1 to 25 of 27 NIST Jobs in the East of England

security assessments, vulnerability reviews, and compliance audits against corporate and government security standards.Support risk treatment planning and remediation activities.Ensure alignment with NCSC, MoD, JSP, NIST, and Lockheed Martin security policies and standards where applicable.Support incident response investigations affecting classified systems.Assist with vulnerability management, patch management, and security monitoring activities.Participate ...

/EU/NATO information security standards and frameworks, including: UK MOD Secure by Design GovS 007 HMG IS1/IS2 ISO 27001 NIST SP 800-30, 800-37 and 800-53 UK MOD Information Security-related JSPs EU Cyber Resilience Act (CRA) US Department of Defense information security policies ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

of work history such as:Information Security qualification (or equivalent) e.g. CISSP.In-depth knowledge of security frameworks, standards, and best practices (e.g., ISO 27001, NIST, CIS).Experience as a Security Architect or in a similar role, with a strong track record of designing and implementing security controls and/ ...

and access management.Experience advising on and implementing security controls within large, complex organisations.Solid understanding of recognised security frameworks and standards such as ISO 27001, NIST, and CIS Controls.Strong understanding of modern security concepts including Zero Trust, cloud security, identity-first security, and cyber resilience.Experience identifying security risks and developing practical ...

Defender, Sentinel, Entra ID or similar platforms Building strong relationships with stakeholders at all levels Desirable Experience Cyber Essentials or Cyber Essentials Plus NIST Cyber Security Framework Experience within infrastructure, utilities, energy, defence, engineering, financial services or other regulated sectors Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor ...

experience in security testing and assurance and a strong understanding of information security principles, emerging threats, best practices, compliance frameworks and (e.g. ISO 27001, NIST) and risk management practices. You should hold a degree in Computer Science or equivalent experience, with relevant professional qualifications including CISSP and accredited security testing. ...

cyber security and assurance of deployed controls. Established cyber security credentials. Good working knowledge of applicable international standards and information security frameworks (ISO27001, CIS, NIST, GDPR, Cyber Essentials Plus). Aware of risk assessment methodologies including ISO27005 and NIST. Familiar with cyber security tools such as defender for cloud, defender ...

and access control.Proven experience advising on security controls in large, complex organisations.A solid understanding of security frameworks and best practice, such as ISO 27001, NIST and CIS.Strong knowledge of modern security concepts, including Zero Trust, identity-first security and cloud security.Experience taking a risk-based approach to improve security posture ...

Microsoft 365, Entra ID, Intune and Windows Server Experience with Microsoft Defender and security-focused technologies Knowledge of security frameworks such as ISO 27001, NIST and CIS Controls Experience delivering infrastructure migration or transformation projects Excellent communication and stakeholder management skills Relevant Microsoft certifications highly desirable Desirable Certifications CISSP CCNP ...

PowerShell, KQL, Python). Knowledge of ransomware recovery patterns (immutable backups, restore validation, offline documentation). Exposure to audit/compliance requirements (ISO 27001, NIST, CIS) and evidence collection. Technical Skills Cloud: Azure security controls, Entra ID (Azure AD), Conditional Access, RBAC, Azure Policy, secure logging/monitoring. On-prem ...

Knowledge of UK MOD and Government security standards and frameworks, including GovS 007, HMG IS1 & IS2 and relevant JSPs . Knowledge of frameworks including NIST SP800-30/37/53 and ISO 27001 . Experience working directly with product development and engineering teams. Knowledge of current cryptographic technologies and ...

development and mentoring of junior team members. Confident understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005. Varied Experience of assessing risk and building or evolving risk management framework components such as measurement criteria. Good ...

Compromise Malware & Ransomware Account Compromise Privilege Escalation Insider Threats DLP & Data Exfiltration Alerts Suspicious Authentication Activity Knowledge of: MITRE ATT&CK, Cyber Kill Chain, NIST CSF, and security event classification. If you're a skilled SOC Analyst with strong QRadar experience and available for your next contract opportunity ...

with Security Accreditors and Security Assurance Coordinators in support of security Accreditation.What you’ll bring:Practical experience of ISO27001/27004/27005 and NIST Risk Management Framework (RMF).Experience working with a security risk management system for highly regulated products based on recognised frameworks such as aerospace, nuclear, automotive ...

/EU/NATO information security standards and frameworks, including the UK MOD Secure by Design framework, GovS 007, HMG IS1&2, ISO27001, NIST SP800-30/37/53, UK MOD Information Security related JSPs, EU CRA and US DoD information security policies. Practical experience of producing technical assurance ...

/EU/NATO information security standards and frameworks, including the UK MOD Secure by Design framework, GovS 007, HMG IS1&2, ISO27001, NIST SP800-30/37/53, UK MOD Information Security related JSPs, EU CRA and US DoD information security policies. Practical experience of producing technical assurance ...

/EU/NATO information security standards and frameworks, including the UK MOD Secure by Design framework, GovS 007, HMG IS1&2, ISO27001, NIST SP800-30/37/53, UK MOD Information Security related JSPs, EU CRA and US DoD information security policies. Practical experience of producing technical assurance ...

Good knowledge of procurement concepts, tools and processes- Basic knowledge of contract law- Intermediate security knowledge including a working knowledge of ISO 27001 and NIST Cyber security framework- Basic understanding on NIS 2 and EU CRA regulations- Capacity to drive process management improvements, including design and application to standard operating ...

penetration testing, vulnerability scanning and red/blue team activities would be advantageous. An understanding of security testing methodologies such as OWASP or NIST would be beneficial. Previous experience within a large enterprise or regulated environment would be advantageous. Exposure to security tooling, including vulnerability management platforms or test management ...

and multidisciplinary delivery teams to embed security throughout the project lifecycle. You will also drive the continued maturity of our security assurance capability, including NIST-aligned risk assessment methods, assurance processes, tooling, and reporting that improve consistency and visibility across programmes. You will be part of a wider UK cyber … and Experience Proven experience delivering Information Assurance, risk management, and security assurance within Defence, Government, Intelligence, or other highly regulated environments. Strong understanding of NIST RMF/CSF, ISO 27001, and Government security frameworks, with experience developing assurance artefacts such as SyOPs, RMADs, Security Impact Assessments, risk assessments, and accreditation ...

extraction of relevant dataStrong SOX/ICFR understanding and audit expectations (PCAOB-aligned).Knowledge of COSO, COBIT, ITIL; awareness of ISO 27001/NIST helpful for alignment.Skills & CompetenciesExcellent documentation and control design skills.Confident facilitator/trainer; can communicate effectively with engineers, managers, auditors, and finance stakeholders.Pragmatic and outcome-focused, with ...

controls function Strong data enquiry/analytics/scripting skills Experience of managing a co-source agreement Understanding of other regulatory frameworks e.g. NIST, ISO 27001, EU CRA UK Benefits include: Flexible benefits fund emergency leave days adoption leave 28 days annual leave (plus bank holidays) pension life cover private ...

/AI in a controls functionStrong data enquiry/analytics/scripting skillsExperience of managing a co-source agreementUnderstanding of other regulatory frameworks e.g. NIST, ISO 27001, EU CRAUK Benefits include:Flexible benefits fund, emergency leave days, adoption leave, 28 days annual leave (plus bank holidays), pension, life cover, private ...

of quantum resistant algorithmsExperience leading teams in the implementation of large-scale software or hardware deploymentsKnowledge of quantum-safe technologies, timelines, and standards, including NIST publicationsKnowledge of EU cyber regulations and PQC recommendationsAbility to travel up to 50% of the timeBachelor's degreeNice If You Have:Experience presenting at industry ...