1 to 25 of 204 Permanent NCSC Jobs in England

related compliance frameworks. Security frameworks and standards including ISO 27001, NIST Cyber Security Framework and CIS Controls v8. UK Government and NCSC security policies, guidance and best practices. Cloud security architecture, particularly AWS services such as IAM, KMS and ECS. Event-driven and microservices-based architectures. Cloud Security Posture Management ...

security. Compliance & Governance: ensure Thales on-premises and cloud environments comply with government policies, such as Cyber Essentials, DefStan 05-138, UK GDPR, NCSC guidelines and other applicable contractual and regulatory frameworks. Evidence Continual Security Assurance: Creation, Maintenance and Review of all IS/IT technical security documentation, policy ...

public sector/government agencies . Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling – Kill Chain ...

defence, financial services or enterprise environmentsAgile and Waterfall project deliveryClient-facing consulting and stakeholder managementKnowledge of security frameworks such as NIST CSF, ISO 27001, NCSC CAF, GDPR and NIS2 is essential.DesirableExperience across cloud security, vulnerability management, threat management or IAM.Professional certifications such as CISSP, CISM, CISA, M.Inst.ISP or equivalent.Eligibility ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

infrastructure operations.Experience supporting government, defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors.Familiarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards.Experience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations, or large ...

operations. Experience supporting government, defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors. Familiarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards. Experience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations ...

delivery, including IT/OT convergence Advanced Visio skills and fluency with TOGAF or equivalent architecture methods. Working knowledge of NIST CSF, IEC 62443, NCSC CAF, EU NIS2, cloud and network fundamentals Willingness to travel for client delivery (domestic and international as required). Ideally, You’ll Also Have Experience ...

Excellent stakeholder management, communication, and influencing skills, with experience engaging with senior stakeholders. Thorough understanding of government digital service standards (GDS), security principles (e.g., NCSC), and data protection regulations (GDPR). Experience in managing third-party suppliers and navigating public sector procurement processes. Strong leadership potential, with a track record ...

Excellent stakeholder management, communication, and influencing skills, with experience engaging with senior stakeholders. Thorough understanding of government digital service standards (GDS), security principles (e.g., NCSC), and data protection regulations (GDPR). Experience in managing third-party suppliers and navigating public sector procurement processes. Strong leadership potential, with a track record ...

Excellent stakeholder management, communication, and influencing skills, with experience engaging with senior stakeholders. Thorough understanding of government digital service standards (GDS), security principles (e.g., NCSC), and data protection regulations (GDPR). Experience in managing third-party suppliers and navigating public sector procurement processes. Strong leadership potential, with a track record ...

mitigation strategies across programmes Provide authoritative guidance on risk trade-offs and security posture Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC) Ensure architectural traceability from requirements through to controls and implementation Develop and lead the security architecture practice Mentor, coach, and upskill security architects and consultants Define ...

security architecture, cyber transformation and regulatory compliance for cyber.Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2 or equivalent.Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk.Desire to work ...

security architecture, cyber transformation and regulatory compliance for cyber.Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2 or equivalent.Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk.Desire to work ...

similar languages (e.g. Rust), particularly with infrastructure as code. Familiarity with UK and international compliance frameworks such as MOD Secure by Design, JSP 453, NCSC Cloud Security Principles, NIST 800-53. Proven experience deploying systems in air-gapped or classified environments. Experience building and maintaining secure CI/ ...

Compliance Apply Zero Trust principles across cloud platforms. Implement identity and access management controls. Configure security monitoring, logging and compliance controls. Ensure alignment with NCSC, GDS and UK Government security frameworks. Identify and mitigate technical risks throughout delivery. Essential Skills & Experience We are looking for candidates with proven experience delivering ...

security architecture, cyber transformation and regulatory compliance for cyber.Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2.Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk.Desire to work with large ...

documentation of complex security solution, writing high level designs encompassing both cloud and on premise environments.Understanding and awareness of industry frameworks such as NIST, NCSC CAF, CIS, IEC 62443. Plus knowledge of the NIS-R Directive and PCI DSS would be advantageous.Ability to evaluate and propose solutions and technologies within ...