1 to 25 of 61 NIST Jobs in the South East

cloud, identity, network, perimeter and platform security solutions. Apply Zero Trust, defence-in-depth and threat-informed design principles. Ensure security architectures align with NIST, ISO 27001, CIS, NCSC and client security requirements. Act as a security design authority, providing technical guidance and architectural decisions. Work closely with enterprise, infrastructure ...

native or hybrid environments. Experience supporting security policies, standards, procedures and technical controls. Familiarity with security frameworks and regulatory standards, such as ISO 27001, NIST and CIS. Experience working with cross-functional engineering teams, technology vendors and operational stakeholders. Strong analytical, troubleshooting and problem-solving skills, with the ability ...

knowledge of risk assessment methodologies (e.g. ISO 31000, FAIR, OWASP risk rating). Strong understanding of Gov Assure, CAF, ISO 27001, Cyber Essentials, and NIST frameworks. Experience conducting or supporting security audits and implementing remediation plans. Proficiency in assessing and securing platforms such as Entra ID (Azure AD), Microsoft ...

assessment Reviewing solution and infrastructure designs Defining security requirements and controls Cloud, network and identity security Running client workshops and presenting recommendations Experience with NIST, SABSA, TOGAF, ISO 27001, NCSC guidance, Zero Trust, IAM/PAM or cloud security is useful, but nobody is expected to tick every box. Certifications ...

certification. Microsoft MCSE or equivalent Microsoft technical qualifications. Cisco networking or firewall-related certifications. Experience supporting Cyber Essentials Plus certification. Knowledge of ISO and NIST security frameworks. Experience working with SIEM and EDR security solutions. Experience managing third-party IT suppliers or managed service providers. Exposure to disaster recovery, business ...

risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber ...

risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber ...

risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber ...

including IT security Ability to handle ambiguity and make decisions and recommendations with limited data Understanding of various Cyber/IT Security frameworks e.g. NIST; ISO-27001; PCI-DSS; EBA-ICT and FFIEC Solid analytical/problem-solving skills with capability to identify solutions to unusual and complex problems PERSONAL ...

security. Develop formal procedures and management plans for transferring and managing security risks between System 1 (products) and System 2 (enabling systems). Apply NIST risk management frameworks and standards, including NIST SP 800-30, 800-37, 800-53 and the NIST Cybersecurity Framework. Facilitate alignment between engineering and security … and driving agreed integration activities forward. Essential Skills & Experience Proven experience in security risk management, product security or security risk integration. Strong knowledge of NIST frameworks, particularly NIST SP 800-37 and NIST SP 800-53 . Understanding of security risk assessment, threat analysis, vulnerability assessment and mitigation controls. Experience ...

architect or technical lead on complex projects spanning multiple countries, business units, and cultures. • Working knowledge of cybersecurity or privacy frameworks, such as NIST, ISO 27001/27701, MITRE ATT&CK, or comparable methodologies. • Familiarity with relevant data-protection regulations and requirements, including GDPR and other applicable regional privacy obligations. ...

security, and what it takes to keep controls effective Experience supporting audit or risk activity, or knowledge of frameworks such as ISO 27001 and NIST Desirable: Python, Bash or PowerShell scripting, forensic, threat monitoring or deception tools, ServiceNow, Azure or AWS, CISSP, Security+, CEH Please note: this role needs four ...

high-quality outcomes within agreed timescales. Desirable Experience and Qualifications Experience in a regulated environment, utilities or critical national infrastructure. Familiarity with COBIT, COSO, NIST CSF or CIS Controls. Exposure to cybersecurity domains such as vulnerability management and identity management. Experience with reporting and analytics tools such as Power ...

designing, implementing, and securing cloud environments, with a strong emphasis on Microsoft Azure services. Strong understanding of regulatory compliance requirements (e.g. GDPR, ISO 27001, NIST) and experience implementing security controls to meet those requirements. In-depth knowledge of cloud security best practices, network security, identity and access management, encryption, and ...

organization. Excellent communication, presentation, and negotiation skills for C-level and technical audiences. Technical & Industry Knowledge: Understanding of cybersecurity frameworks and compliance (ISO 27001, NIST, GDPR). Familiarity with threat detection, EDR/XDR, SIEM, email security, and identity management solutions. Awareness of current threat landscape and MSSP service models ...

and privileged access SIEM , EDR and vulnerability management TCP/IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks or ISO 27001 Security incident investigation and remediation You don't need to tick every box. A strong infrastructure background, hands-on security ...

issues and smooth operational transitions. Monitor, maintain, and upgrade core infrastructure including servers, networks, and systems, in alignment with compliance and certification requirements (e.g., NIST, ISO27001, Cyber Essentials Plus). Deliver strategic projects designed to improve IT services and systems efficiency. Ensure robust IT security posture, data protection compliance, and ...

qualification in cyber security, IT or a related field, or equivalent demonstrable experience. Strong working knowledge of industry frameworks and standards such as NIST, CAF and ISO27001. Strong interpersonal skills and a proven desire for continued personal development. Due to the nature of the work we can only represent sole ...

governance, ideally within regulated environments. In-depth understanding of regulatory expectations, particularly DORA and EBA guidance. Familiarity with risk and control frameworks such as NIST, ISO 27001, and COBIT. Proven ability to produce executive management information and risk reporting. Exceptional communication, stakeholder management, and organisational skills. An evidence-led approach ...

and privileged access SIEM, EDR and vulnerability management TCP/IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and/or ISO 27001 Security incident investigation and remediation You don’t need to tick every box. What matters is a strong ...

industrial networks, SCADA systems and OT security risks. Experience conducting security assessments, risk reviews or security audits. Knowledge of frameworks such as IEC 62443, NIST or similar would be beneficial. Strong communication skills and confidence working directly with clients. Salary: Up to £100,000 Location: Hybrid - 2-3 days onsite ...

reporting skills. - Experience maintaining security compliance during significant organisational or technical change. - CISSP, CISM or CRISC certification would be advantageous. - Knowledge of ISO 27001, NIST or equivalent security frameworks would be beneficial. - Experience supporting large-scale managed IT services and Defence security governance would be desirable. To apply, please send ...

cyber security, GRC or information assurance consultancy. Practical auditing, compliance review or security control assessment experience. Knowledge of ISO 27001 and/or NIST CSF Understanding of risk assessments, evidence gathering and reporting findings. Confident communicating with clients and working collaboratively. Government or defence sector experience is advantageous. Active ...

network architecture, security controls and risk management. Experience conducting security assessments, gap analyses and producing recommendations. Familiarity with frameworks such as IEC 62443 or NIST would be beneficial. Strong communication skills and confidence working directly with clients. Salary: Up to £100,000 Location: Hybrid - 2-3 days onsite per week ...

experience producing security cases and technical security assurance documentation. Knowledge of UK MOD security requirements and relevant frameworks, such as Secure by Design, JSPs, NIST and ISO 27001. Ability to work directly with engineering and development teams, influencing technical design decisions rather than operating solely in an advisory or governance ...