1 to 25 of 164 NIST Jobs in the UK excluding London

remediation. Knowledge of SIEM technologies and security monitoring. Vulnerability management experience and familiarity with related tooling. Understanding of security frameworks and standards such as NIST, ISO 27001, Cyber Essentials or NIS2. Experience supporting audits, compliance and governance activities. Strong analytical and problem-solving skills. Excellent communication skills with the ability ...

CCSE/CCSM, Cisco CCNP/CCIE Security, Fortinet certifications, CISSP, CISM, Microsoft AZ-500 or AWS Certified Security - Specialty. Familiarity with ISO 27001, NIST Cybersecurity Framework, CIS Controls, GDPR and Cyber Essentials Plus. What You'll Bring You will be a technically strong and proactive security engineer ...

generative AI platforms, machine learning environments or AI governance and security controls. ** A solid understanding of cybersecurity principles, frameworks and best practices, such as NIST, ISO 27001 and GDPR. ** Knowledge of AI-specific security risks, including prompt injection, data privacy, model security and AI supply chain vulnerabilities. ** Experience securing enterprise ...

cloud, identity, network, perimeter and platform security solutions. Apply Zero Trust, defence-in-depth and threat-informed design principles. Ensure security architectures align with NIST, ISO 27001, CIS, NCSC and client security requirements. Act as a security design authority, providing technical guidance and architectural decisions. Work closely with enterprise, infrastructure ...

cloud, identity, network, perimeter and platform security solutions. Apply Zero Trust, defence-in-depth and threat-informed design principles. Ensure security architectures align with NIST, ISO 27001, CIS, NCSC and client security requirements. Act as a security design authority, providing technical guidance and architectural decisions. Work closely with enterprise, infrastructure ...

risk into practical architectural solutions that support organisational objectives and digital transformation. Strong knowledge of security, regulatory and industry frameworks (e.g. including ISO 27001, NIST, GDPR and IEC 62443), with the ability to apply these across business, IT and OT environments. Demonstrable experience designing and evaluating secure Cloud and ...

native or hybrid environments. Experience supporting security policies, standards, procedures and technical controls. Familiarity with security frameworks and regulatory standards, such as ISO 27001, NIST and CIS. Experience working with cross-functional engineering teams, technology vendors and operational stakeholders. Strong analytical, troubleshooting and problem-solving skills, with the ability ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

network security and encryption. Experience with threat modelling, security assessments and architectural risk analysis. Understanding of regulatory and security frameworks such as ISO 27001, NIST, GDPR and PCI-DSS. Experience with cloud and/or network security would be highly advantageous. Strong stakeholder management and communication skills, with the ability ...

/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical use of MITRE ATT&CK, STIX/TAXII, CVE, CWE, CAPEC, NIST frameworks, CIS Controls, and common threat-intelligence vocabularies. GenAI and GraphRAG: LLM-based extraction, retrieval orchestration, agent/tool integration, prompt design, evaluation, grounding, guardrails ...

advice to technical and business stakeholders. Support wider compliance, risk and assurance engagements. Essential Skills & Experience Security Assurance and Risk Management. ISO 27001 and NIST CSF. Risk Assessments and Risk Treatment. Stakeholder Management and Communication. Security Governance and Compliance. Knowledge of GDPR and related legislation. Desirable Azure and/ ...

knowledge of risk assessment methodologies (e.g. ISO 31000, FAIR, OWASP risk rating). Strong understanding of Gov Assure, CAF, ISO 27001, Cyber Essentials, and NIST frameworks. Experience conducting or supporting security audits and implementing remediation plans. Proficiency in assessing and securing platforms such as Entra ID (Azure AD), Microsoft ...

assessment Reviewing solution and infrastructure designs Defining security requirements and controls Cloud, network and identity security Running client workshops and presenting recommendations Experience with NIST, SABSA, TOGAF, ISO 27001, NCSC guidance, Zero Trust, IAM/PAM or cloud security is useful, but nobody is expected to tick every box. Certifications ...

Familiarity with government and defence security standards such as: HMG/NCSC IA Policies and Guidelines JSP440 and other MoD IA standards Cyber Essentials NIST, NIS-D You will ideally hold CISM/CISSP or similar higher level recognised and current Information Security or Assurance certification Excellent stakeholder communication skills ...

certification. Microsoft MCSE or equivalent Microsoft technical qualifications. Cisco networking or firewall-related certifications. Experience supporting Cyber Essentials Plus certification. Knowledge of ISO and NIST security frameworks. Experience working with SIEM and EDR security solutions. Experience managing third-party IT suppliers or managed service providers. Exposure to disaster recovery, business ...

risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber ...

risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber ...

risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber ...

Microsoft Purview administration and optimisation. Desirable Experience within information security, governance, risk or compliance functions. Knowledge of recognised security frameworks such as ISO 27001, NIST or Cyber Essentials. Ability to successfully obtain UK Government Security Clearance (SC). Why join us? This is an exciting opportunity to play ...

including IT security Ability to handle ambiguity and make decisions and recommendations with limited data Understanding of various Cyber/IT Security frameworks e.g. NIST; ISO-27001; PCI-DSS; EBA-ICT and FFIEC Solid analytical/problem-solving skills with capability to identify solutions to unusual and complex problems PERSONAL ...

security. Develop formal procedures and management plans for transferring and managing security risks between System 1 (products) and System 2 (enabling systems). Apply NIST risk management frameworks and standards, including NIST SP 800-30, 800-37, 800-53 and the NIST Cybersecurity Framework. Facilitate alignment between engineering and security … and driving agreed integration activities forward. Essential Skills & Experience Proven experience in security risk management, product security or security risk integration. Strong knowledge of NIST frameworks, particularly NIST SP 800-37 and NIST SP 800-53 . Understanding of security risk assessment, threat analysis, vulnerability assessment and mitigation controls. Experience ...

compliance with relevant nuclear and cyber security standards, which could include: -ISO/IEC 27001 (Cyber Security Management) -UK NIS 18 regulations -NCSC guidance -NIST SP 800 Series -Codes and Standards for the Cyber Security of AI (2025) - DSIT -NR Security Assessment Principles (SyAPs) * Develop and maintain the Cyber Security ...

analysts to monitor security events, investigate incidents, and improve detection capabilities. Support compliance efforts by ensuring security controls meet standards such as ISO 27001, NIST, GDPR, and others. Configure and support security tools including cloud-native security services in Azure and AWS, DDoS protection, and threat monitoring solutions. Must-Have ...

incident response SIEM and EDR Identity and Access Management MFA and Conditional Access Vulnerability management Security controls and technical assurance Security reporting and metrics NIST, ISO 27001, CIS Controls or similar security frameworks The background is fairly open. You might currently be an Information Security Analyst, Senior Security Analyst, Security ...

will bring 7+ years in information security CISSP, CISM, CISA, an MSc or equivalent Hands-on ISO 27001 experience, plus frameworks such as NIST and PCI DSS Information security risk management and supplier assurance Working knowledge of FCA, PRA, ICO and GDPR requirements The ability to explain technical risk ...