25 of 25 Contract NCSC Jobs in the UK

Secure by Design Principles DevSecOps Methodologies Security Operations & Incident Response Identity & Access Management (IAM) Data Protection & Privacy Controls Enterprise Security Architecture Frameworks Familiarity with: NCSC Cloud Security Principles ISO 27001 NIST Cybersecurity Framework CIS Controls OWASP Technical Experience Cloud Platforms AWS Microsoft Azure Google Cloud Platform (GCP) Security Technologies Microsoft ...

scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+, CEH, CKS, CKA or similar certifications Please note: Active SC Clearance is essential for this position, along with ...

Infrastructure as Code (IaC) hardening. Experience applying security controls to AI and machine learning components, Demonstrable knowledge of cybersecurity frameworks and standards, including the NCSC Cyber Assessment Framework, ISO 27001, NIST, COBIT, as well as SABSA and TOGAF. - Preferred Qualifications: Industry certifications such as CompTIA Security+, CISSP, CISM ...

Trust Architectures. Deep technical knowledge of Microsoft Azure, Building Cloud Platforms, Migrating Applications to Cloud Platforms. Agile Delivery using standard DevSecOps toolchains Knowledge of NCSC, GDS, and UK government security frameworks, including Secure by Design, Cloud Security Principles, Government Functional Standards, and the Technology Code of Practice. Working in Secure ...

mitigate or remediate findings. Working knowledge of container and Kubernetes security, image hardening, admission controls, runtime protection. Familiarity with UK government security frameworks (GovAssure, NCSC Cyber Assessment Framework, HMG SPF) Experience contributing reusable security patterns, tooling, or paved-road templates back into an engineering practice. Evidence of mentoring engineers ...

government security standards and public sector assurance frameworks. Experience working within government, Critical National Infrastructure (CNI), or other highly regulated environments. Familiarity with: NCSC Cyber Assessment Framework (CAF) ISO 27001 NIST Cybersecurity Framework Risk Management Frameworks Control Assurance and Testing Operational Resilience Programmes Experience supporting large-scale digital transformation, cloud ...

environments Strong stakeholder engagement and supplier management skills Experience presenting incident risk information to senior stakeholders Desirable Knowledge of: NIST Cyber Security Framework (CSF) NCSC guidance ITIL Major Incident Management ISO 27001 Experience supporting security assurance and audit activities Experience in Defence, Government, or highly regulated sectors Key Deliverables Security ...

compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility of: Security risks, Compliance status, Control effectiveness ...

compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility of: Security risks, Compliance status, Control effectiveness ...

performance analysis. Microsoft Excel, Power BI, and reporting capabilities. Desirable Knowledge of the UK NIS Regulations and associated cyber security obligations. Understanding of the NCSC Cyber Assessment Framework (CAF). Experience supporting Ofgem or regulated programmes or critical national infrastructure (CNI) environments. Experience with managing complex programme of portfolio wide ...

technology environments Ensure scalability, performance, resilience and maintainability requirements are achieved. Cyber Security and Technical Assurance Ensure compliance with: MOD Defence Standard 05-138 NCSC Cyber Assessment Framework (CAF) ISO 27001 Secure by Design principles Zero Trust Architecture approaches Support technical risk assessments and accreditation activities. Contribute to cyber resilience ...

technical leadership skills. Desirable skills and experience AWS Certified Solutions Architect or equivalent experience. TOGAF, MODAF or equivalent architecture framework experience. Knowledge of NCSC-aligned security principles and assurance expectations. Experience with cross-domain transfer solutions, guards or controlled data movement between security domains. Experience with data catalogues, data mesh ...

working in multi-supplier or SIAM environments Ability to interpret outputs from SOC and vulnerability tooling without direct ownership Desirable Familiarity with NIST CSF, NCSC or UK Government security guidance Experience in Defence sector or highly regulated environments Exposure to audit, assurance or ISMS processes ITIL alignment Key Deliverables Standardised ...

working in multi-supplier or SIAM environments Ability to interpret outputs from SOC and vulnerability tooling without direct ownership Desirable Familiarity with NIST CSF, NCSC or UK Government security guidance Experience in Defence sector or highly regulated environments Exposure to audit, assurance or ISMS processes ITIL alignment Reasonable Adjustments: Respect ...

Requirements: Experience in the development of bespoke product-based security solutions. Graduate degree in relevant engineering, computing, or related scientific discipline. Membership of an NCSC recognised professional security body (e.g. CIISec, ISC2, ISACA). Knowledge of UK/EU/NATO information security standards and frameworks. Practical experience of producing ...

access control Strong technical leadership, stakeholder engagement and documentation skills Nice to have: AWS Solutions Architect certification TOGAF, MODAF or similar architecture frameworks NCSC and MOD assurance experience Cross-domain transfer/secure data movement knowledge Data Mesh, Data Fabric, Lakehouse or Data Catalogue experience Hays Specialist Recruitment Limited acts ...

formal technical documentation (HLDs, LLDs, SOPs) and Penetration Testing scopes. Ensure full compliance with UK security policies (including JSP 440, JSP 604, JSP 453), NCSC guidance, and the NIST framework. Requirements Clearance: Must hold active, full transferable DV (Developed Vetting) Clearance . Sector Experience: Proven track record as a Security ...

interact with key external stakeholders, including UK Government bodies and law enforcement agencies. Key Interfaces: External: UK Government bodies (NPSA, OFGEM, NaCTSO, DESNZ, NCSC), UK Police Forces, energy sector partners. Internal: All lines of business, security guard force supplier. Leadership Qualities: We're looking for a leader with strong influencing ...

security assurance across large, complex transformation programmes involving multiple suppliers and stakeholders. Strong knowledge of government security policies and frameworks, including Secure by Design, NCSC guidance and related standards. Experience conducting security assessments, audits and assurance reviews. Experience reviewing technical security architectures and providing constructive challenge to delivery teams. Strong … Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within highly regulated public sector or government environments. What's on Offer ...

security assurance across large, complex transformation programmes involving multiple suppliers and stakeholders. Strong knowledge of government security policies and frameworks, including Secure by Design, NCSC guidance and related standards. Experience conducting security assessments, audits and assurance reviews. Experience reviewing technical security architectures and providing constructive challenge to delivery teams. Strong … Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within highly regulated public sector or government environments. What's on Offer ...

lifecycle. Liaise with internal and external security assurance authorities to demonstrate compliance with relevant security frameworks. Work collaboratively with external security authorities, including the NCSC , where required to support security assurance. Manage security activities across development, testing and manufacturing environments. Advise engineering teams on platform lockdown, secure configuration and security … postgraduate qualification in Engineering, Computer Science, Cyber Security or a related scientific/technical discipline , or equivalent professional experience. Professional membership of an NCSC-recognised security organisation such as CIISec, ISC2 or ISACA . ...

management, and platform security controls. Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer. Ensure compliance with MOD, NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. … endpoint security, EDR, vulnerability management, and platform hardening. Experience designing secure solutions for offline/air-gapped networks. Excellent understanding of MOD security policies, NCSC guidance, JSP 440/604, Secure by Design, and the NIST Cybersecurity Framework. Experience supporting security assurance, risk management, and accreditation activities. Strong stakeholder engagement ...

security assurance authorities to demonstrate product compliance. Apply MOD Secure by Design principles throughout the engineering lifecycle. Work with external security authorities, including the NCSC, to support assurance of security solutions. Advise engineering teams on platform lockdown, configuration and appropriate product security controls. Support penetration testing, analyse findings and develop … policy, risk management and accreditation experience. Knowledge of threat intelligence sources. Knowledge of quantum cryptography and quantum key management. Experience engaging with UK Government, NCSC or NATO security authorities. ...

Risk Profile (CRP) audit work. Responsibilities: Plan and conduct audits of customer processes and systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssure. Support and, over time, help lead audit activity, ensuring findings are properly documented and reported. Communicate audit findings … risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills/Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience of cyber report writing. Relevant ISO certification (for example ISO 27001 Lead Auditor ...

external security assurance authorities to desmontrate product compliance against recognised UK and wider frameworks. Driving collaborative working with external security authorities such as the NCSC to provide underwriting of security solutions. Understanding and management of security activities within development, testing and manufacturing environments. Advising development teams on suitable platform lockdown … systems. Graduate degree in relevant engineering, computing or related scientific discipline, and/or evidence of further professional study. Full membership of an NCSC recognised professional security body organisation (i.e. CIISec, ISC2 or ISACA). Recent experience and demonstratable knowledge of live and legacy UK/EU/NATO information ...