20 of 20 Permanent NIST Jobs in Glasgow

services and cloud-native security monitoring. Experience working within Operational Technology (OT), Critical National Infrastructure, utilities or energy environments. Understanding of security frameworks including NIST, MITRE ATT&CK and Cyber Essentials. Experience supporting SIEM migration or transformation programmes. Current Security Check (SC) clearance or eligibility to obtain clearance. At Sword ...

engagement. Knowledge or experience of recognised cyber security frameworks, standards and regulatory requirements would be beneficial, including: NCSC Cyber Assessment Framework (CAF) IEC 62443 NIST Cybersecurity Framework Network and Information Systems (NIS) Regulations ISO 27001 Experience working within critical national infrastructure, utilities, energy, manufacturing or other industrial environments would ...

reviews. Conducting OT and ICs risk assessments. Contributing to security architecture and secure-by-design reviews. Delivering assessments against frameworks such as IEC 62443, NIST CSF, NIST SP 800-82 and the NCSC CAF. Producing high-quality reports and client deliverables. Supporting workshops, interviews and stakeholder meetings. Working with colleagues … and conducting security risk assessments, including the identification of threats and vulnerabilities and the development of proportionate mitigation recommendations. Practical knowledge of ISO 27001, NIST, IEC 62443, UK GDPR and the NCSC Cyber Assessment Framework, together with experience delivering security audit and assurance activities. Nice to have ...

influence future actions/processes. Strong coaching, teamworking, collaboration and partnering skills. Awareness of recognised technology governance and cybersecurity frameworks, including COBIT 2019, NIST CSF 2.0 and NCSC CAF would be beneficial but not essential. Experience of auditing AI implementation, multi-year technology change programmes, and use of data analytics ...

demonstrated expertise and experience in one of the following domains:##* **Security Assurance** – Leading the delivery of key security frameworks such as ISO 27001, NIST, and Cyber Essentials to clients, ensuring their systems and processes meet industry standards and are resilient to threats. This includes overseeing tailored implementations, guiding teams … applications through the assessment, design or implementation of effective and secure architectural patterns that align with industry standards (e.g. CIS L1/2, NIST, ISO27001, COBIT, etc.).* **Generative AI** – Enabling the secure design and adoption of Gen AI for business, IT and/or security functions in alignment with ...

digital workplace, cyber security, managed services Strong Azure, M365 and Entra ID/AD knowledge Strong grounding in Zero Trust, Defender/Sentinel, NCSC, NIST, ISO 27001 ITIL v4 Foundation; senior MS certs (SC-100, MS-102, AZ-305) desirable Desirable: team/capability scaling experience, IaC (PowerShell/Bicep ...

MCSE, or equivalent knowledge and experience, would be advantageous. Knowledge of recognised OT cyber security frameworks and standards, such as IEC 62443 and NIST, would be beneficial. An understanding of industrial site safety practices and the operational considerations associated with working in critical infrastructure environments. BOSIET certification would be desirable ...

methodologies, leading comprehensive risk assessments and delivering security audit and assurance programmes. Practical experience applying recognised cyber security frameworks and standards, including IEC 62443, NIST Cybersecurity Framework, NIST SP 800-82, ISO/IEC 27001 and the NCSC Cyber Assessment Framework. Experience planning, managing and delivering consultancy engagements, including managing … and experience to support colleagues. Nice to have CISM or CISA IEC ISA 62443 expert cyber security certificate. Experience with the Cyber Assessment Framework, NIST CSF, NIST SP 800-82, IEC ISA 99/62443 and CIS Controls. Strong understanding of IT and OT security risks. Knowledge of the threat ...

activities, whilst promoting compliance with Government security guidance to internal stakeholders. What you bring: Knowledge of security frameworks and standards such as ISO 27001, NIST, OWASP, MITRE. Experience of performing risk assessments, providing recommendations for meeting the security requirements of systems and information systems so that they remain compliant with ...

party supplier risk management, identifying and mitigating vendor risk across the supply chain Contribute to the implementation of additional frameworks and standards such as NIST, FedRAMP and others as the business scales internationally Identify opportunities to streamline onboarding, security reviews and compliance workflows through smarter documentation and process design What … Computer Science, Information Security, Cybersecurity, Data Protection, Information Governance or Risk Recognised qualifications such as CISSP or CompTIA Security+ Exposure to frameworks including NIST, HIPAA, FedRAMP or DORA Knowledge of DevOps or DevSecOps practices Prior experience of a scale-up or growth‐stage SaaS company Please note ...

industrial, energy, utilities or Critical National Infrastructure environments Knowledge of OT security principles and frameworks such as IEC 62443, Purdue Model, NCSC CAF or NIST Networking certifications such as CCNA or CCNP would be advantageous At Sword, our core values and culture are based on caring about our people, investing ...

security capability. Ideal candidates bring 5+ years in OT security consultancy, strong governance and risk background, and hands-on experience with IEC 62443, NIST CSF, #J-18808-Ljbffr ...

and the application of OT cyber security good practice. In-depth knowledge and practical experience of relevant standards and regulatory frameworks, including ISO 27001, NIST Cybersecurity Framework, IEC 62443, NCSC CAF, UK GDPR, the UK NIS Regulations and applicable energy-sector regulatory requirements. Someone who enjoys a varied environment, sharing … CISM UK Cyber Security Council - Chartered Cyber Security Professional (ChCSP) IEC ISA 62443 expert cyber security certificate. Experience with the Cyber Assessment Framework, NIST CSF, ISO27001, NIST SP 800-82, IEC ISA 99/62443 and CIS Controls. Strong understanding of IT and OT security risks. Knowledge of the threat ...

The Student Loans Company is seeking a Security Risk Analyst in Glasgow to support change initiatives by assessing risks and defining security requirements across projects from concept to delivery. Responsibilities include creating security reports and ...

with active SC clearance. I am keen to speak with candidates who have Strong information risk management experience, including use of methodologies such as NIST 800-30/37 and ISO 31000. CISSP, CISM or CRISC qualification Experience working with system, operational and strategic levels of risk and performing threat … Proven experience using multiple cyber threat intelligence feeds and turning them into actionable reports. Experience providing advice, guidance and assurance against standards such as NIST, ISO 27001, CIS, CAF, HMG GovS 007 and NPSA. Experience managing internal and external cyber security risks to IT systems, services and data storage, particularly ...

and risk management, information security, IT services and operational security positions. Knowledge across relevant information security and privacy management frameworks and legislation, such as NIST, the NIS Regulations 2018, ISO/IEC 27001, ITIL, COBIT, Data Protection Act 2018 (GDPR). Proven experience of working with strategic vendors and partners … management, information security, IT services and operational security positions. (Lead Criteria) Knowledge across relevant information security and privacy management frameworks and legislation, such as NIST, the NIS Regulations 2018, ISO/IEC 27001, ITIL, COBIT, Data Protection Act 2018 (GDPR). Proven experience of working with strategic vendors and partners ...

systems and programmes. Support security reviews, risk assessments and assurance activities using relevant frameworks such as NCSC CAF, IEC 62443, ISO 27001 and NIST CSF. Support accreditation, regulatory and compliance activities where required. Produce clear, client-ready deliverables, including assessments, reports, roadmaps, requirements and proposals. Contribute to account growth, bids … considerations. Practical knowledge of cyber risk and threat assessment approaches. Familiarity with relevant standards and frameworks, such as IEC 62443, NCSC CAF, ISO 27001, NIST CSF and the NIS Regulations. Awareness of common OT and IT security technologies, networks, architectures and protocols. The ability to work with limited supervision, make ...

Conditional Access, PIM and RBAC, including joiner, mover and leaver automation with HR Leading the technical side of PCI DSS v4.0 compliance and NIST alignment, from controls and evidence through to audits Building automation with Logic Apps, Function Apps and PowerShell Securing the MySQL and SQL Managed Instance estate alongside … bring 5+ years' hands-on experience with Azure in production Strong Azure networking and Entra ID skills Experience working to PCI DSS, NIST, ISO 27001 or Cyber Essentials Plus Confident PowerShell scripting The ability to explain technical risk in plain English It would be a bonus if you know Intune ...

Access mentoring, knowledge sharing and professional development opportunities to support your career growth Expand your understanding of industry standards and frameworks including IEC 62443, NIST CSF and NIS/NIS2 Progress through clearly defined technical and professional development pathways as your experience grows Benefits A global network of expertise and … both IT and OT networks (e.g., endpoint protection tools, firewalls, intrusion detection systems). Familiarity with key standards, frameworks, and regulations, including IEC 62443, NIST CSF, the ISO 27000 series, MITRE ATT&CK, and NIS/NIS2. Excellent stakeholder engagement and communication skills, with the ability to articulate threat-based ...

Sword Group is seeking an OT Assurance Consultant to strengthen cyber security assurance across complex OT environments in energy and critical national infrastructure. You will design, develop and embed OT assurance frameworks, translating strategic security ...