1 to 25 of 71 Permanent NIST Jobs in London

governance forums such as Audit, Risk, or Information Security Committees. Knowledge & Skills Deep knowledge of cyber security governance frameworks – ISO/IEC 27001:2022, NIST CSF 2.0, CIS Controls – and their practical application in complex enterprise environments. Familiarity with continuous controls monitoring/CAASM tooling (e.g. Axonius, Qualys) and ...

manage multiple priorities effectively. Desirable Experience within banking, financial services, or another regulated environment. Familiarity with industry standards and frameworks such as ISO 27001, NIST, COBIT, or CIS Controls. Exposure to vulnerability management, penetration testing, incident management, or third-party risk assessments. Relevant security certifications such as Security+ ...

client engagementCybersecurity capability (strong experience across some of these areas):Cybersecurity strategy and operating model designCyber risk management, governance and compliance (e.g. ISO 27001, NIST, NIS2, GDPR)Security architecture and secure‐by‐design principles in cloud and hybrid environmentsIdentity and access management, security operations or cyber controls engineeringCyber resilience, incident ...

leading consulting teams. Strong knowledge of governance, risk management and cyber security best practice. Experience delivering projects aligned to frameworks including ISO 27001, NIST CSF, CIS Controls and Cyber Essentials. Ability to conduct and oversee security maturity assessments, risk assessments and compliance programmes. Excellent client-facing communication skills with ...

technical cyber role working across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect ...

tests, scanning). Experience delivering security awareness and incident exercising programmes. Working knowledge of assurance frameworks and resilience expectations (e.g., ISO 27001, SOC 2, NIST CSF. Candidates should be strongly motivated by BII’s development mission and ideally demonstrate some commitment to development or social goals through previous executive ...

Architect or in a technical cyber role working across public sector/government agencies.Expertise in:Security legislation (GDPR, PCI DSS, ICO)Frameworks (ISO 27001, NIST CSF, CIS Controls v8)HMG/NCSC policies and guidanceCloud security (AWS, Azure)Microservice architecturesPKI, Cryptography, Privileged Access ManagementCertifications: SABSA, TOGAF, AWS/Azure Architect ...

Microsoft security technologies (Azure, Entra ID, Conditional Access, PIM, Defender, Microsoft 365 security stack) Strong understanding of security governance, risk, and compliance frameworks including NIST and FAIR Experience delivering security architecture within multi-year transformation programmes Strong stakeholder management and executive communication skills If you're looking to join ...

more of the following: Cyber Governance, Risk & Compliance (GRC) Delivering security consulting engagements Implementing or assessing controls against recognised frameworks including: ISO 27001 NIST NIS NCSC Cyber Assessment Framework (CAF) DORA TISAX IEC 62443 Conducting cyber risk assessments and governance reviews Developing security policies, standards and procedures Building business cases ...

and operationalised risk and control frameworks for the secure, responsible adoption of AI. Deep knowledge of security frameworks and security best practice (ISO 27001, NIST, OWASP, CIS). Strong command of security risk management, governance, and incident response. Cloud security expertise (Azure preferred), network security, and identity and access management ...

cybersecurity architecture or engineering role. Expertise in Zero Trust platforms, cloud security, app connectors, and integration technologies. Deep knowledge of Zero Trust frameworks (NIST 800-207, SASE, SSE), IAM, SD-WAN, endpoint security. Strong communication and business development skills; proven track record managing large teams and driving revenue. Exceptional communication ...

Target operating Model and Cyber Security StrategyGovernance, Regulatory & Compliance* Oversee cyber security policies, standards, and control frameworks aligned with ISO 27001, SOC, DORA, NIST, and other related standard and frameworks and financial services best practices* Ensure compliance with global regulatory requirements (e.g., GDPR, DORA, KSA, UAE, MASA, FCA, CSSF ...

fraud risk, third-party risk and control oversight, with experience implementing governance frameworks. Sound knowledge of regulatory and industry frameworks, including DORA, FCA requirements, NIST and ISO standards, with regulatory experience across the UK, Ireland or Germany. Experience supporting regulatory engagements, internal and external audits, assurance reviews and compliance activities ...

strong understanding of security operations, threat detection and incident response You have a good knowledge of security standards and regulatory compliance requirements (ISO, NIST) You have experience with 3rd party risk management and supplier assurance You're familiar with penetration testing processes and remediation tracking You have a good understanding ...

strong understanding of security operations, threat detection and incident response You have a good knowledge of security standards and regulatory compliance requirements (ISO, NIST) You have experience with 3rd party risk management and supplier assurance You're familiar with penetration testing processes and remediation tracking You have a good understanding ...

Microsoft security technologies (Azure, Entra ID, Conditional Access, PIM, Defender, Microsoft 365 security stack) Strong understanding of security governance, risk, and compliance frameworks including NIST and FAIR Experience delivering security architecture within multi-year transformation programmes Strong stakeholder management and executive communication skills If you're looking to join ...

with SIEM (e.g., Arctic Wolf), Fortinet firewalls, Nessus, and vulnerability remediation. Experience working with SOC teams and supplier security assessments. Familiarity with CAF, CE+, NIST, CIS Controls, ISO 27001. Understanding of healthcare data protection, ideally NHS/UK standards. Strong incident response, analytical, and problemsolving skills. Knowledge of AI/ ...

designs and deployments. Review and improve customer security policies and standards. Perform risk assessments, threat modelling, and compliance gap analysis. Advise on ISO 27001, NIST, PCI DSS, and GDPR. Threat and Vulnerability Management Interpret threat intelligence and guide remediation strategies. Support patching, OS hardening, and configuration management. Assess vendor advisories ...

ideally have: Experience developing or managing cyber security policies, standards, or governance frameworks. Strong knowledge of recognised cyber security frameworks such as ISO 27001, NIST, or the Cyber Assessment Framework (CAF). Experience supporting compliance, risk management, or information assurance programmes. Excellent stakeholder management and communication skills, with the ability ...

Suite. Travel: Hydbrid Location: London IT Security Cloud Consultant working in Al engineering and project teams, ensuring all deliverables align with security standards (e.g. NIST CSF 2.0) and protect information assets (Confidentiality, Integrity, Availability). Lead threat modelling, risk assessments, and secure coding initiatives (especially in Python and Azure environments ...

SentinelOne, Cloudflare, OneTrust, or Microsoft Purview • Background in eComm, marketplace, or retail technology • Scripting (Python, PowerShell), Terraform, or detection-as-code experience • Familiarity with NIST CSF, ISO 27001, OWASP LLM Top 10, or similar frameworks What's on Offer for the Security Engineer • Real ownership — a genuine mandate to drive ...

Extensive experience in cybersecurity architecture or engineering role.Expertise in Zero Trust platforms, cloud security, app connectors, and integration technologies.Deep knowledge of Zero Trust frameworks (NIST 800-207, SASE, SSE), IAM, SD-WAN, endpoint security.Strong communication and business development skills; proven track record managing large teams and driving revenue.Exceptional communication, client ...

leading a risk & control function in a financial services organisation.* Extensive experience working with Risk Management tools e.g Open Pages* Understanding of the COBIT, NIST 2 framework* Extensive experience leading internal audit and external audit bodies.* Proven track record of managing risk related issues for large departments, through the lifecycle ...

services, such as AWS Bedrock, Amazon Q, SageMaker, Google Vertex AI, Anthropic Claude, OpenAI APIs or open‐source model ecosystems Familiarity with ISO 42001, NIST AI RMF, EU AI Act readiness or other AI governance and risk management frameworks Relevant Microsoft certifications across Azure AI, Azure architecture, Power Platform, security ...

and experience • Experience in Information Security, Cyber Security, Technology Risk or Security Governance • Experience in FCA-regulated financial services • Strong knowledge of ISO 27001, NIST and CIS Controls • Strong understanding of Microsoft Entra ID and AWS security • Experience conducting access reviews, risk assessments and supplier assurance • Excellent stakeholder management skills ...