1 to 25 of 38 Contract NIST Jobs in the UK

Security Operations & Incident Response Identity & Access Management (IAM) Data Protection & Privacy Controls Enterprise Security Architecture Frameworks Familiarity with: NCSC Cloud Security Principles ISO 27001 NIST Cybersecurity Framework CIS Controls OWASP Technical Experience Cloud Platforms AWS Microsoft Azure Google Cloud Platform (GCP) Security Technologies Microsoft Defender Suite Splunk Microsoft Sentinel CrowdStrike ...

sector, government, defence, or highly regulated environments. Knowledge of Zero Trust security principles. Experience with cloud-native security tooling and security automation. Familiarity with NIST, ISO 27001, CIS Controls, or similar security frameworks. Experience supporting DevSecOps and secure software delivery practices. Relevant cloud and security certifications such as: CISSP CCSP ...

infrastructure environments. Exposure to vulnerability management and threat hunting activities. Experience supporting government, defence, or public sector programmes. Familiarity with security frameworks such as NIST, ISO 27001, or CIS Controls. Consulting or client-facing experience. Key Competencies Cybersecurity Operations Cyber Threat Intelligence Threat Modelling Security Monitoring Risk Analysis Incident Investigation ...

Management (BCM) Disaster Recovery Planning Operational Resilience Risk Management Frameworks Internal Audit Activities Control Assessments Process Improvement Programmes Familiarity with: ISO 27001 ISO 22301 NIST Cybersecurity Framework Cyber Assessment Framework (CAF) ITIL Governance, Risk and Compliance (GRC) tools Preferred Certifications The following certifications would be advantageous but are not essential ...

Security initiatives within complex environments. Understanding of Security Architecture Design and secure-by-design principles. Familiarity with cyber frameworks such as MITRE ATT&CK, NIST, or Cyber Kill Chain. Experience producing intelligence reports and presenting findings to stakeholders. Strong analytical and problem-solving abilities. Excellent written and verbal communication skills. ...

Experience Experience within public sector, government, defence, or critical national infrastructure environments. Knowledge of security and governance frameworks such as: ISO 27001 ISO 22301 NIST ITIL Experience supporting resilience and operational risk programmes. Audit, compliance, or assurance certification experience. Consulting or client-facing delivery experience. Experience working within large-scale ...

/EU/NATO information security standards and frameworks, including: UK MOD Secure by Design GovS 007 HMG IS1/IS2 ISO 27001 NIST SP 800-30, 800-37 and 800-53 UK MOD Information Security-related JSPs EU Cyber Resilience Act (CRA) US Department of Defense information security policies ...

cloud security, infrastructure security, and network security. Experience conducting security assessments, threat modelling, or risk analyses. Familiarity with industry frameworks and standards such as: NIST Cyber Security Framework ISO 27001 CIS Controls Secure Controls Framework (SCF) DORA ANSSI EBIOS RM OWASP Professional Experience Minimum 7 years of experience in Information ...

Design Review Board activities. Review third-party solutions and provide security guidance during procurement and onboarding. Ensure solutions align with security policies, ISO 27001, NIST and client security requirements. Develop security architecture patterns, standards and design guidance. Provide security consultancy to business and IT stakeholders throughout project delivery. Collaborate with ...

and assurance artefacts. Desirable Skills & Experience Experience within Defence, Government, or highly regulated environments. Knowledge of security accreditation and assurance processes. Familiarity with the NIST Risk Management Framework (RMF). Experience with vulnerability management and security tooling. Exposure to security architecture, secure design reviews, or threat modelling. Understanding of ...

secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+, CEH, CKS, CKA or similar certifications Please note: Active SC Clearance is essential for this ...

working within complex multi-supplier environments Strong stakeholder engagement and supplier management skills Experience presenting incident risk information to senior stakeholders Desirable Knowledge of: NIST Cyber Security Framework (CSF) NCSC guidance ITIL Major Incident Management ISO 27001 Experience supporting security assurance and audit activities Experience in Defence, Government, or highly ...

strategic architecture responsibilities with hands-on security activities Experience supporting security programmes in complex enterprise environments Desirable Experience for a Security Architect ISO 27001, NIST CSF, NIST 800-53, NIS/NIS2 or DORA Critical National Infrastructure (CNI), OT or IIoT security experience Security assurance, audit or compliance programmes ...

assurance frameworks. Experience working within government, Critical National Infrastructure (CNI), or other highly regulated environments. Familiarity with: NCSC Cyber Assessment Framework (CAF) ISO 27001 NIST Cybersecurity Framework Risk Management Frameworks Control Assurance and Testing Operational Resilience Programmes Experience supporting large-scale digital transformation, cloud migration, or complex technology programmes. Reasonable ...

applying security controls to AI and machine learning components, Demonstrable knowledge of cybersecurity frameworks and standards, including the NCSC Cyber Assessment Framework, ISO 27001, NIST, COBIT, as well as SABSA and TOGAF. - Preferred Qualifications: Industry certifications such as CompTIA Security+, CISSP, CISM, CEH, or GIAC are highly desirable. To apply ...

weaknesses, non-compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility of: Security risks, Compliance status ...

management and communication skills. Experience working within regulated environments. Excellent analytical and problem-solving capabilities. Desirable Experience Knowledge of DORA, NIS2, ISO 27001 and NIST Cybersecurity Framework. Experience designing and facilitating cyber resilience scenario testing. Governance, RACI and RAID management experience. Experience supporting large-scale Operational Resilience programmes. What ...

Knowledge of UK MOD and Government security standards and frameworks, including GovS 007, HMG IS1 & IS2 and relevant JSPs . Knowledge of frameworks including NIST SP800-30/37/53 and ISO 27001 . Experience working directly with product development and engineering teams. Knowledge of current cryptographic technologies and ...

compliance, risk management and security frameworks. Identify and respond to cyber threats and vulnerabilities. Experience Strong hands-on cyber security experience and knowledge of NIST, CIS and PCI-DSS. Experience with Cortex XDR, Illumio Core/CloudSecure and Microsoft Security. Knowledge of Defender, Azure AD, Purview and Sentinel. Experience with ...

and privileged credential lifecycle management Experience with session isolation/recording and secure access controls Strong technical documentation and security architecture skills Knowledge of NIST, ISO 27001 or similar security frameworks Excellent stakeholder management and communication skills Experience of DevSecOps and secrets management would be advantageous If you'd like ...

weaknesses, non-compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility of: Security risks, Compliance status ...

Splunk, Log Rhythm, Qualys Implementing security technology controls, secure config and implementation of security projects Information security risks management, controls and frameworks (NIST, CIS, PCI-DSS) IT Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM ...

appropriately recorded and accepted. Ensure penetration testing and remediation activities align with relevant security standards, regulatory requirements and industry best practice, including OWASP, NIST, ISO 27001, PCI-DSS, GDPR and CAF. Ensure appropriate governance, documentation and evidence is maintained throughout the testing lifecycle. Provide assurance over the quality and effectiveness ...

validate) Experience working in multi-supplier or SIAM environments Ability to interpret outputs from SOC and vulnerability tooling without direct ownership Desirable Familiarity with NIST CSF, NCSC or UK Government security guidance Experience in Defence sector or highly regulated environments Exposure to audit, assurance or ISMS processes ITIL alignment ...

/EU/NATO information security standards and frameworks, including the UK MOD Secure by Design framework, GovS 007, HMG IS1&2, ISO27001, NIST SP800-30/37/53, UK MOD Information Security related JSPs, EU CRA and US DoD information security policies. Practical experience of producing technical assurance ...