20 of 20 NIST Jobs in the Thames Valley

risk into practical architectural solutions that support organisational objectives and digital transformation. Strong knowledge of security, regulatory and industry frameworks (e.g. including ISO 27001, NIST, GDPR and IEC 62443), with the ability to apply these across business, IT and OT environments. Demonstrable experience designing and evaluating secure Cloud and ...

risk into practical architectural solutions that support organisational objectives and digital transformation. Strong knowledge of security, regulatory and industry frameworks (e.g. including ISO 27001, NIST, GDPR and IEC 62443), with the ability to apply these across business, IT and OT environments. Demonstrable experience designing and evaluating secure Cloud and ...

risk into practical architectural solutions that support organisational objectives and digital transformation. Strong knowledge of security, regulatory and industry frameworks (e.g. including ISO 27001, NIST, GDPR and IEC 62443), with the ability to apply these across business, IT and OT environments. Demonstrable experience designing and evaluating secure Cloud and ...

security. Develop formal procedures and management plans for transferring and managing security risks between System 1 (products) and System 2 (enabling systems). Apply NIST risk management frameworks and standards, including NIST SP 800-30, 800-37, 800-53 and the NIST Cybersecurity Framework. Facilitate alignment between engineering and security … and driving agreed integration activities forward. Essential Skills & Experience Proven experience in security risk management, product security or security risk integration. Strong knowledge of NIST frameworks, particularly NIST SP 800-37 and NIST SP 800-53 . Understanding of security risk assessment, threat analysis, vulnerability assessment and mitigation controls. Experience ...

high-quality outcomes within agreed timescales. Desirable Experience and Qualifications Experience in a regulated environment, utilities or critical national infrastructure. Familiarity with COBIT, COSO, NIST CSF or CIS Controls. Exposure to cybersecurity domains such as vulnerability management and identity management. Experience with reporting and analytics tools such as Power ...

organization. Excellent communication, presentation, and negotiation skills for C-level and technical audiences. Technical & Industry Knowledge: Understanding of cybersecurity frameworks and compliance (ISO 27001, NIST, GDPR). Familiarity with threat detection, EDR/XDR, SIEM, email security, and identity management solutions. Awareness of current threat landscape and MSSP service models ...

issues and smooth operational transitions. Monitor, maintain, and upgrade core infrastructure including servers, networks, and systems, in alignment with compliance and certification requirements (e.g., NIST, ISO27001, Cyber Essentials Plus). Deliver strategic projects designed to improve IT services and systems efficiency. Ensure robust IT security posture, data protection compliance, and ...

Professional (CISSP). Standards, frameworks, and regulatory experience including - EU NIS Directive, ISA/IEC 62443 Series/ISO 27000 Series, MITRE ATT&CK, NIST Cyber Security Framework (CSF), NCSC CAF, Office for Nuclear Regulation (ONR) Security Assessment Principles, Technical Assessment Guides, and supplementary guidance. Our Culture: Our values stand ...

cyber security, GRC or information assurance consultancy. Practical auditing, compliance review or security control assessment experience. Knowledge of ISO 27001 and/or NIST CSF Understanding of risk assessments, evidence gathering and reporting findings. Confident communicating with clients and working collaboratively. Government or defence sector experience is advantageous. Active ...

level guidelines. The role is heavily focused on analysing complex processes to seamlessly integrate comprehensive risk management frameworks, leveraging a solid knowledge of the NIST framework, product security, and advanced compliance practices. Characterized by high autonomy, the professional will independently chair multidisciplinary tables, interfacing smoothly with PSec, Security and executives. … Operate Management Plan Facilitate cross-functional alignment between Security and Engineering to harmonize risk management including tolerance and mitigation strategies. Pursue the application of NIST frameworks (such as NIST SP 800-37, 800-53, NIST CSF, CNNSI 1253) for the risk management to be aligned with international frameworks Develop ...

Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft 365 security. Cloud and networking knowledge; MITRE ATT&CK, NIST and SANS frameworks. CISSP desirable. Benefits 25 days holiday, holiday trading, volunteer day, pension, life assurance, employee assistance, mentoring, eye care, flu vaccination and Costco ...

Security Clearance. Experience integrating security within engineering or technical environments. Excellent stakeholder management and communication skills. CISSP, CISM, or equivalent security qualification. Knowledge of: NIST 800-53 NIST 800-30 NIST 800-37 Desirable Degree or equivalent experience. NIST CSF knowledge. CRISC certification. CNSSI 1253 experience. This is a highly ...

independently. About You Previous experience in information security, risk and compliance consultancy. Practical auditing and assessment experience. Knowledge of ISO 27001 and/or NIST Cybersecurity Framework (CSF). Confident working directly with clients and managing your own workload. Government or defence sector experience is advantageous. Eligible to obtain ...

Strong knowledge of SAML, OAuth 2.0, OpenID Connect and SCIM Knowledge of Active Directory, LDAP and hybrid identity Working knowledge of ISO 27001 and NIST CSF Strong troubleshooting and documentation skills Active SC clearance If this sounds suitable and you have active SC Clearance please apply with ...

ServiceNow, alongside VMware-based Core deployments. • Excellent analytical, technical, communication and leadership skills, with an Engineering or equivalent technical degree/experience. • Awareness of NIST, OWASP, GCF and UK TSA requirements, with willingness to support on-call and travel to customer locations when required. Due to the large volume of ...

ServiceNow, alongside VMware-based Core deployments. • Excellent analytical, technical, communication and leadership skills, with an Engineering or equivalent technical degree/experience. • Awareness of NIST, OWASP, GCF and UK TSA requirements, with willingness to support on-call and travel to customer locations when required. Due to the large volume of ...

behaviour and performance Familiarity with agent-to-agent orchestration protocols or the Model Context Protocol (MCP) Awareness of secure-by-design frameworks (ISO 27001, NIST, OWASP) Open-source AI/ML contributions Why Apply Real technical ownership: shape the architecture, not just work through a backlog Work at the leading ...

areas for improvement. Advising on security strategy, governance, risk management and the implementation of good practice. Applying recognised frameworks and standards, including ISO 27001, NIST Cybersecurity Framework (NIST CSF) and the NCSC Cyber Assessment Framework (CAF). Supporting existing OT security engagements, learning the client environments and progressively assuming responsibility … environment. Risk management: A solid understanding of information security risk assessment, risk treatment, security controls and governance. Security frameworks: Practical knowledge of ISO 27001, NIST CSF and/or the NCSC Cyber Assessment Framework. You should be comfortable applying frameworks to real client environments rather than simply discussing them theoretically. ...

credibility to challenge solution designs Practical experience of AI security risk and assurance, including LLM and agentic AI threat modelling, with knowledge of NIST AI RMF, ISO/IEC 42001 and OWASP guidance for LLM applications Experience supporting complex transformation programmes Energy and drive, with a real appetite for improving … team works Desirable: Experience in a large or highly regulated organisation Knowledge of ISO 27001, NIST and OWASP CISSP, CISM or equivalent Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people ...

DV cleared Red Team Operator/Offensive Security Consultant Bristol HQ (3-4 days a week onsite) with travel to local sites Up to £86 p/h Inside IR35 Are you an experienced DV ...