1 to 25 of 40 NIST Jobs in the Midlands

and traceability. Frameworks and Standards Working knowledge of some of the following: ISO/IEC 27001. ISO/IEC 27005. NCSC Cyber Assessment Framework. NIST Cybersecurity Framework. MOD Defence Standard 05-138. Government Security Classifications. Defence, government or critical national infrastructure experience. Experience within high‐assurance or regulated environments. ...

manufacturing, or regulated environments. Understanding of OT security concepts and industrial control system environments. Familiarity with regulatory and control frameworks such as ISO 27001, NIST CSF, IEC 62443, NIS Regulations, or similar. Experience using GRC, audit, risk, or compliance management tools. Personal Attributes Proactive and delivery-focused. Comfortable dealing with ...

manufacturing, or regulated environments. Understanding of OT security concepts and industrial control system environments. Familiarity with regulatory and control frameworks such as ISO 27001, NIST CSF, IEC 62443, NIS Regulations, or similar. Experience using GRC, audit, risk, or compliance management tools. Personal Attributes Proactive and delivery-focused. Comfortable dealing with ...

manufacturing, or regulated environments. Understanding of OT security concepts and industrial control system environments. Familiarity with regulatory and control frameworks such as ISO 27001, NIST CSF, IEC 62443, NIS Regulations, or similar. Experience using GRC, audit, risk, or compliance management tools. Personal Attributes Proactive and delivery-focused. Comfortable dealing with ...

security tooling, including CSPM, SAST, and DAST platforms Practical experience contributing to internal audits and risk assessments against ISO 27001 or a comparable framework (NIST CSF, SOC 2, Cyber Essentials Plus) Experience working with external SOC or MDR providers Strong written communication; able to produce findings reports and risk register ...

detection, investigation and root cause analysis. Security automation, scripting or workflow improvement. You'll also be comfortable working with recognised security frameworks such as NIST CSF, ISO 27001, CIS Controls or the NCSC Cyber Assessment Framework. About you We're looking for someone who: Has significant experience within cyber security ...

utilities, energy, manufacturing, or regulated environments.Understanding of OT security concepts and industrial control system environments.Familiarity with regulatory and control frameworks such as ISO 27001, NIST CSF, IEC 62443, NIS Regulations, or similar.Experience using GRC, audit, risk, or compliance management tools.Personal AttributesProactive and delivery-focused.Comfortable dealing with ambiguity and navigating complex ...

Design Review Board activities. Review third-party solutions and provide security guidance during procurement and onboarding. Ensure solutions align with security policies, ISO 27001, NIST and client security requirements. Develop security architecture patterns, standards and design guidance. Provide security consultancy to business and IT stakeholders throughout project delivery. Collaborate with ...

Design Review Board activities. Review third-party solutions and provide security guidance during procurement and onboarding. Ensure solutions align with security policies, ISO 27001, NIST and client security requirements. Develop security architecture patterns, standards and design guidance. Provide security consultancy to business and IT stakeholders throughout project delivery. Collaborate with ...

security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled connectivity. Applied knowledge of cybersecurity frameworks and standards, including NIST, ISO 27001, IEC 62443 and the NCSC Cyber Assessment Framework (CAF). Strong understanding of Networking, Ethernet-based industrial networks, switching technologies, high-availability and ...

Friday. WHAT WE’RE LOOKING FOR Experience designing secure solutions across cloud and on-premise environments. Strong knowledge of security frameworks such as NIST, NCSC CAF, CIS and IEC 62443. The ability to recommend security solutions that balance business needs with robust protection. Knowledge of OT/IoT security, ideally ...

designing, implementing, and securing cloud environments, with a strong emphasis on Microsoft Azure services. Strong understanding of regulatory compliance requirements (e.g. GDPR, ISO 27001, NIST) and experience implementing security controls to meet those requirements. In-depth knowledge of cloud security best practices, network security, identity and access management, encryption, and ...

accurately recorded and managed. Help maintain the Cyber Risk Management Framework and assess risks against recognised standards, including SPF, NCSC guidance, ISO 27001 and NIST-aligned approaches. Produce cyber risk reports, analysis and briefings for senior leaders and assurance forums. Support cyber assurance activities across digital change programmes, cloud services ...

Design and validate Zero Trust architectures across identity, device, network, application, and data layers. Define enterprise security architecture guardrails, controls, and patterns aligned to NIST, CIS, ISO 27001, Zero Trust, and industry regulations. Support architecture governance boards, ensuring all designs adhere to security standards. Identify systemic, long-term structural risks ...

system of record such as Jira or Octane* Expert knowledge using Cloud Technologies* Strong understanding of regulatory compliance requirements (e.g. GDPR, ISO 27001, NIST) and experience implementing security controls to meet those requirements.* Hands-on experience with Azure Kubernetes Service (AKS) and microservices architecture.* Familiarity with DevSecOps methodologies and tools ...

and communication skills. Ability to interpret security operational outputs and reporting. Experience developing governance documentation, process guidance, and assurance materials. Desirable Skills Knowledge of: NIST Cyber Security Framework (CSF) Secure by Design principles UK Government and NCSC security guidance Experience in highly regulated or security-sensitive environments. Experience supporting operational ...

strong cloud security and governance expertise, you will: Security Architecture Translate business, data protection and security requirements into practical architectural designs leveraging industry frameworks (NIST, ISO 27001, CIS). Design and maintain cloud‐native security architectures , with deep expertise in GCP architecture, security services, and secure workload design . Establish … standards. Support compliance assessments and audits, including cloud‐specific controls and emerging AI regulatory frameworks. Ensure alignment to governance standards such as ISO 27001, NIST 800‐53/CSF, NIS2, DORA, and industry cloud security benchmarks. Technology Evaluation & Continuous Improvement Conduct cloud and AI security architecture reviews, including: Cloud configuration ...

from a security standpoint. Expertise in Continuous Security, Continuous Integration and Continuous Delivery techniques Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc. Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and ...

Head of IT Security, Head of Cyber Security, ISO27001, NIST, CISM, CISO, Birmingham Head of IT Security required to work for an exciting Law Firm based in Birmingham. This will be a hybrid role where you will be expected to be in the office circa 2 days per week, along ...

Splunk, Log Rhythm, Qualys Implementing security technology controls, secure config and implementation of security projects Information security risks management, controls and frameworks (NIST, CIS, PCI-DSS) IT Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM ...

appropriately recorded and accepted. Ensure penetration testing and remediation activities align with relevant security standards, regulatory requirements and industry best practice, including OWASP, NIST, ISO 27001, PCI-DSS, GDPR and CAF. Ensure appropriate governance, documentation and evidence is maintained throughout the testing lifecycle. Provide assurance over the quality and effectiveness ...

inter-relationship between product management and supply chain, engineering/technology & related functions, costing systems, financial reporting measures. Good knowledge of Cyber security (IEC62443, NIST etc.). Strategically aware, coupled with tactical implementation experience. Strong analytical skills with ability to identify and explain critical issues. Six sigma/lean awareness ...

Skills You will have a solid understanding of: Third Party Risk Management (TPRM) and supply chain security Security frameworks including ISO 27001, ISO 27036, NIST, and related assurance standards Zero Trust security principles and third-party access controls Vendor risk assessment, risk scoring, and continuous monitoring practices Enterprise security architecture ...

data security, including data classification, DLP, encryption, and data lifecycle protection. Strong understanding of relevant standards and frameworks (e.g. ISO/IEC 27001, NIST CSF, CIS Controls). Proven experience owning or leading a global or enterprise‐scale security service or capability. Ability to operate at both strategic and operational ...

embed security requirements and guide secure delivery from design through to procurement. You will apply threat modelling, risk assessments and industry standards (ISO 27001, NIST) while collaborating with IAM, GRC and infrastructure teams to ensure secure operations. #J-18808-Ljbffr ...