21 of 21 NIST Jobs in the East of England

organisations. Expertise across application security, infrastructure security, cloud security, and information governance. Experience delivering and maintaining frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF, or similar. Strong knowledge of vulnerability management, security operations, incident response, and vendor risk management. Experience engaging with executive leadership and boards on security ...

remediation. Knowledge of SIEM technologies and security monitoring. Vulnerability management experience and familiarity with related tooling. Understanding of security frameworks and standards such as NIST, ISO 27001, Cyber Essentials or NIS2. Experience supporting audits, compliance and governance activities. Strong analytical and problem-solving skills. Excellent communication skills with the ability ...

industries. Desirable experience includes: hybrid and multi‐cloud estates such as Azure and AWS alongside a substantial on‐premises footprint; HPC and scientific computing; NIST CSF and Secure by Design; FinOps and run‐cost modelling; large‐scale workplace transformation across Microsoft 365, Windows, device lifecycle, identity and access; and certification ...

Experience in assessing resilience programs, identifying gaps in current capabilities, and develop ing practical improvement roadmaps that help clients harden infrastructure, improve alignment to NIST CSF categories, strengthen recovery and continuity strategies, test response capabilities, and mature program governance over time Experience in a consult ing or corporate advisory role ...

security principles and cloud security architecture Experience with Microsoft Entra ID, Conditional Access and identity security Understanding of security frameworks including MITRE ATT&CK, NIST or ISO 27001 Experience with security automation and Infrastructure as Code technologies such as Terraform, Bicep or Azure DevOps Desirable Experience Experience working within enterprise ...

regulated infrastructure, telecoms or another operationally critical environment. Experience of service automation, AI-enabled service management or digital employee experience. Familiarity with ISO 27001, NIST Cybersecurity Framework or ISO 20000. Conditions of Employment You will hold a driving licence. What can you expect from us Cost of living annual ...

evidence. The relevant reference points are: NCSC's Guidelines for Secure AI System Development The UK government's AI Cyber Security Code of Practice NIST AI RMF ISO/IEC 42001 The EU AI Act, where relevant to clients or operations Qualifications Skills and background The ideal profile ...

analytics, or equivalent deep, hands‐on senior career experience. MLOps and LLMOps: model deployment, monitoring and retraining. Responsible AI frameworks (ISO/IEC 42001, NIST AI RMF, EU AI Act). Enterprise data architecture, data warehousing or semantic modelling (star schemas, dimensional models). Microsoft Fabric, Azure data services ...

Experience coaching or mentoring analysts and contributing to team development, operational workload management, or shift leadership Knowledge of incident response and adversary frameworks, including NIST Incident Response and MITRE ATT&CK, and applying them in operational investigations Ability to provide clear technical direction to Tier 1 and Tier 2 analysts ...

learn Desirable experience: Experience in data protection, with a good understanding of relevant data protection legislation (e.g., UK GDPR). ISO 27001, SOC 2, NIST CSF, CAF, HIPAA, DSPT Gap analysis, auditing, or penetration testing Process and procedure development Software or AI development/testing Client-facing roles Relevant certifications ...

experience producing security cases and technical security assurance documentation. Knowledge of UK MOD security requirements and relevant frameworks, such as Secure by Design, JSPs, NIST and ISO 27001. Ability to work directly with engineering and development teams, influencing technical design decisions rather than operating solely in an advisory or governance ...

evidence you could pick this up quickly. Working knowledge of at least one information security or privacy framework, such as ISO 27001, SOC 2, NIST, or GDPR. Ability to translate how a product works in security requirements and risks. Strong written and verbal communication skills, with the ability to explain ...

access management (IAM), including RBAC, ABAC, JWT and Cookie based authentication. Incident detection and response in MOD environments. Security compliance and regulatory frameworks (e.g., NIST, CIS Benchmarks). Experience working with Kubernetes at an administrative level Soft Skills Strong leadership and mentoring abilities. Effective communication with development, operations, and security ...

and access controls , including RBAC, privileged access management, and data access governance. Proven ability to support continuous compliance monitoring against frameworks such as CIS, NIST, and financial services regulatory standards. Strong risk assessment and stakeholder management skills, with the ability to identify security threats, drive remediation activities, and communicate risks ...

Strong understanding of UK MOD Secure by Design and Defence security assurance. Experience with frameworks including GovS 007, HMG IS1/IS2, ISO 27001, NIST and MOD JSPs. Understanding of Systems Engineering, V&V, Product Test experience Experience with product-specific OS, firmware and software security controls. This ...

build strong relationships with internal and external stakeholders Excellent communicator, both written and spoken Experience of working with regulatory frameworks such as SOX and NIST Riskonnect Experience preferred Strong Excel/PowerPoint skills; BI/reporting tools Benefits Flexible benefits fund emergency leave days adoption leave 28 days annual leave ...

security (e.g. timing attacks, risks in shared GPU and inference infrastructure). Familiarity with AI assurance standards and regulation (e.g. ISO/IEC 42001, NIST AI RMF, the EU AI Act). A public track record, such as published research, CVEs, conference talks, bug bounties or CTF results. ...

This job is with TE Connectivity, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At TE, you will unleash ...

assurance engagements, including Defence Cyber Certification assessments, with appropriate support and oversight. Supporting larger assurance engagements against frameworks such as Defence Cyber Certification and NIST Cybersecurity Framework. Reviewing technical and documentary evidence to assess compliance against security requirements. Supporting customers and stakeholders in understanding and addressing identified security gaps. Helping … audits, Compliance assessments, Cyber assurance activities Experience with recognised cyber security frameworks and standards, including: Defence Cyber Certification (DCC), DefStan 05-138, Cyber Essentials, NIST Cybersecurity Framework (NIST CSF) Strong written and verbal communication skills. Can conduct robust reviews of technical and documentary evidence, translating findings into clear, defensible assessment ...

assurance engagements, including Defence Cyber Certification assessments, with appropriate support and oversight. Supporting larger assurance engagements against frameworks such as Defence Cyber Certification and NIST Cybersecurity Framework. Reviewing technical and documentary evidence to assess compliance against security requirements. Producing clear and accurate reports detailing findings, observations and recommendations. Supporting customers … audits Compliance assessments Cyber assurance activities Experience with recognised cyber security frameworks and standards, including: Defence Cyber Certification (DCC) DefStan 05-138 Cyber Essentials NIST Cybersecurity Framework (NIST CSF) Strong written and verbal communication skills. Can conduct robust reviews of technical and documentary evidence, translating findings into clear, defensible assessment ...

products, track remediation through to release, and support regular security patch releases. Compliance & Hardening: Help CRFS meet customer and regulatory security requirements (e.g. NIST SP 800-53, DISA STIGs, FIPS 140) by hardening our Linux-based product images and servers, and producing the repeatable scan results and technical evidence needed … explain security findings constructively and to own assigned work through to completion. Highly Desirable Regulated Environments: Experience working to security standards such as NIST SP 800-53/RMF, DISA STIGs, CIS Benchmarks, FIPS 140, ISO 27001 or Cyber Essentials Plus, ideally in defense, aerospace or another regulated sector. Security ...