23 of 23 NIST Jobs in the North West

network security and encryption. Experience with threat modelling, security assessments and architectural risk analysis. Understanding of regulatory and security frameworks such as ISO 27001, NIST, GDPR and PCI-DSS. Experience with cloud and/or network security would be highly advantageous. Strong stakeholder management and communication skills, with the ability ...

compliance with relevant nuclear and cyber security standards, which could include: -ISO/IEC 27001 (Cyber Security Management) -UK NIS 18 regulations -NCSC guidance -NIST SP 800 Series -Codes and Standards for the Cyber Security of AI (2025) - DSIT -NR Security Assessment Principles (SyAPs) * Develop and maintain the Cyber Security ...

environments (Azure, Microsoft 365, Microsoft Security). Experience leading security operations, incident response, vulnerability management, and cyber risk programmes. Strong understanding of ISO 27001, NIST, and CIS Controls . Ability to engage and influence senior stakeholders, including executives and board-level leadership. Experience managing third-party security providers and driving ...

ideally gained within a regulated, high-consequence or security-conscious environment. You'll have a strong understanding of recognised cyber security frameworks such as NIST CSF, ISO 27001 and CAF , alongside experience leading cross-functional cyber initiatives. Excellent communication skills are essential, particularly the ability to take complex technical ...

Management Microsoft Defender and Microsoft security technologies SIEM and security monitoring tools Security governance and cyber resilience Frameworks such as ISO27001, Cyber Essentials or NIST Why Apply? This is an opportunity to take ownership of cyber security within an organisation where you'll have genuine influence, direct access to senior ...

industrial networks, SCADA systems and OT security risks. Experience conducting security assessments, risk reviews or security audits. Knowledge of frameworks such as IEC 62443, NIST or similar would be beneficial. Strong communication skills and confidence working directly with clients. Salary: Up to £100,000 Location: Hybrid - 2-3 days onsite ...

industrial environments. Deep technical OT expertise is not essential. Familiarity with recognised cyber security standards and frameworks such as ISO 27001, NIST, IEC 62443 or NIS CAF. Strong stakeholder engagement skills, with the ability to work across technical, engineering and operational teams. Ability to clearly document assessment findings and communicate ...

industrial environments. Deep technical OT expertise is not essential. Familiarity with recognised cyber security standards and frameworks such as ISO 27001, NIST, IEC 62443 or NIS CAF. Strong stakeholder engagement skills, with the ability to work across technical, engineering and operational teams. Ability to clearly document assessment findings and communicate ...

business systems. Strong understanding of hybrid/cloud convergence and securing legacy or brownfield enterprise landscapes. Knowledge of recognised enterprise security standards such as NIST CSF, ISO 27001, and zero-trust principles. Experience designing secure segmentation models (zero-trust, micro-segmentation), next-gen firewalls, and secure remote access solutions. Familiarity ...

Skills & Experience Essential Experience in cyber risk management, ideally within a regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk ...

gaps and define remediation actions. Work with Cyber, IT, OT, Engineering and operational stakeholders to embed security requirements. Apply frameworks such as IEC 62443, NIST CSF and NCSC CAF. Develop pragmatic approaches to securing legacy OT environments, including compensating controls where traditional IT security measures are not viable. Support consistent ...

working in manufacturing, industrial environments or factory IT/OT architecture. Knowledge of industrial network segmentation and security frameworks, including IEC 62443 and relevant NIST guidance. Experience with edge infrastructure platforms such as Azure Local, Dell NativeEdge or Kubernetes-based environments. Familiarity with ServiceNow, SIAM and enterprise service transition ...

Strong understanding of OT network security, risk assessments and security controls. Experience working in a consultancy or client-facing environment. Knowledge of IEC 62443, NIST or similar security frameworks would be beneficial. Good communication skills and the ability to explain technical risks clearly. Salary: Up to £100,000 Location: Hybrid ...

of IT/OT convergence and securing legacy or brownfield industrial estates. Knowledge of recognised OT security standards such as IEC 62443 (ISA-99), NIST SP 800-82 , and application of the Purdue Model . Experience designing secure segmentation models (zones and conduits), industrial firewalls, and secure remote access solutions. ...

Risk Assessments OT (Operational Technology) environments Cloud Security & Assurance Third-Party/Supplier Assurance Internal & External Audits ISO 27001, ISO 27005 and/or NIST frameworks The successful candidate will work closely with technical teams, architects, risk owners and business stakeholders to assess cyber risk, assure security controls, and support ...

assurance experience, in-house or in practice CISA qualified or working towards it Strong grounding in ITGCs, cyber security controls and cloud Familiarity with NIST, and ideally ISO 27001 or COBIT Someone who can challenge technical people constructively and land findings without friction Comfortable working autonomously and owning their ...

cyber assurance, audit, risk management, or control testing within a regulated environment In-depth understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Domain-specific knowledge in at least one of: OT, technical architecture, or supply chain security Strong analytical, reporting, and stakeholder engagement ...

and third-party risk assessments. Advising projects and stakeholders on cyber security and compliance requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology … Security or Cyber Security. Security Assurance or Risk Management. Infrastructure, Cloud or Security Operations environments. Compliance frameworks such as ISO 27001, CAF, PCI DSS, NIST and CIS Benchmarks. Working with auditors, suppliers and senior stakeholders. Experience of AI governance, ISO 42001 or modern Microsoft security technologies would be advantageous. ...

industry best practice. What You'll Be Doing Leading cyber assurance activities across complex OT and cloud environments Assessing security controls against NCSC CAF, NIST and ISO standards Conducting and supporting internal and external audits Providing expert guidance on cyber risk, governance and compliance Challenging and influencing stakeholders … critical infrastructure environments Proven track record leading audits from planning through to remediation Knowledge of Cyber Essentials, ISO 27001, ISO 27005 and/or NIST Why Apply? Outside IR35 Long-term 12-month engagement High-profile cyber transformation programme Exposure to both Cloud and OT security challenges Opportunity to shape ...

looking for Experience in cyber risk management, ideally in a regulated or critical infrastructure environment Understanding of cyber risk frameworks (ISO 27005, NIST, FAIR) and the NCSC CAF Degree or equivalent in cyber security, risk management, or a related field Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk Manager) Working … with strong prompt engineering skills Advanced Excel; Python/R and CRQ tools (desirable) Familiarity with threat intelligence, incident datasets (VERIS), and control frameworks (NIST, ISO) Ability to translate quantitative outputs into clear business narratives Desirable: nuclear/CNI experience; ONR SyAPs, NISR 2003, HMG SPF 38 years in cyber ...

Cyber Security Specialist Greater Manchester Permanent Up to £46,500 Hybrid: 50% in office, 35 hours per week On behalf of our public sector client, I'm on the lookout for a cyber security specialist ...

Why Is This Role Different? This isn't a pure cloud role. We're looking for someone who understands how modern AWS platforms integrate into a broader enterprise ecosystem. You'll be designing solutions that ...

Track emerging threats and assess how they could affect the organisation. Align security practices with standards such as ISO 27000 series, PCI DSS, COBIT, NIST and OWASP. Identify security risks and recommend proportionate controls and remediation. About You Broad knowledge of modern enterprise technology, including Cloud and AI. Exposure … such as STRIDE and MITRE ATT&CK. Significant knowledge of endpoint, network, cryptography and IAM security. Awareness of ISO 27000 series, PCI DSS, COBIT, NIST and OWASP. A security management certification such as CISSP, CISM or CCSP, and a technical security certification such as CEH or OSCP (or equivalent). ...