14 of 14 Permanent NCSC Jobs in London

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

improvement. Working knowledge of AWS and Microsoft Azure architecture and operating models. Knowledge of Government Digital Service standards, the Technology Code of Practice and NCSC cloud security principles. Understanding of ITIL 4, SIAM principles, ISO/IEC 27001, ISO/IEC 20000-1 and OWASP practices. Strong stakeholder management ...

zones, organisation policies, Shared VPC and service perimeter controls. Experience with service reliability engineering (SRE), SLIs, SLOs and error budgets. Familiarity with ISO 27001, NCSC guidance and relevant UK Government security requirements. Benefits Competitive Salary Bonus Scheme Private Healthcare Insurance 25 Days Annual Leave + Bank Holidays ...

knowledge of JSP 936 Understanding of AI attack types such as prompt injection, data poisoning and agent tool misuse, including MITRE ATLAS Familiarity with NCSC secure AI guidance and the UK AI Cyber Security Code of Practice Structured assurance notations such as CAE or GSN, ideally linked to machine-readable ...

clear business outcomes and recommendations. Desirable: Experience delivering solutions into Central Government, Defence or highly regulated environments. Knowledge of Cyber Essentials Plus, ISO27001 and NCSC guidance. Experience with container platforms, platform engineering and CI/CD tooling. Exposure to OFFICIAL and OFFICIAL-SENSITIVE government workloads. Cloud certifications across Microsoft Azure ...

architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire to work ...

certifications (e.g., CISM, CISA, ISO 27001) and/or equivalent demonstrable experience. Knowledge Strong understanding of relevant government cyber standards and assurance approaches (e.g., NCSC guidance, Cyber Assessment Framework (CAF), GovAssure and related policy), and how to apply them proportionately to support cyber security governance and risk management. Knowledge ...

identifying security issues in existing system designs, including recommending sensible mitigations that balance cost, risk and usability. Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). Experience in one of the following specialisms: AI/ML/Data/Cloud/M365/Security Architecture ...

identifying security issues in existing system designs, including recommending sensible mitigations that balance cost, risk and usability. Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). Experience in one of the following specialisms: AI/ML/Data/Cloud/M365/Security Architecture ...

identifying security issues in existing system designs, including recommending sensible mitigations that balance cost, risk and usability. Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). Experience in one of the following specialisms: AI/ML/Data/Cloud/M365/Security Architecture ...

Strong experience in cyber assurance, audit, risk management, or control testing within a regulated environment In-depth understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Domain-specific knowledge in at least one of: OT, technical architecture, or supply chain security Strong analytical, reporting ...

cyber risk management, ideally within a regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk Manager). Desirable Experience ...

Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting clients through to certification in line with current NCSC and IASME scheme requirements. * Deliver wider technical security assessments, including vulnerability assessments, cloud security reviews, and build and configuration reviews against CIS Benchmarks and vendor ...

environments Building improvement roadmaps and security programmes to move clients from low maturity to a secure, resilient state Applying standards such as IEC 62443, NCSC CAF, NIST SP 800-82 and HSE OG86 to real industrial environments Working with the sales team on follow-on opportunities and proposals Getting involved … writing and close attention to detail Nice to have IEC 62443 experience or certifications (fully funded training is provided if not) CISSP, CySA+ or NCSC Chartered status The package £70,000 to £90,000 depending on experience 5% of salary towards training and certifications each year Salary reviews every ...