8 of 8 Contract NIST Jobs in the South East

including IT security Ability to handle ambiguity and make decisions and recommendations with limited data Understanding of various Cyber/IT Security frameworks e.g. NIST; ISO-27001; PCI-DSS; EBA-ICT and FFIEC Solid analytical/problem-solving skills with capability to identify solutions to unusual and complex problems PERSONAL ...

security. Develop formal procedures and management plans for transferring and managing security risks between System 1 (products) and System 2 (enabling systems). Apply NIST risk management frameworks and standards, including NIST SP 800-30, 800-37, 800-53 and the NIST Cybersecurity Framework. Facilitate alignment between engineering and security … and driving agreed integration activities forward. Essential Skills & Experience Proven experience in security risk management, product security or security risk integration. Strong knowledge of NIST frameworks, particularly NIST SP 800-37 and NIST SP 800-53 . Understanding of security risk assessment, threat analysis, vulnerability assessment and mitigation controls. Experience ...

experience producing security cases and technical security assurance documentation. Knowledge of UK MOD security requirements and relevant frameworks, such as Secure by Design, JSPs, NIST and ISO 27001. Ability to work directly with engineering and development teams, influencing technical design decisions rather than operating solely in an advisory or governance ...

level guidelines. The role is heavily focused on analysing complex processes to seamlessly integrate comprehensive risk management frameworks, leveraging a solid knowledge of the NIST framework, product security, and advanced compliance practices. Characterized by high autonomy, the professional will independently chair multidisciplinary tables, interfacing smoothly with PSec, Security and executives. … Operate Management Plan Facilitate cross-functional alignment between Security and Engineering to harmonize risk management including tolerance and mitigation strategies. Pursue the application of NIST frameworks (such as NIST SP 800-37, 800-53, NIST CSF, CNNSI 1253) for the risk management to be aligned with international frameworks Develop ...

Security Clearance. Experience integrating security within engineering or technical environments. Excellent stakeholder management and communication skills. CISSP, CISM, or equivalent security qualification. Knowledge of: NIST 800-53 NIST 800-30 NIST 800-37 Desirable Degree or equivalent experience. NIST CSF knowledge. CRISC certification. CNSSI 1253 experience. This is a highly ...

behaviour and performance Familiarity with agent-to-agent orchestration protocols or the Model Context Protocol (MCP) Awareness of secure-by-design frameworks (ISO 27001, NIST, OWASP) Open-source AI/ML contributions Why Apply Real technical ownership: shape the architecture, not just work through a backlog Work at the leading ...

credibility to challenge solution designs Practical experience of AI security risk and assurance, including LLM and agentic AI threat modelling, with knowledge of NIST AI RMF, ISO/IEC 42001 and OWASP guidance for LLM applications Experience supporting complex transformation programmes Energy and drive, with a real appetite for improving … team works Desirable: Experience in a large or highly regulated organisation Knowledge of ISO 27001, NIST and OWASP CISSP, CISM or equivalent Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people ...

DV cleared Red Team Operator/Offensive Security Consultant Bristol HQ (3-4 days a week onsite) with travel to local sites Up to £86 p/h Inside IR35 Are you an experienced DV ...