476 to 500 of 521 Remote NIST Jobs

to. 5+ years of relevant experience in the medical device space (either industry or through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat … modeling, security testing) and determining residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle ...

to. 5+ years of relevant experience in the medical device space (either industry or through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat … modeling, security testing) and determining residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle ...

will operate at both strategic and technical levels, supporting board-level decision‐making while driving operational security improvements aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director/Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time … . Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA, NIST CSF, COBIT, SANS, and related frameworks. Develop security policies, SOPs, and governance documentation. Conduct IT resilience and cloud security audits. Technical & Transformation Advisory Advise ...

risk and governance. Design and implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review … prompt injection, data leakage and excessive agency. Strong understanding of relevant AI regulation and frameworks, particularly EU AI Act, UK GDPR/ICO, DPIAs, NIST AI RMF and ISO 42001. Experience working with regulated organisations. The ability to communicate equally well with senior executives and technical teams. Nice to have ...

current SMR technology, security controls and capabilities. Develop a comprehensive target-state Cyber Security Architecture. Map current and future-state capabilities against the NIST Cybersecurity Framework (NIST CSF). Identify gaps in security controls, implementation, adoption and utilisation. Develop recommendations and a clear roadmap to address identified gaps. Work closely … background in Cyber Security Architecture or Security Engineering. Experience assessing complex enterprise security environments. Strong understanding of Security Monitoring, Detection & Response. Good knowledge of NIST CSF and security control frameworks. Experience conducting security gap analysis and developing transformation roadmaps. Strong stakeholder management and communication skills. Experience working within financial services ...

equivalent experience. Strong and demonstrable experience in Excel, PowerPoint, and other Office applications. An understanding of cybersecurity control and risk assessment frameworks (e.g., NIST CSF, CIS, NIST 800-53, ISO 27001) and their unique differences. Awareness of the regulatory landscape and well-known data privacy, cybersecurity, and operational resilience regulations. ...

and government security requirements SECURITY ARCHITECT ESSENTIAL SKILLS Experience operating as a Security Architect or similar senior security role Strong knowledge of ISO 27001, NIST, CIS or similar frameworks Experience with cloud security across AWS, Azure or Google Cloud Understanding of network security, encryption, authentication and access control Experience with … submit, subject to required skills, your application to our client in conjunction with this vacancy only. KEY SKILLS Security Architect, Cyber Security, ISO 27001, NIST, Cloud Security, AWS, Azure, Risk Assessment, Threat Modelling, SIEM, Defence ...

guidance to ensure security risks are understood, managed and remediated in line with organisational risk appetite and recognised best practice frameworks (e.g. ISO 27001, NIST, CIS Controls). Key Responsibilities Deliver security risk identification, assessment, analysis and logging activities, ensuring risks are clearly articulated, consistently scored and recorded in approved … and non-technical audiences. Experience working collaboratively with multidisciplinary teams across business and technology functions. Familiarity with recognised security frameworks and standards (ISO 27001, NIST, CIS Controls). Candidates must hold government security vetting at SC level and be able to meet UK residency requirements. What ...

fixed-term contract. In this role, you will be responsible for ensuring the organisation adheres to industry security standards and best practices, including NIST, ISO 27001, and CIS controls. Job Description Security Engineer Salary: £55,100 - £68,000 (neg depending on experience) Location: Cromwell Hospital, London (SW5 0TU) Hybrid Working … fixed-term contract. In this role, you will be responsible for ensuring the organisation adheres to industry security standards and best practices, including NIST, ISO 27001, and CIS controls. You will play a key role in implementing, maintaining, and continuously enhancing our security frameworks, processes, and technologies. This position ...

risk. Human Factors Policy & Governance Develop, maintain, and continuously improve policies related to human factors in cybersecurity, aligned to recognised good practice (including the NIST Cybersecurity Framework). Ensure policies are comprehensive, current, and effectively communicated across the organisation. Partner with Legal and Compliance to ensure policy content meets relevant … demonstrable equivalent knowledge. Proven experience in cybersecurity, with a focus on human factors, behaviour analysis, or organizational psychology. In-depth knowledge of the NIST Cybersecurity Framework and other relevant industry standards. Strong understanding of human behaviour, cognition, and decision‐making processes in the context of cybersecurity. Experience developing and implementing ...

Job Description Your impact Leonardo is seeking an experienced Red Team Consultant to join our growing Offensive Security capability. This role is open to both Senior and Principal level Consultants. Working within a defence-focused ...

hackajob is partnering directly with Leonardo to hire for this role. Job Description: Your impact Leonardo is seeking an experienced Red Team Consultant to join our growing Offensive Security capability. This role is open to ...

hackajob is partnering directly with Leonardo to hire for this role. Job Description: Your impact Leonardo is seeking an experienced Red Team Consultant to join our growing Offensive Security capability. This role is open to ...

Lead the firm's quantum-safe transition to post-quantum cryptography — maintaining a cryptographic inventory, assessing exposure, and planning a crypto-agile migration to NIST-standardised PQC algorithms. Compliance & regulatory: Ensure security controls meet FCA SYSC obligations, SYSC 15A operational risk requirements and ISO27001 standard. Work closely with the Head … Kafka-backed event architectures and the security considerations they introduce. Awareness of AI and machine-learning security risks and emerging AI governance frameworks (e.g. NIST AI RMF, ISO/IEC 42001). Understanding of post-quantum cryptography and quantum-safe migration and crypto-agility planning. 25 days holiday (exc. Bank ...

your impact. Be familiar with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

Develop and implement comprehensive Information Assurance Strategies to meet complex customer security requirements.Lead risk management activities that align with an industry standard such as NIST SP 800-37 or the ISO/IEC 27000 series.Create and maintain security documentation including system security plans, policies, procedures, and compliance evidence.Interface with internal … Product Security Engineer - Information AssuranceThe ability to interpret and implement industry security standards and frameworks such as the ISO/IEC 27000 series or NIST SP-800 series.Experience in information assurance, security engineering, cyber security, or a similar field.Deep understanding of security risk management and assurance methodologies & processes.Experience working across ...

and implement comprehensive Information Assurance Strategies to meet complex customer security requirements. Lead risk management activities that align with an industry standard such as NIST SP 800-37 or the ISO/IEC 27000 series. Create and maintain security documentation including system security plans, policies, procedures, and compliance evidence. Interface … Security Engineer - Information Assurance The ability to interpret and implement industry security standards and frameworks such as the ISO/IEC 27000 series or NIST SP-800 series. Experience in information assurance, security engineering, cyber security, or a similar field. Deep understanding of security risk management and assurance methodologies & processes. ...

relevant frameworks (e.g., GovAssure, JSP 604) and supporting the client in securing Authority to Operate (ATO) status. Implement and manage security risk processes (e.g., NIST RMF), producing assurance and risk artefacts, and embedding a culture of continuous risk management. Collaborate with clients to understand their security needs, provide solution advice … trusted advisor, and shape solutions that embed Secure by Design (SbD) principles from inception. Lead security maturity assessments (e.g., against ISO 27001, NIST CSF, DevSecOps practices) and deliver remediation roadmaps to uplift client cyber resilience and support external audit requirements. We are always listening to our growing teams and evolving ...

and experience • Experience in Information Security, Cyber Security, Technology Risk or Security Governance • Experience in FCA-regulated financial services • Strong knowledge of ISO 27001, NIST and CIS Controls • Strong understanding of Microsoft Entra ID and AWS security • Experience conducting access reviews, risk assessments and supplier assurance • Excellent stakeholder management skills … and experience • Experience in Information Security, Cyber Security, Technology Risk or Security Governance • Experience in FCA-regulated financial services • Strong knowledge of ISO 27001, NIST and CIS Controls • Strong understanding of Microsoft Entra ID and AWS security • Experience conducting access reviews, risk assessments and supplier assurance • Excellent stakeholder management skills ...

and risk management frameworks Reviewing the effectiveness of security controls and recommending proportionate improvements Assessing clients against recognised standards and frameworks, including ISO 27001, NIST and similar methodologies Supporting ISO 27001 implementation, readiness and assurance activities Developing risk registers, treatment plans, policies, standards and security documentation Conducting risk assessments … management or security assurance A strong understanding of cyber security governance, risk and compliance principles Practical experience working with frameworks such as ISO 27001, NIST, Cyber Essentials or similar standards Experience conducting risk assessments, security assessments or compliance reviews An understanding of information security policies, controls, risk registers and assurance ...

security governance and risk management frameworksReviewing the effectiveness of security controls and recommending proportionate improvementsAssessing clients against recognised standards and frameworks, including ISO 27001, NIST and similar methodologiesSupporting ISO 27001 implementation, readiness and assurance activitiesDeveloping risk registers, treatment plans, policies, standards and security documentationConducting risk assessments, gap analyses and security … consultancy, risk management or security assuranceA strong understanding of cyber security governance, risk and compliance principlesPractical experience working with frameworks such as ISO 27001, NIST, Cyber Essentials or similar standardsExperience conducting risk assessments, security assessments or compliance reviewsAn understanding of information security policies, controls, risk registers and assurance processesThe ability ...