurance Services by identifying opportunities … field.Experience supporting client-facing information security, assurance, audit, compliance, or advisory activities.Strong understanding of information security frameworks and standards including ISO 27001, SOC 2, NIST CSF, GDPR, and relevant regional data protection regulations.Experience responding to client security questionnaires, due diligence requests, audits, or RFPs, with the ability to communicate technical ...

maintaining quality and managing stakeholder expectations. Willingness and flexibility to travel throughout the UK (and occasionally overseas) as required. Relevant professional certifications (e.g., ISO27000, NIST Cyber Security Professional, CISMP, CISM, CISSP, CCSP, Chartered Cyber Security Professional) are highly desirable. Solid understanding of ‘Secure by Design’ methodology. Commitment to ongoing professional … and help them deploy that technology in live OT/ICS environments. Familiarity with OT cyber security standards or regulatory frameworks (e.g., IEC 62443, NIST CSF, NIS Regulations, HSE OG-0086). Relevant OT cyber security qualifications (e.g., GICSP, IEC/ISA 62443). Membership of recognised security professional bodies ...

design and implementation of security controls for cloud-based platforms, helping ensure compliance with industry standards and regulations such as ISO 27001, FedRAMP, NIST, IRAP, and SOC 2.Assist with technical risk assessments of cloud infrastructure and applications, helping identify potential security gaps and recommending countermeasures.Assist with the development and maintenance … Vulnerability tools, Data protection, encryption, IAM, endpoint detection, and event/incident management.Familiarity with industry security standards and frameworks, such as ISO 27001, NIST, and CSA.Good analytical and problem-solving skills, with a willingness to tackle complex security issues and develop effective solutions.Strong communication and interpersonal skills, with the ability ...

based security and zero-trust platforms (e.g., Zscaler ZIA, ZPA, ZDX)Creating enterprise-wide security blueprints and reference architectures aligned with Zero Trust principles (NIST 800-207, CISA).Designing scalable identity-centric security controls using SSO, MFA, device posture, and least-privilege access models.Collaborating with networking teams to modernize … hands-on expertise with:Zscaler ZIA, ZPA, ZDX or similarZscaler Client ConnectorApp Connectors, Cloud Firewall, Cloud Sandbox, DLP, CASBDeep understanding of:Zero Trust frameworks (NIST 800-207, SASE, SSE)Identity and access management (Azure AD, Okta, Ping)Modern network design (SD-WAN, DNS security, routing fundamentals)Endpoint security (EDR/ ...

sectors, ensuring high-quality outcomes and practical recommendations 3. Act as a subject matter expert across recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF and Defence Cyber Certification requirements 4. Design and implement governance frameworks, policies, processes and controls that help clients manage cyber risk effectively 5. … and Compliance, ideally within cyber security, information security or technology risk 2. Good working knowledge of recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF, Cyber Essentials and related assurance or certification schemes 3. Experience leading risk assessments, control reviews, audit preparation, compliance programmes or security maturity assessments ...

and identity-centric security models.Experience with container and Kubernetes security.Experience with Infrastructure as Code technologies and automated cloud security.Familiarity with security frameworks such as NIST CSF, NIST 800-53, ISO 27001, SOC 2, or CIS Controls.Experience with threat modeling and architecture risk assessment methodologies.Relevant certifications such as CISSP, CCSP ...

Security Operations Threat Modelling Security Assessments And some exposure to AI, GenAI, LLMs or emerging AI security risks . Knowledge of frameworks such as NIST CSF, NIST AI RMF, OWASP, MITRE ATLAS or ISO 27001 would be useful, but isn't essential. Why this opportunity? AI Security is moving quickly ...

compliance/infrastructure support services operating therein Understanding of common security and privacy management frameworks and participation in audit/certification such as: GDPR, NIST SP800-53, ISO 27001, NIST CSF, etc Experience evaluating logging activities for ingestion into SIEM as part of continuous monitoring plan Experience with security technologies ...