1 to 25 of 51 NIST Jobs in the South West

industries (e.g., telecom, financial services, critical infrastructure) Familiarity with compliance tools (e.g., ServiceNow GRC, Archer, MetricStream) Experience with control frameworks such as ISO 27001, NIST, or COBIT What we offer you: Looking to make a mark? At Colt, you'll make a difference. Because around here, we empower people. ...

network security, encryption and application security Experience with AWS security services such as IAM, GuardDuty, KMS, Macie and WAF Knowledge of security frameworks including NIST, ISO 27001 and CIS Benchmarks Experience with Infrastructure as Code tools including Terraform or CloudFormation Excellent stakeholder management and communication skills Strong analytical and problem ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

reviews, security requirements management and pragmatic risk treatment in fast-moving projects You have experience working with security control standards and frameworks e.g. ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others You have demonstrable continuous personal development, supported by relevant certifications and accreditations You have good interpersonal ...

Familiarity with government and defence security standards such as: HMG/NCSC IA Policies and Guidelines JSP440 and other MoD IA standards Cyber Essentials NIST, NIS-D You will ideally hold CISM/CISSP or similar higher level recognised and current Information Security or Assurance certification Excellent stakeholder communication skills ...

Familiarity with government and defence security standards such as: HMG/NCSC IA Policies and Guidelines JSP440 and other MoD IA standards Cyber Essentials NIST, NIS-D You will ideally hold CISM/CISSP or similar higher level recognised and current Information Security or Assurance certification Excellent stakeholder communication skills ...

and confidence Drive secure architecture at scale Define and assure enterprise, solution, and system-level security architectures Apply and tailor security frameworks such as NIST, ISO 27001, SABSA and Zero Trust principles Ensure systems are secure by design, proportionate, and aligned to mission objectives Own risk and assurance outcomes Lead ...

Experience conducting or supporting ISO management system audits Knowledge of security standards and frameworks such as Cyber Essentials Plus, ISO 22301 and NIST Experience with security risk assessments, control assurance and remediation Understanding of third-party and supplier security risk Good broader knowledge of cyber security and technology Familiarity with ...

accreditation and secure by design processes (ISN2023/09), and associated policies, practices and deliverables across the lifecycle. In the application of standards including NIST Special Publications (e.g. SP 800-30, 37 & 53), and/or RTCA-DO-326A/B, 355A & 356A. That extends outside of traditional enterprise ...

otherwise demonstrable experience in a related field. You have working knowledge and/or experience of best practice industry frameworks and standards, such as NIST, CAF and ISO27001. You demonstrate continued personal development through relevant certifications, academic qualifications, hobbies, and/or wider interests. You have strong interpersonal skills. ...

secure by design or cyber security assurance activitiesExperience working within defence, government, or highly regulated environmentsIn-depth knowledge of cyber security frameworks such as NIST, ISO 27001, and ISO 27005Proven ability to conduct threat modelling and risk assessmentsExperience influencing multidisciplinary teams including engineering and DevOps functionsQualifications for the Cyber Security ...

programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve challenging security problems through research ...

and privileged credential lifecycle management Experience with session isolation/recording and secure access controls Strong technical documentation and security architecture skills Knowledge of NIST, ISO 27001 or similar security frameworks Excellent stakeholder management and communication skills Experience of DevSecOps and secrets management would be advantageous If you'd like ...

risks, such as 10 or more years in a Product, data, cyber, or technology operations roleStrong understanding of cybersecurity principles, practices, and frameworks (e.g., NIST, ISO 27001)Familiarity with third party outsourcing, cloud, data protection, and privacy regulations (e.g., GDPR, CCPA)Ability to collaborate with high-performing teams and individuals ...

recognised methods such as STRIDE and MITRE ATT&CK for Industrial Control Systems, expressed as attack paths. Support the preliminary security risk assessment using NIST SP 800-30 and ISO/IEC 27005, and maintain entries in the design risk register. Capture security requirements and maintain the traceability thread from ...

including JSP 453 - Defence Information Architecture. Familiarity with enterprise architecture frameworks (e.g. TOGAF, MODAF, UAF). Knowledge of data governance and security standards (e.g. NIST, ISO/IEC 27001). Our Culture Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people at the heart ...

risk management and accreditation Building trusted client relationships and influencing stakeholders Producing high-quality assurance documentation Desirable experience includes: JSP 440/JSP 604 NIST, CAF, ISO 27001 or Cyber Essentials Active SC Clearance (DV advantageous) Professional certifications such as CISSP, CISM or CRISC are highly desirable. Chartered Cyber Security ...

design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR, and PCI-DSS Working closely with engineers, architects, and stakeholders to embed security by design Contributing to Agile delivery teams and supporting continuous improvement About ...

and on-premise environments. A security-first mindset and confidence working with both technical and non-technical stakeholders. Knowledge of frameworks such as NIST, ISO 27001, CIS, GDPR would be preferred. A proactive, accountable approach- you like owning outcomes. Why This Role Stands Out This isn't just another security ...

Directory/LDAP, SIEM, and ITSM tools. Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO 27001). Stakeholder Engagement: Engage directly with stakeholders, including visiting secure customer sites to build trusted relationships and ensure successful delivery. Required Skills & Experience ...

such as 10 or more years in a Product, data, cyber, or technology operations role Strong understanding of cybersecurity principles, practices, and frameworks (e.g., NIST, ISO 27001) Familiarity with third party outsourcing, cloud, data protection, and privacy regulations (e.g., GDPR, CCPA) Ability to collaborate with high-performing teams and individuals ...

communication skills, with the ability to turn technical security concerns into clear, actionable decisions. Familiarity with recognised frameworks or certifications such as ISO 27001, NIST CSF or similar would be helpful. Experience in a product, platform or SaaS business. Experience in high-trust, regulated or mission-critical environments would ...

Directory/LDAP, SIEM, and ITSM tools. Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO 27001). Stakeholder Engagement: Engage directly with stakeholders, including visiting secure customer sites to build trusted relationships and ensure successful delivery. Required Skills & Experience ...

architectural approaches to implementation of preventative, detective and corrective AI risk controls Working knowledge of AI governance frameworks such as ISO/IEC 42001, NIST AI RMF, or EU AI Act and an understanding of responsible AI frameworks and ethical principles for design Solution architecture experience in enterprise environments, ideally ...