6 of 6 Contract NIST Jobs in Berkshire

security. Develop formal procedures and management plans for transferring and managing security risks between System 1 (products) and System 2 (enabling systems). Apply NIST risk management frameworks and standards, including NIST SP 800-30, 800-37, 800-53 and the NIST Cybersecurity Framework. Facilitate alignment between engineering and security … and driving agreed integration activities forward. Essential Skills & Experience Proven experience in security risk management, product security or security risk integration. Strong knowledge of NIST frameworks, particularly NIST SP 800-37 and NIST SP 800-53 . Understanding of security risk assessment, threat analysis, vulnerability assessment and mitigation controls. Experience ...

Security Clearance. Experience integrating security within engineering or technical environments. Excellent stakeholder management and communication skills. CISSP, CISM, or equivalent security qualification. Knowledge of: NIST 800-53 NIST 800-30 NIST 800-37 Desirable Degree or equivalent experience. NIST CSF knowledge. CRISC certification. CNSSI 1253 experience. This is a highly ...

credibility to challenge solution designs Practical experience of AI security risk and assurance, including LLM and agentic AI threat modelling, with knowledge of NIST AI RMF, ISO/IEC 42001 and OWASP guidance for LLM applications Experience supporting complex transformation programmes Energy and drive, with a real appetite for improving … team works Desirable: Experience in a large or highly regulated organisation Knowledge of ISO 27001, NIST and OWASP CISSP, CISM or equivalent Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people ...

that can be consistently understood and applied across the client. Consolidate frameworks, standards and regulatory requirements: Analyse and rationalise ISO/IEC 27001:2022, NIST SP 800-53, NIST CSF, Cyber Assessment Framework (CAF), Cyber Essentials Plus and applicable legal/regulatory obligations, identifying overlaps, duplication, conflicts and gaps ...

that can be consistently understood and applied across the client. Consolidate frameworks, standards and regulatory requirements : Analyse and rationalise ISO/IEC 27001:2022, NIST SP 800-53, NIST CSF, Cyber Assessment Framework (CAF), Cyber Essentials Plus and applicable legal/regulatory obligations, identifying overlaps, duplication, conflicts and gaps ...

DV cleared Red Team Operator/Offensive Security Consultant Bristol HQ (3-4 days a week onsite) with travel to local sites Up to £86 p/h Inside IR35 Are you an experienced DV ...