1 to 25 of 46 Permanent NIST Jobs in the City of London

and reducing risk. WHAT YOU'LL BRING: Strong experience in a cyber security, information security, or security operations role. Good understanding of: ISO 27001 NIST Cyber Security Framework Cyber Essentials Plus Risk Management Methodologies Experience investigating security incidents. Knowledge of Microsoft 365 security technologies. Understanding of networking, operating systems, cloud ...

control environment meets regulatory expectations, supports operational resilience, and enables secure business growth. Champion & Ensure delivery against compliance requirements like the Apex Gold standard, NIST, DORA, SOC1 and SOC 2, ISO27001 and all relevant group controls. Liaising with key stakeholders, partners and group entities, internal and external. Key Responsibilities Technology ...

threat detection, and incident response, with a focus on continuous process improvement.**Risk Management & Threat Intelligence*** Strong familiarity with security frameworks and standards (e.g. NIST, ISO 27001), and deep understanding of security concepts including vulnerability management, threat intelligence, incident response, and offensive security techniques.* Experience in gathering and analysing threat ...

cause analysis, tabletop exercises and crisis response testing to drive continuous improvement. Working knowledge of UK security and compliance frameworks, including PCI-DSS, GDPR, NIST, ISO 27001 and Cyber Essentials. Additional Information BeneFITS' Employee discount (hello ASOS discount!) Employee sample sales 25 days paid annual leave + an extra celebration ...

and Access Transparency, relevant to deploying per-market for different banks' regulators Hands‐on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2, ISO 27001 and ...

maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001/27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF. Develop and maintain information security policies, standards and procedures, ensuring organisational compliance. Define, coordinate and assess the implementation of specific security controls ...

secure solution architecture across complex, multi-supplier and/or classified programmes. Strong knowledge of NCSC guidance, Secure by Design, Cyber Assessment Framework (CAF), NIST and ISO 27001 . Experience applying risk-driven security architecture methodologies to complex systems and environments. Strong understanding of security requirements, threat modelling, risk assessment ...

understanding of security principles, design patterns, and defense-in-depth strategies. Knowledge of Standards: Strong knowledge of relevant security standards and frameworks such as NIST, ISO 27001, MITRE ATT&CK, SOC2 and OWASP. Communication Skills: Ability to articulate technical risks and architectural decisions to both technical and non-technical audiences. ...

Target operating Model and Cyber Security Strategy Governance, Regulatory & Compliance Oversee cyber security policies, standards, and control frameworks aligned with ISO 27001, SOC, DORA, NIST, and other related standard and frameworks and financial services best practices Ensure compliance with global regulatory requirements (e.g., GDPR, DORA, KSA, UAE, MASA, FCA, CSSF ...

hybrid working environment (London-based presence expected). Flexibility to undertake limited travel (c. 10–15%) where required. Technology Domain Knowledge Cybersecurity (e.g. NIST, ISO 27001) Cloud environments (e.g. AWS, Azure, GCP) IT general controls and application controls Data governance and data quality frameworks Third-party/outsourcing risk Data ...

vendor accreditations will be advantageous. Independent and relevant certifications (such as CISSP, CISM, CCSP or equivalent) are advantageous. Knowledge of industry frameworks such as NIST, ISO 27001, DORA, governance and regulatory compliance is desirable but not essential. Strong communication and stakeholder management skills, with the ability to work collaboratively across ...

cybersecurity strategies across enterprise and operational domains. Experience in threat detection, and incident response. Knowledge of regulatory requirements and governance frameworks (e.g., ISO 27001, NIST). Budgeting & Resource Allocation Strong financial management skills, including budgeting, forecasting, and cost optimisation. Experience managing multi-million-pound technology budgets and maximising ROI. Innovation ...

interviews, written analysis, and writing reports for clients on cyber and information security. Solid understanding of cyber security controls, technology, and frameworks (such as NIST, CIS, Cyber Essentials, GDPR, etc.). Professional security certifications (such as CISSP or CISM) are desirable. Experience in assessing data protection processes and controls, including ...

with experience across sectors such as energy, transportation, telecommunications, water, or social infrastructure. A deep understanding of cyber security frameworks, regulations, and governance , including NIST CSF, IEC 62443, NIS2, KRITIS, NERC, and other relevant standards. Experience working across both IT and Operational Technology (OT) environments , with a strong appreciation of ...

certifications (SC‐100, SC‐200, SC‐401, etc.). Industry‐recognised certifications such as CISSP, CCSP, CISM, GIAC, etc. Familiarity with compliance frameworks – GDPR, NIST AI RMF, ISO27001, SOC2, etc. Ability to build organisational culture, drive employee engagement, strengthen inclusion and diversity, reduce attrition, and attract top talent. Growth mindset ...

and recommending improvements Design and implement robust cybersecurity solutions tailored to IC environments Develop ICSSecurity control frameworks incorporating industry best practices and international standards (NIST, ISO 27001, IEC 62443) Create key deliverables including threat and risk assessments, security policies, procedures, assurance management plans, and compliance evidence Team Development & Growth Mentor ...

thinking, we redefine GRC and IT strategies, empowering organisations to shine. From wielding cyber-superpowers to mastering security frameworks like ISO 27001:2013 and NIST, we’re certified wizards ready to chart a course to success, strengthen defenses, and turn challenges into opportunities to excel. So whether our customers ...

with the ability to effectively communicate with individuals with diverse backgrounds Knowledge of internal controls, internal controls framework and risk standards (e.g. COSO, ISO, NIST etc.) Demonstrated professional judgment, critical thinking, and problem-solving skills Experience in applying modernized auditing techniques, with demonstrated analytical skills Ability to work effectively both ...

thinking, we redefine GRC and IT strategies, empowering organisations to shine. From wielding cyber-superpowers to mastering security frameworks like ISO 27001:2013 and NIST, we're certified wizards ready to chart a course to success, strengthen defenses, and turn challenges into opportunities to excel. So whether our customers ...

teams to maintain a robust security posture in a dynamic environment. The ideal candidate has strong cyber security experience, knowledge of ISO 27001 and NIST CSF, and hands-on expertise with Microsoft security tools. A hybrid London work model is offered with a competitive package. #J-18808-Ljbffr ...

effectiveness of technical, procedural, and physical security controls against documented security requirements and standards. Assess security controls against recognised frameworks including ISO 27001 , NIST CSF , NIST 800-53 , and CIS Controls . Review security documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), policies, procedures, and controls catalogues. Assess … Skills & Experience Proven experience testing and assessing the effectiveness of security controls within complex enterprise environments. Strong knowledge of security frameworks including: ISO 27001 NIST Cyber Security Framework (CSF) NIST 800-53 CIS Controls Experience reviewing and testing: Network security controls Firewall configurations and rule sets Identity and Access Management ...

successful candidate will lead security assessments, maturity reviews, regulatory readiness programmes, and strategic security transformation initiatives aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, DORA, NIS2, Cyber Essentials, and GDPR. They will confidently engage with C-level leaders, facilitate workshops and executive playbacks, develop high-quality proposals … and security transformation programmes. Comfortable operating across both business and technical stakeholder groups. Industry & Regulatory Knowledge – Strong understanding of: ISO 27001, 31000, 42001:2023 NIST Cybersecurity Framework (NIST CSF) 2.0 & NIST AI RMF CIS Controls Cyber Essentials & Cyber Essentials Plus DORA, NIS2, EU AI Act Requirements, GDPR Risk Management and ...

SharePoint, Entra ID and Intune. Support security and governance technologies including Microsoft Purview, Varonis and AvePoint. Maintain infrastructure security standards aligned with CIS, NIST, Cyber Essentials and ISO 27001. Produce technical documentation and take ownership of infrastructure projects and workstreams. What We're Looking For 5+ years' experience in infrastructure ...

/ML development teams on production systems. Experience in financial services, market data, media, enterprise technology, cloud, or other data-intensive environments. Familiarity with NIST AI RMF, ISO/IEC 23894, EU AI Act, OECD AI Principles, model risk management, or responsible AI frameworks. Experience with AI red teaming, model ...

Experience & Qualifications: Essential 5+ years’ experience in risk management, compliance, governance, privacy, technology risk, or internal audit. Close familiarity with frameworks such as GDPR, NIST AI RMF, ISO/IEC 42001, and emerging AI regulations. Strong understanding of risk-based governance and regulatory compliance concepts. Experience working in complex, regulated ...