22 of 22 Permanent NIST Jobs in the East of England

information security assurance and technical cyber‐security operations within a UK organisation Strong working knowledge of ISO/IEC 27001, Cyber Essentials Plus, NIST CSF and UK GDPR/DPA 2018 Hands‐on experience with modern security tooling, including Microsoft Defender, SIEM (e.g. Sentinel), EDR/XDR and vulnerability management ...

senior leadership. Essential Experience 5+ years' experience in Information Security, Cybersecurity or Product Security. Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP. Experience conducting risk assessments, threat modelling and vulnerability management. Experience integrating security into software development lifecycles. Strong cloud security knowledge, ideally AWS. Experience ...

telecommunications, SCADA, industrial control systems or field-connected technology. Relevant certifications such as Microsoft Azure, networking, CISSP, CISM, IEC 62443 or ITIL. Familiarity with NIST Cybersecurity Framework, ISO 27001, Cyber Assessment Framework or sector-specific requirements. Experience establishing separate identity, cloud or management environments for OT. Experience designing or operating ...

telecommunications, SCADA, industrial control systems or field-connected technology. Relevant certifications such as Microsoft Azure, networking, CISSP, CISM, IEC 62443 or ITIL. Familiarity with NIST Cybersecurity Framework, ISO 27001, Cyber Assessment Framework or sector-specific requirements. Experience establishing separate identity, cloud or management environments for OT. Experience designing or operating ...

repositories. Studying towards, or holding, a relevant certification (e.g., CBCI, working towards MBCI, CRISC, or equivalent). Exposure to additional regulatory compliance frameworks (e.g., NIST, SOC 2, DORA). Experience working within a technology, fintech, or payments environment. Familiarity with GRC platforms or risk management and reporting tools. Experience supporting ...

industries. Desirable experience includes: hybrid and multi‐cloud estates such as Azure and AWS alongside a substantial on‐premises footprint; HPC and scientific computing; NIST CSF and Secure by Design; FinOps and run‐cost modelling; large‐scale workplace transformation across Microsoft 365, Windows, device lifecycle, identity and access; and certification ...

management, internal audit or assurance. Working knowledge of at least one major framework, such as PCI DSS, ISO/IEC 27001, SOC 2 or NIST CSF, with the ability to apply requirements in practice. Experience reviewing policies, audit reports, control narratives and evidence, and translating findings into clear actions. Strong ...

security principles and cloud security architecture Experience with Microsoft Entra ID, Conditional Access and identity security Understanding of security frameworks including MITRE ATT&CK, NIST or ISO 27001 Experience with security automation and Infrastructure as Code technologies such as Terraform, Bicep or Azure DevOps Desirable Experience Experience working within enterprise ...

evidence. The relevant reference points are: NCSC's Guidelines for Secure AI System Development The UK government's AI Cyber Security Code of Practice NIST AI RMF ISO/IEC 42001 The EU AI Act, where relevant to clients or operations Qualifications Skills and background The ideal profile ...

Experience in assessing resilience programs, identifying gaps in current capabilities, and develop ing practical improvement roadmaps that help clients harden infrastructure, improve alignment to NIST CSF categories, strengthen recovery and continuity strategies, test response capabilities, and mature program governance over time Experience in a consult ing or corporate advisory role ...

learn Desirable experience: Experience in data protection, with a good understanding of relevant data protection legislation (e.g., UK GDPR). ISO 27001, SOC 2, NIST CSF, CAF, HIPAA, DSPT Gap analysis, auditing, or penetration testing Process and procedure development Software or AI development/testing Client-facing roles Relevant certifications ...

expectations. Experience with security tooling & solutions e.g. SIEM, SOAR, EDR, vulnerability scanning, threat intelligence platforms. Knowledge of relevantsecurity & AI governanceframeworks andregulations, such asMitreATT&CK, NIST, TSA. Any relevantstudy or certifications, either formal or self-learning. A 50-50 joint venture between Tesco and VMO2 that was established back ...

Experience coaching or mentoring analysts and contributing to team development, operational workload management, or shift leadership Knowledge of incident response and adversary frameworks, including NIST Incident Response and MITRE ATT&CK, and applying them in operational investigations Ability to provide clear technical direction to Tier 1 and Tier 2 analysts ...

and access controls , including RBAC, privileged access management, and data access governance. Proven ability to support continuous compliance monitoring against frameworks such as CIS, NIST, and financial services regulatory standards. Strong risk assessment and stakeholder management skills, with the ability to identify security threats, drive remediation activities, and communicate risks ...

Experience coaching or mentoring analysts and contributing to team development, operational workload management, or shift leadership Knowledge of incident response and adversary frameworks, including NIST Incident Response and MITRE ATT&CK, and applying them in operational investigations Ability to provide clear technical direction to Tier 1 and Tier 2 analysts ...

and multidisciplinary delivery teams to embed security throughout the project lifecycle. You will also drive the continued maturity of our security assurance capability, including NIST-aligned risk assessment methods, assurance processes, tooling, and reporting that improve consistency and visibility across programmes. You will be part of a wider UK cyber … and Experience Proven experience delivering Information Assurance, risk management, and security assurance within Defence, Government, Intelligence, or other highly regulated environments. Strong understanding of NIST RMF/CSF, ISO 27001, and Government security frameworks, with experience developing assurance artefacts such as SyOPs, RMADs, Security Impact Assessments, risk assessments, and accreditation ...

access management (IAM), including RBAC, ABAC, JWT and Cookie based authentication. Incident detection and response in MOD environments. Security compliance and regulatory frameworks (e.g., NIST, CIS Benchmarks). Experience working with Kubernetes at an administrative level Soft Skills Strong leadership and mentoring abilities. Effective communication with development, operations, and security ...

Strong understanding of UK MOD Secure by Design and Defence security assurance. Experience with frameworks including GovS 007, HMG IS1/IS2, ISO 27001, NIST and MOD JSPs. Understanding of Systems Engineering, V&V, Product Test experience Experience with product-specific OS, firmware and software security controls. This ...

generating clear, auditable security evidence. Work as the security partner to Engineering, defining reusable security patterns and production‐readiness standards, applying frameworks such as NIST and STIGs pragmatically and driving security findings through to resolution. #J-18808-Ljbffr ...

support risk-based decision making, and work with customers, suppliers, and delivery teams to embed security throughout the lifecycle. You will drive maturity of NIST-aligned risk assessment methods, assurance processes, tooling, and reporting to improve consistency and visibility across projects. #J-18808-Ljbffr ...

This job is with TE Connectivity, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At TE, you will unleash ...

products, track remediation through to release, and support regular security patch releases. Compliance & Hardening: Help CRFS meet customer and regulatory security requirements (e.g. NIST SP 800-53, DISA STIGs, FIPS 140) by hardening our Linux-based product images and servers, and producing the repeatable scan results and technical evidence needed … explain security findings constructively and to own assigned work through to completion. Highly Desirable Regulated Environments: Experience working to security standards such as NIST SP 800-53/RMF, DISA STIGs, CIS Benchmarks, FIPS 140, ISO 27001 or Cyber Essentials Plus, ideally in defense, aerospace or another regulated sector. Security ...