101 to 125 of 129 Remote NCSC Jobs

risk assessments and security reviews. Strong understanding of OT network architecture, segmentation and security controls. Knowledge of OT security frameworks such as IEC 62443, NCSC CAF or NIST. ...

function, establishing clear governance, processes, intelligence priorities and measurable outcomes. Represent the organisation in key external intelligence-sharing forums, including FS-ISAC, the NCSC’s CiSP and relevant industry partnerships. Use the MITRE ATT&CK framework to identify and analyse attacker tactics, techniques and procedures and strengthen our detection capabilities. ...

plan Awareness of emerging standards (NIST PQC, CNSA 2.0) and vendor tooling in this space Relevant cryptography/security certification or academic background preferred; NCSC or industry quantum-readiness experience a strong plus — we'll flex on formal credentials for the right depth of experience Why Consultants choose ...

interact with key external stakeholders, including UK Government bodies and law enforcement agencies. Key Interfaces: External: UK Government bodies (NPSA, OFGEM, NaCTSO, DESNZ, NCSC), UK Police Forces, energy sector partners. Internal: All lines of business, security guard force supplier. Leadership Qualities: We're looking for a leader with strong influencing ...

interact with key external stakeholders, including UK Government bodies and law enforcement agencies. Key Interfaces: External: UK Government bodies (NPSA, OFGEM, NaCTSO, DESNZ, NCSC), UK Police Forces, energy sector partners. Internal: All lines of business, security guard force supplier. Leadership Qualities: We're looking for a leader with strong influencing ...

into customers. 1. TechnicalDelivery(OT Cyber Security) Perform OT risk assessments, threat modelling, and vulnerability assessments. Assess and/or assure compliance withtheNIS Regulations, NCSC CAF, NIST CSF, IEC 62443, ISO 27001, and sector-specific guidance. Develop security measures and designs to deliver security improvements Provideexpert guidance oncommon OT cyber … Skilled in IC S/SCADA protocol analysis (Modbus, DNP3,Profinet, OPC-UA, CIP). Experience of OT relevant frameworks such as IEC62443 and NCSC CAF – both assessment and program delivery. Strong understanding of OT system design, industrial networks, PLCs, HMIs, and safety systemsand a familiarity withcurrentsecurity tooling ...

Experience working across multiple government departments or programmes simultaneously Familiarity with TOGAF, ArchiMate or other enterprise architecture frameworks Experience of security architecture principles including NCSC guidelines and secure-by-design frameworks Knowledge of data architecture, data governance and data platform design within government contexts Experience supporting or leading GDS service … equivalent Technical Skills Cloud Platforms: AWS, Azure, GCP Architecture Frameworks: TOGAF, ArchiMate, C4 Model Integration: REST APIs, event-driven architecture, message queuing, microservices Security: NCSC guidelines, secure-by-design, identity and access management Tooling: Confluence, Jira, Miro, Azure DevOps, Lucidchart or equivalent Standards: GDS Service Standard, TCoP, GDPR, WCAG 2.2 ...

security assurance across large, complex transformation programmes involving multiple suppliers and stakeholders. Strong knowledge of government security policies and frameworks, including Secure by Design, NCSC guidance and related standards. Experience conducting security assessments, audits and assurance reviews. Experience reviewing technical security architectures and providing constructive challenge to delivery teams. Strong … Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within highly regulated public sector or government environments. What's on Offer ...

security assurance across large, complex transformation programmes involving multiple suppliers and stakeholders. Strong knowledge of government security policies and frameworks, including Secure by Design, NCSC guidance and related standards. Experience conducting security assessments, audits and assurance reviews. Experience reviewing technical security architectures and providing constructive challenge to delivery teams. Strong … Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within highly regulated public sector or government environments. What's on Offer ...

Fargate environments. Working directly with lead architecture teams, you will ensure that cloud infrastructure aligns with stringent public sector security guidelines, NCSC principles, and national security compliance frameworks. Key Responsibilities Secure Solution Architecture: Design and deploy high-availability, fault-tolerant containerized applications on AWS (EKS, ECS, Fargate) adhering to strict … public sector security standards. Security and Compliance: Enforce public sector standards (NCSC Cloud Security Principles, ISO 27001, GDPR) through tight IAM governance, strict VPC network policies, and robust secrets management. EKS and ECS Leadership: Lead cluster configuration, deployment, operational security, and multi-tenant management across AWS Kubernetes environments. Infrastructure ...

Framework & Standards Support the maintenance of UKHSAs Cyber Risk Management Framework Assist in assessing cyber risks against: Government Security Policy Framework (SPF) DSPT Cyber Assurance Framework NCSC guidance ISO 27001/NIST aligned approaches Promote a proportionate, risk-based approach to cyber security across the organisation Governance & Reporting Contribute … concisely Strong written and verbal communication skills Willingness to provide constructive challenge while building effective working relationships Desirable Criteria Knowledge of: Government Security Policy Framework NCSC principles Risk registers and assurance reporting DSPT Cyber Assessment Framework Industrial Automated Control Systems Selection Process Details This vacancy is using Success Profiles Success ...

gapped or low-bandwidth environments. High-Assurance Security Architecture: Implement Zero-Trust network topologies, Private Google Access, Service Controls, and IAM policies aligned with NCSC Cloud Security Principles , JSP 604 , and MoD Secure by Design (SbD) frameworks. Air-Gapped & Edge Deployments: Operate fully disconnected, sovereign cloud nodes ( GDC air-gapped … Defence (MoD, CSOC, DE&S), Intelligence, or National Security environments. Working knowledge of UK Government Security Classifications (OFFICIAL-SENSITIVE/SECRET/TOP SECRET), NCSC guidelines, and JSP 604 accreditation loops. 2. GCP & Infrastructure Automation 3+ years of production experience operating Google Cloud Platform (GCP) . Expertise in Terraform ...

vision and the specific needs of defence clients. Ensure that all cloud architectures meet the highest security standards and comply with relevant regulations (e.g., NCSC, HMGSPF and MoD standards like JSP440/604). Design and implement cloud infrastructure using tools like Terraform, Ansible, or AWS CloudFormation. Work closely with … especially in a cloud environment, including experience with zero trust, data encryption , access control , and network security . Experience working with security compliance standards (NCSC, HMGSPF and MoD standards like JSP440/604) Familiarity with container orchestration technologies (e.g., Docker , Kubernetes ) and CI/CD pipelines . Skills & Abilities: Security ...

clients on securing and governing AI Awareness of the operational resilience and regulatory agenda, including DORA, the UK Cyber Security and Resilience Bill and NCSC CAF A willingness to build your profile in the market - points of view, speaking and content that open specific client conversations Comfort teaming across sectors …/or buildingtooling and automation–for example agentic AI, Power BI, Power Apps, riskquantificationor digital twins. Even Better If Certifications in CISSP, ISO27001, NCSC CCP, GCISP, PRINCE2 (or equivalent), AI governance (e.g. AIGP), cloud security (CCSP or CCSK), business continuity and resilience (e.g. BCI), and post-quantum or cryptography credentials ...

ensuring high-quality outcomes and practical recommendations 3. Act as a subject matter expert across recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF and Defence Cyber Certification requirements 4. Design and implement governance frameworks, policies, processes and controls that help clients manage cyber risk effectively 5. Lead … Compliance, ideally within cyber security, information security or technology risk 2. Good working knowledge of recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF, Cyber Essentials and related assurance or certification schemes 3. Experience leading risk assessments, control reviews, audit preparation, compliance programmes or security maturity assessments 4. ...

into detailed, actionable architectural designs and roadmaps, ensuring alignment with client strategic goals, government digital standards (e.g., GDS Service Standard), and security policies (e.g., NCSC guidelines).Solution Design and Development Oversight: Design end-to-end enterprise-level solutions encompassing applications, data, infrastructure, security, and integration layers. Evaluate and recommend appropriate … appropriate, leveraging emerging technologies and approaches.Government Standards: In-depth knowledge and practical application of government digital service standards (e.g., GDS) and security guidelines (e.g., NCSC Cloud Security Principles).Communication & Influence: Exceptional ability to communicate complex technical concepts to diverse audiences, influence senior stakeholders, and build strong client relationships. Proven effectiveness ...

into detailed, actionable architectural designs and roadmaps, ensuring alignment with client strategic goals, government digital standards (e.g., GDS Service Standard), and security policies (e.g., NCSC guidelines).Solution Design and Development Oversight: Design end-to-end enterprise-level solutions encompassing applications, data, infrastructure, security, and integration layers. Evaluate and recommend appropriate … appropriate, leveraging emerging technologies and approaches.Government Standards: In-depth knowledge and practical application of government digital service standards (e.g., GDS) and security guidelines (e.g., NCSC Cloud Security Principles).Communication & Influence: Exceptional ability to communicate complex technical concepts to diverse audiences, influence senior stakeholders, and build strong client relationships. Proven effectiveness ...

into detailed, actionable architectural designs and roadmaps, ensuring alignment with client strategic goals, government digital standards (e.g., GDS Service Standard), and security policies (e.g., NCSC guidelines).Solution Design and Development Oversight: Design end-to-end enterprise-level solutions encompassing applications, data, infrastructure, security, and integration layers. Evaluate and recommend appropriate … appropriate, leveraging emerging technologies and approaches.Government Standards: In-depth knowledge and practical application of government digital service standards (e.g., GDS) and security guidelines (e.g., NCSC Cloud Security Principles).Communication & Influence: Exceptional ability to communicate complex technical concepts to diverse audiences, influence senior stakeholders, and build strong client relationships. Proven effectiveness ...

security assurance authorities to demonstrate product compliance. Apply MOD Secure by Design principles throughout the engineering lifecycle. Work with external security authorities, including the NCSC, to support assurance of security solutions. Advise engineering teams on platform lockdown, configuration and appropriate product security controls. Support penetration testing, analyse findings and develop … policy, risk management and accreditation experience. Knowledge of threat intelligence sources. Knowledge of quantum cryptography and quantum key management. Experience engaging with UK Government, NCSC or NATO security authorities. ...

data routers connecting front-end C2 displays (e.g., OmniTAK, ATAK) to backend services. Secure by Design (SbD) Implementation: Write clean, well-tested code following NCSC Secure Development Principles, NCSC Cloud Security Guidance, and JSP 440 controls. CI/CD & DevSecOps: Automate build, test, and containerisation pipelines (Docker, GitOps, GitLab ...

need to be applied within operationally critical systems. Security Standards & Frameworks Experience working with relevant OT, industrial and cybersecurity standards is important. This includes: NCSC NIS Guidance NCSC Cyber Assessment Framework (CAF) ISO 27001 ISO 27005 NERC CIP ISA-99/IEC 62443 NIST Cybersecurity Framework (NIST CSF) The successful ...

cyber resilience programme. The organisation is currently undertaking a programme focused on compliance with the Data Security and Protection Toolkit (DSPT) and the NCSC Cyber Assessment Framework (CAF) . The programme is developing proposals, controls and actions to address identified gaps. The requirement now is for an experienced assurance professional … assessing organisational maturity against security or data protection frameworks. Practical experience working with the Data Security and Protection Toolkit (DSPT) and working with the NCSC Cyber Assessment Framework (CAF). Experience undertaking assurance, audit, assessment or independent review activity within NHS, healthcare, Government or another highly regulated environment, reviewing evidence ...

Audit Consultant role over time. Responsibilities: Plan and conduct audits of customer processes and systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssure. Support and, over time, help lead audit activity, ensuring findings are properly documented and reported. Communicate audit findings … risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills/Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience of cyber report writing. Relevant ISO certification (for example ISO 27001 Lead Auditor ...

Risk Profile (CRP) audit work. Responsibilities: Plan and conduct audits of customer processes and systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssure. Support and, over time, help lead audit activity, ensuring findings are properly documented and reported. Communicate audit findings … risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills/Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience of cyber report writing. Relevant ISO certification (for example ISO 27001 Lead Auditor ...

Knowledge of industrial protocols such as MQTT, OPC UA,Modbusand DNP3.Understanding of connectivity technologies includingLoRaWAN, NB‐IoT and 5G.Experience aligning architecture to NIS regulations, NCSC CAF, IEC62443and ISO 27001. Data & Integration Focus - Strong grasp of data platform architecture, integration patterns,standardisationandcontextualisation. Influence & Communication - Ability to translate complex technical concepts into … Knowledge of industrial protocols such as MQTT, OPC UA,Modbusand DNP3.Understanding of connectivity technologies includingLoRaWAN, NB‐IoT and 5G.Experience aligning architecture to NIS regulations, NCSC CAF, IEC62443and ISO 27001. Data & Integration Focus - Strong grasp of data platform architecture, integration patterns,standardisationandcontextualisation. Influence & Communication - Ability to translate complex technical concepts into ...