1 to 25 of 31 NIST Jobs in the East of England

/EU/NATO information security standards and frameworks, including: UK MOD Secure by Design GovS 007 HMG IS1/IS2 ISO 27001 NIST SP 800-30, 800-37 and 800-53 UK MOD Information Security-related JSPs EU Cyber Resilience Act (CRA) US Department of Defense information security policies ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

management. Experience advising on and implementing security controls within large, complex organisations. Solid understanding of recognised security frameworks and standards such as ISO 27001, NIST, and CIS Controls. Strong understanding of modern security concepts including Zero Trust, cloud security, identity‐first security, and cyber resilience. Experience identifying security risks and ...

Defender, Sentinel, Entra ID or similar platforms Building strong relationships with stakeholders at all levels Desirable Experience Cyber Essentials or Cyber Essentials Plus NIST Cyber Security Framework Experience within infrastructure, utilities, energy, defence, engineering, financial services or other regulated sectors Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor ...

industries. Desirable experience includes: hybrid and multi-cloud estates such as Azure and AWS alongside a substantial on-premises footprint; HPC and scientific computing; NIST CSF and Secure by Design; FinOps and run-cost modelling; large-scale workplace transformation across Microsoft 365, Windows, device lifecycle, identity and access; and certification ...

industries. Desirable experience includes: hybrid and multi-cloud estates such as Azure and AWS alongside a substantial on-premises footprint; HPC and scientific computing; NIST CSF and Secure by Design; FinOps and run-cost modelling; large-scale workplace transformation across Microsoft 365, Windows, device lifecycle, identity and access; and certification ...

control. Proven experience advising on security controls in large, complex organisations. A solid understanding of security frameworks and best practice, such as ISO 27001, NIST and CIS. Strong knowledge of modern security concepts, including Zero Trust, identity‐first security and cloud security. Experience taking a risk‐based approach to improve ...

security principles and cloud security architecture Experience with Microsoft Entra ID, Conditional Access and identity security Understanding of security frameworks including MITRE ATT&CK, NIST or ISO 27001 Experience with security automation and Infrastructure as Code technologies such as Terraform, Bicep or Azure DevOps Desirable Experience Experience working within enterprise ...

Microsoft 365, Entra ID, Intune and Windows Server Experience with Microsoft Defender and security-focused technologies Knowledge of security frameworks such as ISO 27001, NIST and CIS Controls Experience delivering infrastructure migration or transformation projects Excellent communication and stakeholder management skills Relevant Microsoft certifications highly desirable Desirable Certifications CISSP CCNP ...

Experience in assessing resilience programs, identifying gaps in current capabilities, and develop ing practical improvement roadmaps that help clients harden infrastructure, improve alignment to NIST CSF categories, strengthen recovery and continuity strategies, test response capabilities, and mature program governance over time Experience in a consult ing or corporate advisory role ...

supporting supplier incident reviews, root-cause analysis and remediation oversight. Nice-to-havesFamiliarity with recognised information security and control frameworks, such as ISO 27001, NIST or COBIT.Experience using enterprise risk, GRC or TPRM platforms, such as ServiceNow, Archer, OneTrust or a comparable system. Experience assessing systemic supplier concentration risk. Experience ...

Knowledge of UK MOD and Government security standards and frameworks, including GovS 007, HMG IS1 & IS2 and relevant JSPs . Knowledge of frameworks including NIST SP800-30/37/53 and ISO 27001 . Experience working directly with product development and engineering teams. Knowledge of current cryptographic technologies and ...

development and mentoring of junior team members. Confident understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005. Varied Experience of assessing risk and building or evolving risk management framework components such as measurement criteria. Good ...

need from day one Experience managing projects within business change, transformation, technology or operational environments. Familiarity with cyber industry frameworks and controls (NIST, CIS, ISO, CAF). Strong understanding of project management methodologies, governance and controls. Experience creating project plans, schedules, reports and RAID logs. Demonstrable experience managing stakeholders across ...

Compromise Malware & Ransomware Account Compromise Privilege Escalation Insider Threats DLP & Data Exfiltration Alerts Suspicious Authentication Activity Knowledge of: MITRE ATT&CK, Cyber Kill Chain, NIST CSF, and security event classification. PLEASE NOTE - Head Resourcing DO NOT use AI in the matching/screening/selection of candidates. Head Resourcing ...

Monitor platform health, ingestion coverage, API integrations, and license utilisation. Cloud Posture Management Review, tune, and maintain security policies, controls, and baselines (e.g., CIS, NIST, ISO). Validate and enhance attack path analysis, identity risk detection, and data exposure mapping. Prioritise findings using impact‐based and exploit‐path‐based logic. ...

Security Accreditors and Security Assurance Coordinators in support of security Accreditation. What you'll bring: Practical experience of ISO27001/27004/27005 and NIST Risk Management Framework (RMF).Experience working with a security risk management system for highly regulated products based on recognised frameworks such as aerospace, nuclear, automotive ...

/EU/NATO information security standards and frameworks, including the UK MOD Secure by Design framework, GovS 007, HMG IS1&2, ISO27001, NIST SP800-30/37/53, UK MOD Information Security related JSPs, EU CRA and US DoD information security policies. Practical experience of producing technical assurance ...

/EU/NATO information security standards and frameworks, including the UK MOD Secure by Design framework, GovS 007, HMG IS1&2, ISO27001, NIST SP800-30/37/53, UK MOD Information Security related JSPs, EU CRA and US DoD information security policies. Practical experience of producing technical assurance ...

/EU/NATO information security standards and frameworks, including the UK MOD Secure by Design framework, GovS 007, HMG IS1&2, ISO27001, NIST SP800-30/37/53, UK MOD Information Security related JSPs, EU CRA and US DoD information security policies. Practical experience of producing technical assurance ...

onsite). Key duties include monitoring, triaging and investigating security incidents using IBM QRadar SIEM and Microsoft Defender, with knowledge of MITRE ATT&CK, NIST CSF and incident response lifecycle. #J-18808-Ljbffr ...

supervision Technical skills in Microsoft Defender, Microsoft Sentinel, and IBM QRadar Knowledge of incident response lifecycle and frameworks such as MITRE ATT&CK and NIST Experience with various incident types, including phishing, malware, and insider threats If you are a SOC Analyst with a strong background in security operations and ...

simple, practical terms. Desirable SkillsExperience with AI governance, responsible AI, model risk management or AI assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with ...

and multidisciplinary delivery teams to embed security throughout the project lifecycle. You will also drive the continued maturity of our security assurance capability, including NIST-aligned risk assessment methods, assurance processes, tooling, and reporting that improve consistency and visibility across programmes. You will be part of a wider UK cyber … and Experience Proven experience delivering Information Assurance, risk management, and security assurance within Defence, Government, Intelligence, or other highly regulated environments. Strong understanding of NIST RMF/CSF, ISO 27001, and Government security frameworks, with experience developing assurance artefacts such as SyOPs, RMADs, Security Impact Assessments, risk assessments, and accreditation ...

need from day one: Experience managing projects within business change, transformation, technology or operational environments. Familiarity with cyber industry frameworks and controls (NIST, CIS, ISO, CAF). Strong understanding of project management methodologies, governance and controls. Experience creating project plans, schedules, reports and RAID logs. Demonstrable experience managing stakeholders across ...