24 of 24 NIST Jobs in the East of England

information security assurance and technical cyber‐security operations within a UK organisation Strong working knowledge of ISO/IEC 27001, Cyber Essentials Plus, NIST CSF and UK GDPR/DPA 2018 Hands‐on experience with modern security tooling, including Microsoft Defender, SIEM (e.g. Sentinel), EDR/XDR and vulnerability management ...

senior leadership. Essential Experience 5+ years' experience in Information Security, Cybersecurity or Product Security. Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP. Experience conducting risk assessments, threat modelling and vulnerability management. Experience integrating security into software development lifecycles. Strong cloud security knowledge, ideally AWS. Experience ...

repositories. Studying towards, or holding, a relevant certification (e.g., CBCI, working towards MBCI, CRISC, or equivalent). Exposure to additional regulatory compliance frameworks (e.g., NIST, SOC 2, DORA). Experience working within a technology, fintech, or payments environment. Familiarity with GRC platforms or risk management and reporting tools. Experience supporting ...

risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2.Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. ...

industries. Desirable experience includes: hybrid and multi‐cloud estates such as Azure and AWS alongside a substantial on‐premises footprint; HPC and scientific computing; NIST CSF and Secure by Design; FinOps and run‐cost modelling; large‐scale workplace transformation across Microsoft 365, Windows, device lifecycle, identity and access; and certification ...

and technical expertise – Degree educated with a CISA qualification and a strong understanding of IT governance, risk, security and control frameworks including COBIT, ITIL, NIST, GDPR and PCI DSS. Strong IT audit and assurance experience – Proven track record delivering IT audits within a listed, multi-site or global organisation and ...

partners. What you will need to succeed: Experience in information security assurance and cyber security operations Strong knowledge of ISO 27001, Cyber Essentials Plus, NIST CSF and UK GDPR Experience with Microsoft Defender, Sentinel, EDR/XDR and vulnerability tools Incident response and SOC experience Strong stakeholder management and reporting ...

security principles and cloud security architecture Experience with Microsoft Entra ID, Conditional Access and identity security Understanding of security frameworks including MITRE ATT&CK, NIST or ISO 27001 Experience with security automation and Infrastructure as Code technologies such as Terraform, Bicep or Azure DevOps Desirable Experience Experience working within enterprise ...

Experience in assessing resilience programs, identifying gaps in current capabilities, and develop ing practical improvement roadmaps that help clients harden infrastructure, improve alignment to NIST CSF categories, strengthen recovery and continuity strategies, test response capabilities, and mature program governance over time Experience in a consult ing or corporate advisory role ...

Compromise Malware & Ransomware Account Compromise Privilege Escalation Insider Threats DLP & Data Exfiltration Alerts Suspicious Authentication Activity Knowledge of: MITRE ATT&CK, Cyber Kill Chain, NIST CSF, and security event classification. If you're a skilled SOC Analyst with strong Sentinel experience and available for your next contract opportunity ...

need from day one Experience managing projects within business change, transformation, technology or operational environments. Familiarity with cyber industry frameworks and controls (NIST, CIS, ISO, CAF). Strong understanding of project management methodologies, governance and controls. Experience creating project plans, schedules, reports and RAID logs. Demonstrable experience managing stakeholders across ...

both technical and non-technical audiences. Strong leadership, problem-solving and stakeholder-management capabilities. Familiarity with security frameworks such as ISO 27001 and NIST is advantageous. Relevant professional qualifications such as CISSP, ITIL, CompTIA Security+, SANS or equivalent would be beneficial. Existing Government Security Clearance is advantageous, although candidates should ...

learn Desirable experience: Experience in data protection, with a good understanding of relevant data protection legislation (e.g., UK GDPR). ISO 27001, SOC 2, NIST CSF, CAF, HIPAA, DSPT Gap analysis, auditing, or penetration testing Process and procedure development Software or AI development/testing Client-facing roles Relevant certifications ...

evidence you could pick this up quickly. Working knowledge of at least one information security or privacy framework, such as ISO 27001, SOC 2, NIST, or GDPR. Ability to translate how a product works in security requirements and risks. Strong written and verbal communication skills, with the ability to explain ...

and multidisciplinary delivery teams to embed security throughout the project lifecycle. You will also drive the continued maturity of our security assurance capability, including NIST-aligned risk assessment methods, assurance processes, tooling, and reporting that improve consistency and visibility across programmes. You will be part of a wider UK cyber … and Experience Proven experience delivering Information Assurance, risk management, and security assurance within Defence, Government, Intelligence, or other highly regulated environments. Strong understanding of NIST RMF/CSF, ISO 27001, and Government security frameworks, with experience developing assurance artefacts such as SyOPs, RMADs, Security Impact Assessments, risk assessments, and accreditation ...

access management (IAM), including RBAC, ABAC, JWT and Cookie based authentication. Incident detection and response in MOD environments. Security compliance and regulatory frameworks (e.g., NIST, CIS Benchmarks). Experience working with Kubernetes at an administrative level Soft Skills Strong leadership and mentoring abilities. Effective communication with development, operations, and security ...

/ExperienceInformation Security StrategySecurity governanceInformation risk managementSecurity ControlsStakeholder ManagementDesirable Skills/ExperienceSecurity industry recognised certification e.g. CISSP.Industry Security Frameworks and Accreditations experience i.e ISO, NIST, - MandatoryExperienced Leadership and Operational experience within industry – MandatoryUnderstanding of Security Landscape and specialisms of those domains. - MandatorySignificant Risk Management, and Accreditation expertiseOur PackageTailored benefits make ...

including secure build pipelines, policy-as-code, compliance controls, and DevSecOps integration. Exposure to governance frameworks or regulatory models impacting modern development environments (e.g., NIST guidance, EU AI Act, internal enterprise policy frameworks). Experience designing reusable lab environments, demo frameworks, or reference architectures for engineering audiences. Background in Platform ...

including secure build pipelines, policy-as-code, compliance controls, and DevSecOps integration. Exposure to governance frameworks or regulatory models impacting modern development environments (e.g., NIST guidance, EU AI Act, internal enterprise policy frameworks). Experience designing reusable lab environments, demo frameworks, or reference architectures for engineering audiences. Background in Platform ...

network environments. Security architecture approaches including segmentation, zoning, secure remote access, monitoring, logging and telemetry. Recognised frameworks and standards such as IEC 62443, NIST CSF, NCSC CAF, ISO 27001, NIS/NIS2 and related regulatory requirements. OT security tooling and monitoring platforms such as Nozomi, Claroty, Dragos, Microsoft Defender … networks and the operational constraints that shape cyber security decisions in safety-critical environments. Experience applying recognised frameworks and standards such as IEC 62443, NIST CSF, NCSC CAF, ISO 27001, NIS/NIS2 or related regulatory requirements. Proven ability to translate cyber risk into practical architecture decisions, control designs, implementation ...

generating clear, auditable security evidence. Work as the security partner to Engineering, defining reusable security patterns and production‐readiness standards, applying frameworks such as NIST and STIGs pragmatically and driving security findings through to resolution. #J-18808-Ljbffr ...

support risk-based decision making, and work with customers, suppliers, and delivery teams to embed security throughout the lifecycle. You will drive maturity of NIST-aligned risk assessment methods, assurance processes, tooling, and reporting to improve consistency and visibility across projects. #J-18808-Ljbffr ...

to. 5+ years of relevant experience in the medical device space (either industry or through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat … modeling, security testing) and determining residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle ...

This job is with TE Connectivity, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At TE, you will unleash ...