51 to 69 of 69 Remote NIST Jobs

practical knowledge of NCSC CAPS Evaluation processes and practices with awareness of generic Secure by Design Principles as presented by NCSC, UK MOD and NIST Practical experience of following DevSecOps lifecycles for embedded software/firmware Experience in safety-critical engineering and/or developing embedded software/firmware ...

requirements and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part of a fast-growing community of like … monitoring to ensure ongoing effectiveness Identify control gaps, deficiencies, and areas for improvement Compliance & Risk Alignment Assess controls against relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2) Assess control effectiveness across: Design Effectiveness (DE), Operating Effectiveness (OE) and Control Automation (CA) Support regulatory and internal compliance ...

requirements and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part of a fast-growing community of like … monitoring to ensure ongoing effectiveness Identify control gaps, deficiencies, and areas for improvement Compliance & Risk Alignment Assess controls against relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2) Assess control effectiveness across: Design Effectiveness (DE), Operating Effectiveness (OE) and Control Automation (CA) Support regulatory and internal compliance ...

senior-level security engineering support across protective and information security. You will have demonstrable experience applying recognised security frameworks (e.g., Government Functional Standard 007, NIST, CIS benchmarks) to real-world systems and service. You will be joining a team of highly skilled and highly motivated individuals who are working … cloud services). You will provide clear security advice and assurance to stakeholders, typically aligned to HMG/MOD expectations and recognised standards (e.g., NIST, CIS benchmarks), and you will support teams by sharing knowledge and guiding good practice. Key functions/outputs: 1. Vulnerability Management, Reporting & Risk Prioritisation 2. ...

Capacity Planning based on technical analysis research. Education - Bachelor's degree in information technology systems, computer science, or related field Preferred skills Experience with NIST, PCI, or a Pub 1075 environment Working technical knowledge of current network hardware, protocols, and Internet standards, including, TCP/IP, DNS, and DHCP. Advanced ...

risk and governance. Design and implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review … prompt injection, data leakage and excessive agency. Strong understanding of relevant AI regulation and frameworks, particularly EU AI Act, UK GDPR/ICO, DPIAs, NIST AI RMF and ISO 42001. Experience working with regulated organisations. The ability to communicate equally well with senior executives and technical teams. Nice to have ...

risk and governance. Design and implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review … prompt injection, data leakage and excessive agency. Strong understanding of relevant AI regulation and frameworks, particularly EU AI Act, UK GDPR/ICO, DPIAs, NIST AI RMF and ISO 42001. Experience working with regulated organisations. The ability to communicate equally well with senior executives and technical teams. Nice to have ...

and purple team activity into the wider assurance programme. Supporting security assurance against frameworks and standards including the NCSC Cyber Assessment Framework, ISO 27001, NIST CSF 2.0 and Cyber Essentials Plus. Communicating technical risk and control weaknesses clearly to senior stakeholders, balancing security improvement against cost, resilience and operational requirements. … effectiveness and drift, managing exceptions and driving remediation of identified weaknesses. Knowledge of the NCSC CAF and at least one of ISO 27001 or NIST CSF 2.0. Experience of zero trust and identity architecture, including conditional access and adaptive authentication. Experience scoping, commissioning or managing penetration testing. The ability ...

and purple team activity into the wider assurance programme. Supporting security assurance against frameworks and standards including the NCSC Cyber Assessment Framework, ISO 27001, NIST CSF 2.0 and Cyber Essentials Plus. Communicating technical risk and control weaknesses clearly to senior stakeholders, balancing security improvement against cost, resilience and operational requirements. … effectiveness and drift, managing exceptions and driving remediation of identified weaknesses. Knowledge of the NCSC CAF and at least one of ISO 27001 or NIST CSF 2.0. Experience of zero trust and identity architecture, including conditional access and adaptive authentication. Experience scoping, commissioning or managing penetration testing. The ability ...

guidance to ensure security risks are understood, managed and remediated in line with organisational risk appetite and recognised best practice frameworks (e.g. ISO 27001, NIST, CIS Controls). Key Responsibilities Deliver security risk identification, assessment, analysis and logging activities, ensuring risks are clearly articulated, consistently scored and recorded in approved … and non-technical audiences. Experience working collaboratively with multidisciplinary teams across business and technology functions. Familiarity with recognised security frameworks and standards (ISO 27001, NIST, CIS Controls). Candidates must hold government security vetting at SC level and be able to meet UK residency requirements. What ...

Head of Information Security Network Security/Microsoft 365/Azure/Identity and Access/NIST CSF London (Hybrid -2 Days Onsite, 3 Days WFH per week) Up to £125,000 depending on skills and experience + Benefits + Bonus Are you a hands-on security professional ready … Good knowledge of cloud security, ideally within Microsoft 365 and Azure A strong understanding of identity, authentication, privileged access and access control Experience applying NIST CSF, CIS Controls or ISO 27001 as practical tools, with a record of improving security standards and policies Desirable: Google Enterprise knowledge, a recognised security ...

Privacy Manager/Senior Manager - Cyber Strategy & Transformation Overview Data privacy is a critical business priority and a key enabler for organisations seeking to grow in increasingly data-driven environments. This role focuses on shaping ...

and project stakeholders. Identifying opportunities to improve security services through upgrades, automation and better operational processes. You'll also help maintain alignment with the NIST Cybersecurity Framework and applicable Network and Information Systems (NIS) Regulations. What You'll Bring You'll have significant hands-on experience supporting complex IT, network … of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability to maintain security policies, procedures, technical documentation and audit evidence. A methodical approach ...

and project stakeholders. Identifying opportunities to improve security services through upgrades, automation and better operational processes. You'll also help maintain alignment with the NIST Cybersecurity Framework and applicable Network and Information Systems (NIS) Regulations. What You'll Bring You'll have significant hands-on experience supporting complex IT, network … of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability to maintain security policies, procedures, technical documentation and audit evidence. A methodical approach ...

and project stakeholders. Identifying opportunities to improve security services through upgrades, automation and better operational processes. You'll also help maintain alignment with the NIST Cybersecurity Framework and applicable Network and Information Systems (NIS) Regulations. What You'll Bring You'll have significant hands-on experience supporting complex IT, network … of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability to maintain security policies, procedures, technical documentation and audit evidence. A methodical approach ...

banking, investment banking or investment management environment; Managing cyber security incidents; Experience working with Cyber Security and Incident Response frameworks such as NIST, Kill Chain, Attack life Cycle, & MITRE). Relevant experience with MITRE Att&Ck alignment with security monitoring use cases. Relevant experience with cloud security assessments aligning … of information security principles and best practices; In-depth understanding of legislation affecting security, privacy and systems assurance; experiencing working to recognised standards - e.g. NIST, COBIT. GCIA, GCIH, GCFA or equivalent. What Mizuho Can Offer You Here at Mizuho, there are fantastic progression opportunities and clear paths to promotion. ...

Supporting subsidiaries with ISO 27001 compliance, audits and ongoing certification requirements. Carrying out cyber risk assessments and security maturity assessments using recognised frameworks including NIST and CIS Controls. Supporting the integration of newly acquired businesses into the Group's cyber governance and security frameworks. Developing, reviewing and maintaining information security … cyber security governance, risk and compliance. Good knowledge of ISO 27001, including experience supporting or leading audit and certification activity. Practical experience working with NIST and CIS security frameworks. Experience conducting cyber risk assessments, control assessments or security maturity reviews. Experience reviewing and managing cyber or technology risk registers. Experience ...

and risk-based roadmaps. Helping organisations prioritise cyber investment. Supporting senior stakeholders with cyber risk decision-making. Working with recognised frameworks and standards including NIST CSF, ISO 27001, NCSC CAF and NIS2. Cyber Transformation Turning cyber strategies and assessments into practical transformation programmes. Defining programme scope, priorities, governance and outcomes. … risk, governance, transformation or consulting. An understanding of how cyber risk connects to wider technology and business priorities. Exposure to recognised frameworks such as NIST CSF, ISO 27001, NCSC CAF or NIS2. Strong analytical and problem-solving skills, with the ability to turn findings into clear recommendations. Strong client-facing ...

enterprise environments Strong understanding of vulnerability scoring methodologies such as CVSS Experience managing technology risk and remediation governance Exposure to regulatory environments such as NIST SP 800-40, DORA, FCA/PRA requirements, ISO 27001 and NIST Cybersecurity Framework Proven ability to leverage AI tools to enhance productivity, optimise workflows ...