11 of 11 Permanent NIST Jobs in Edinburgh

enterprise. Hands‐on experience with ISO/IEC 27001 (ISMS lifecycle, Annex A controls, risk assessment and treatment) and related security control frameworks (e.g., NIST CSF, ISO 27000, TISAX, etc.).Demonstrated experience with Integration Risk Management (project/solution risk assessments) and Third‐Party Risk Management (vendor due diligence, ongoing ...

engage effectively with both technical and non-technical stakeholders and facilitate balanced risk discussions. Working knowledge of security frameworks and governance concepts, including NIST CSF, ISO 27000 series, FAIR risk analysis, and privacy-related requirements. Preferred Skills and Qualifications: Relevant industry certifications such as CISSP, SSCP, or GCIA are preferred. ...

including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems. Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent. GenAI security: experience assessing and mitigating risks ...

and application security Experience with Go and/or C# development Knowledge of HTTP, REST, TLS and TCP/IP Strong understanding of OWASP, NIST, ISO 27001 and CIS Excellent communication skills with the ability to work closely with developers and technical stakeholders Desirable Experience with: Vulnerability research/exploit ...

Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005, IEC62443 etc. Experience and knowledge of Industrial Control Systems is advantageous, but you will be provided with the opportunity to learn ...

development and mentoring of junior team members. Confident understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005. Varied Experience of assessing risk and building or evolving risk management framework components such as measurement criteria. Good ...

vulnerabilities and recommending improvementsDesign and implement robust cybersecurity solutions tailored to ICS environmentsDevelop ICS security control frameworks incorporating industry best practices and international standards (NIST, ISO 27001, IEC 62443)Create key deliverables including threat and risk assessments, security policies, procedures, assurance management plans, and compliance evidenceTeam Development & GrowthMentor Accenture team ...

data security, including data classification, DLP, encryption, and data lifecycle protection. Strong understanding of relevant standards and frameworks (e.g. ISO/IEC 27001, NIST CSF, CIS Controls).Proven experience owning or leading a global or enterprise‐scale security service or capability. Ability to operate at both strategic and operational levels ...

across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance activities. - Facilitate governance forums, stakeholder workshops and senior executive briefings to embed decision rights and reporting ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

mitigationsTechnical DeliveryDeploy security controls tailored to operational technology environments, balancing security with operational continuitySupport the implementation of ICS security frameworks based on IEC 62443, NIST CSF, and other OT-specific standardsDevelop network segmentation strategies for OT/IT convergence scenariosConduct security testing in industrial environments while maintaining operational safetyDocumentation & ComplianceCreate …/ICS security exposureUnderstanding of Industrial Control Systems (SCADA, DCS, PLC) and their unique security challengesKnowledge of OT security frameworks and standards (IEC 62443, NIST CSF, ISA/IEC 62443)Familiarity with OT-specific regulations (NIS, NIS2, CAF, CRA)Understanding of the OT threat landscape and attack vectors specific ...