1 to 25 of 50 Permanent NIST 800 Jobs in London

reporting for leadership and the board Own end-to-end audit readiness for SOC 2 Type II, ISO 27001, Cyber Essentials Plus, and NIST 800-53 Embed DevSecOps and secure SDLC practices into CI/CD pipelines Oversee penetration testing, red teaming, and threat modeling across … role Experience with Zero-Trust security roadmaps, policies, and risk assessments Experience with SOC 2 Type II, ISO 27001, Cyber Essentials Plus, and NIST 800-53 Experience embedding DevSecOps and secure SDLC practices into CI/CD pipelines Experience overseeing penetration testing, red teaming, and threat ...

primary purpose. Building and maintaining a central inventory of security capabilities and supporting technologies. Mapping security technologies, capabilities and controls against frameworks including NIST CSF, NIST 800-53, CIS Critical Security Controls and CRI Profile . Establishing a baseline security capability model. Benchmarking current … Data Protection Cloud Security Security Monitoring & Logging You should also have practical experience working with one or more recognised security frameworks, ideally including: NIST Cybersecurity Framework (CSF) NIST 800-53 CIS Critical Security Controls CRI Profile Crucially, you'll have experience mapping technologies, controls ...

effectiveness of technical, procedural, and physical security controls against documented security requirements and standards. Assess security controls against recognised frameworks including ISO 27001 , NIST CSF , NIST 800-53 , and CIS Controls . Review security documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs … Experience Proven experience testing and assessing the effectiveness of security controls within complex enterprise environments. Strong knowledge of security frameworks including: ISO 27001 NIST Cyber Security Framework (CSF) NIST 800-53 CIS Controls Experience reviewing and testing: Network security controls Firewall configurations and rule ...

security governance. Works well in ambiguous situations and can bring structure to a client problem that has none. Familiar with the major frameworks (NIST CSF, ISO 27001, SABSA, MITRE ATT&CK, NIS2) and able to apply them selectively rather than wholesale. Cloud platform experience across at least … risk assessment; enterprise security programme design; and secure SDLC. Working knowledge of at least two cybersecurity frameworks: NIST CSF, NIST SP 800-53, ISO/IEC 27000 series, C2M2, or Cloud Security Alliance CCM. Familiarity with AI platform security, cloud and data security risks ...

colleagues. Nice to have CISSP or CISM. 62443 cyber security certificates. Experience with the Cyber Assessment Framework, NIST CSF, NIST SP 800-82, IEC ISA 99/62443 and CIS Controls. Strong understanding of IT and OT security risks. Knowledge of the threat landscape. ...

other high‐availability industrial environments Knowledge of OT cybersecurity practices and frameworks, including IEC 62443, NIST Cybersecurity Framework, NIST SP 800‐82, or equivalent industry guidance Relevant certifications in industrial automation, networking, Windows or cloud infrastructure, virtualization, cybersecurity, or project/program management Experience ...

energy, or other high-availability industrial environmentsKnowledge of OT cybersecurity practices and frameworks, including IEC 62443, NIST Cybersecurity Framework, NIST SP 800-82, or equivalent industry guidanceRelevant certifications in industrial automation, networking, Windows or cloud infrastructure, virtualization, cybersecurity, or project/program managementExperience with ...

security and zero-trust platforms (e.g., Zscaler ZIA, ZPA, ZDX)Creating enterprise-wide security blueprints and reference architectures aligned with Zero Trust principles (NIST 800-207, CISA).Designing scalable identity-centric security controls using SSO, MFA, device posture, and least-privilege access models.Collaborating with networking teams … expertise with:Zscaler ZIA, ZPA, ZDX or similarZscaler Client ConnectorApp Connectors, Cloud Firewall, Cloud Sandbox, DLP, CASBDeep understanding of:Zero Trust frameworks (NIST 800-207, SASE, SSE)Identity and access management (Azure AD, Okta, Ping)Modern network design (SD-WAN, DNS security, routing fundamentals)Endpoint security ...

role will provide Cyber Security Technology and Integration Assessment for QBE's IT Change Projects utilising a Secure Design Framework based on the NIST framework. The role will require the ability to work with Architects and Solution Design SME's across a range of technologies to identify Cyber … Your new role Lead security assurance, assessments, advisory for IT and Business projects (Cloud and On-prem) within EO and globally against the NIST 800-53 cyber security standard and compliance framework Partner with the security architecture and other relevant teams to define security patterns ...

including Zscaler, while working with cross-functional security, networking and infrastructure teams. Key Responsibilities Design and implement enterprise Zero Trust architectures aligned to NIST 800-207 and CISA principles. Develop secure access models using Zscaler ZIA, ZPA, ZDX and Client Connector . Design identity-centric controls … Connector or similar Zero Trust technologies. Experience with App Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASB . Strong understanding of Zero Trust, NIST 800-207, SASE and SSE . Knowledge of IAM, Entra ID/Azure AD, Okta or Ping . Understanding ...

cryptocurrencies and blockchain technology, or curiosity and willingness to learn Experience operating in a security standards-compliant environment such as ISO 27001, NIST 800-171, or SOC 2 Legally authorized to work for any employer in the United Kingdom without restrictions Core Competencies Demonstrates expertise … Hard Skills AWS Kubernetes Terraform Helm Ansible Jenkins Docker Python Go PostgreSQL Soft Skills Cross-Functional Communication Problem Solving Certifications & Qualifications ISO 27001 NIST 800-171 SOC 2 Industry Keywords Cloud Efficiency Incident Response Self-Service Workflows Blockchain Technology Tools & Technologies Kafka GitHub Actions Datadog Prometheus ...

comparison point. Familiarity with Agile/Scrum ceremonies and tools (Jira, Azure DevOps). Exposure to Zero Trust principles and NIST SP 800-53 AC/IA control families. What we offer: Enjoy a benefits package designed to help you thrive, both professionally and personally. ...

/or Okta. Experience designing enterprise logging and security monitoring architectures. Familiarity with security frameworks such as SABSA, TOGAF or NIST SP 800-53. If you're an experienced Security Architect available for your next contract and have a strong background in cyber transformation ...

using logic to win support and change views.What experience you'll bring:Awareness and understanding of industry security frameworks and guidance such as NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelinesGood knowledge of networking (switching, routing, firewalls)Awareness or limited experience ...

controls are maintained To thrive in this role, you need to have Awareness and understanding of industry security frameworks and guidance such as NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelines Good knowledge of networking (switching, routing, firewalls) Awareness or limited ...

security controls are maintainedTo thrive in this role, you need to have: Awareness and understanding of industry security frameworks and guidance such as NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelines Good knowledge of networking (switching, routing, firewalls) Awareness or limited ...

controls are maintained To thrive in this role, you need to have Awareness and understanding of industry security frameworks and guidance such as NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelines Good knowledge of networking (switching, routing, firewalls) Awareness or limited ...

delivering security solutions for large-scale infrastructure, transformation or integration programmes Practical knowledge and understanding of industry security frameworks and guidance such as NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelines Good knowledge of networking (switching, routing, firewalls) In-depth knowledge ...

delivering security solutions for large-scale infrastructure, transformation or integration programmesPractical knowledge and understanding of industry security frameworks and guidance such as NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelinesExperience identifying sales opportunities and supporting Public Sector RFP/RFI/ ...

delivering security solutions for large-scale infrastructure, transformation or integration programmesPractical knowledge and understanding of industry security frameworks and guidance such as NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelinesIn-depth knowledge of modern security concepts, common attack vectors, malware, security ...

privileged access management. Experience with threat modelling methodologies such as STRIDE, PASTA, or equivalent. Knowledge of security frameworks and standards including: - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - CIS Controls - SABSA - TOGAFUnderstanding of security operations concepts, incident response, and detection capabilities. Knowledge ...

privileged access management. Experience with threat modelling methodologies such as STRIDE, PASTA, or equivalent. Knowledge of security frameworks and standards including: - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - CIS Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge ...

privileged access management. Experience with threat modelling methodologies such as STRIDE, PASTA, or equivalent. Knowledge of security frameworks and standards including: - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - CIS Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge ...

leadership skills. Industry certifications such as CISSP, CCSP/CCSK, TOGAF or SABSA. Desirable Experience: Cloud Security Reference Architectures and SaaS security models. NIST CSF and NIST 800-53 controls. Ethical hacking or offensive security qualifications. Expertise in domains such as IAM, Infrastructure Security ...

privileged access management. Experience with threat modelling methodologies such as STRIDE, PASTA, or equivalent. Knowledge of security frameworks and standards including: - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - CIS Controls - SABSA - TOGAF Competitive Salary Bonus Scheme Private Healthcare Insurance 25 Days Annual Leave ...