1 to 25 of 36 Permanent NIST Jobs in Manchester

and resource allocation. Security & IT Governance & Compliance: Oversee delivery governance, risk control frameworks, and alignment with industry security standards (e.g., ISO 27001, SOC 2, NIST, GDPR, and FCA financial regulations). Cross-Functional Security Roadmap Integration: Build and maintain delivery roadmaps and executive reporting, managing dependencies across Security Engineering ...

including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems. Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent. GenAI security: experience assessing and mitigating risks ...

requirements. Key Responsibilities Information Security & Governance Develop, implement, and maintain information security policies, standards, and procedures Ensure alignment with recognised frameworks (e.g. ISO 27001, NIST, CIS) Support information security risk assessments and maintain the risk register Assist with internal and external audits, certifications, and compliance reviews Promote security awareness and ...

auditor, MBCI, or IAPP. Experience operating within an NCSC Assured Cyber Consultancy. Understanding of the cybersecurity regulatory landscape and assessment frameworks (e.g., NIS2, NIST CSF). Key delivery experience in cybersecurity strategy, transformation, and compliance. Sector experience in Government & Public Sector, Energy & Utilities, Retail and Consumer Products, Life Sciences, Telecoms ...

incident response, vulnerability management, assurance and third-party risk, with an understanding of modern cloud, SaaS, application, infrastructure, identity and network environments. Knowledge of NIST CSF and ISO/IEC 27001 is important, and professional standing such as CISSP, CISM or equivalent would be valuable. Most importantly, you’ll influence ...

ideally gained within a regulated, high-consequence or security-conscious environment. You'll have a strong understanding of recognised cyber security frameworks such as NIST CSF, ISO 27001 and CAF , alongside experience leading cross-functional cyber initiatives. Excellent communication skills are essential, particularly the ability to take complex technical ...

years + Experience in a cyber-security role Working knowledge of technical and cyber security standards Working knowledge of industry best practices (such as NIST Framework, OWASP top ten, SANS and NCSC Guidance) Technical knowledge of information systems, infrastructure, and networks Security monitoring and testing technologies such as vulnerability scanning ...

Strong understanding of core IT and networking principles Awareness of the evolving threat landscape Skills and experience Experience working within frameworks such as ISO27001, NIST or similar Significant experience in IT security Financial services or e-commerce experience preferred Strong problem-solving skills and attention to detail Ability to take ...

through a degree, apprenticeship or commercial role Security reporting, vulnerability management or governance AWS or cloud security fundamentals Security frameworks such as ISO 27001, NIST or CIS Customer‐facing communication or stakeholder engagement Security certifications such as Security+, CySA+ or similar (or you're working towards one) Don't worry ...

network segmentation. Experience implementing secure remote and local access and privileged access e.g. PAM, jump hosts, PAW. Working knowledge of NCSC CAF, EU NIS2, NIST CSF and CCNA/CCNPlevel networking competence. Willingness to travel for client delivery (domestic and international as required). Ideally, You’ll Also Have Experience ...

expectations. Experience with security tooling & solutions e.g. SIEM, SOAR, EDR, vulnerability scanning, threat intelligence platforms. Knowledge of relevantsecurity & AI governanceframeworks andregulations, such asMitreATT&CK, NIST, TSA. Any relevantstudy or certifications, either formal or self-learning. A 50-50 joint venture between Tesco and VMO2 that was established back ...

risks in simple, practical terms. Experience with AI governance, responsible AI, model risk management or AI assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience ...

and external assessments Support the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc. Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning the security risk management process to include ...

delivery and operational life cycle of a systemProvision of authoritative specialist security advice inRisk and threat-based mitigation to system designsControl frameworks such as NIST, ISO, CISProtective monitoring, Authentication and authorization best practices. Develop excellent working relationships with key stakeholders, peers and subordinates. Communicating effectively verbally and in writing, demonstrated ...

business systems. Strong understanding of hybrid/cloud convergence and securing legacy or brownfield enterprise landscapes. Knowledge of recognised enterprise security standards such as NIST CSF, ISO 27001, and zero-trust principles. Experience designing secure segmentation models (zero-trust, micro-segmentation), next-gen firewalls, and secure remote access solutions. Familiarity ...

with those who have demonstrated expertise and experience in one of the following domains:* **Security Assurance –** Delivering robust security frameworks such as ISO 27001, NIST, and Cyber Essentials to clients, ensuring their systems and processes meet industry standards and are resilient to threats and tailoring it to our client … applications through the assessment, design or implementation of effective and secure architectural patterns that align with industry standards (e.g. CIS L1/2, NIST, ISO27001, COBIT, etc.).## **Key expectations from this role include:**##As part of your role, you will also have the opportunity to contribute to the business ...

of technology risk, controls, cyber security, infrastructure, cloud services and enterprise applications. Proven understanding and application of recognised industry frameworks, including COBIT, ITIL and NIST CSF. About us. Here at National Highways, we manage and improve England\'s motorways and major A roads, helping our customers have safer, smoother and ...

of IT/OT convergence and securing legacy or brownfield industrial estates. Knowledge of recognised OT security standards such as IEC 62443 (ISA-99), NIST SP 800-82 , and application of the Purdue Model . Experience designing secure segmentation models (zones and conduits), industrial firewalls, and secure remote access solutions. ...

security threats,actorsand their techniques. Experience defining security strategy or leading transformation initiatives Knowledge of relevant security & AI governance frameworks andregulations, such asMitreATT&CK, NIST, TSA. Any relevantstudy or certifications, either formal or self-learning. A 50-50 joint venture between Tesco and VMO2 that was established back ...

assurance experience, in-house or in practice CISA qualified or working towards it Strong grounding in ITGCs, cyber security controls and cloud Familiarity with NIST, and ideally ISO 27001 or COBIT Someone who can challenge technical people constructively and land findings without friction Comfortable working autonomously and owning their ...

based approaches are applied, produce management summaries, and support governance reporting. The role requires 5+ years in information security and strong knowledge of ISO27001, NIST CSF, and PCI-DSS. #J-18808-Ljbffr ...

networks and integration across complex environments Experience of delivering automation and integrating systems at scale Good understanding of security and resilience frameworks such as NIST and Zero Trust, as well as future trends and emerging technologies Ability to work across technical and business teams, influencing and building strong relationships Clear ...

identity, authorisation, supply‐chain integrity, and the need for guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. ...

will partner with engineering and product teams to embed security-by-design and advance Zero Trust, IAM and compliance with PCI, ISO, CIS, NIST and GDPR. You will guide architecture decisions, evaluate emerging technologies, and drive incident readiness and resilience initiatives to protect a global mobility platform. #J-18808-Ljbffr ...

access, and privileged access management strategies. Implementing security controls aligned with security standards, industry best practices and regulatory requirements such as PCI, ISO, CIS, NIST, CSA, NIS, GDPR etc. Evaluating emerging technologies, identifying security risks early, and influencing strategic technology decisions across the organisation. Guiding incident readiness and resilience initiatives … modern DevSecOps practices. You’re comfortable translating technical complexity into clear decisions, and confident working with stakeholders at all levels. You understand frameworks like NIST, ISO 27001, CIS, OWASP etc., and ideally have experience designing or supporting PCI compliant environments. You’re hands‐on with tools such as SIEM ...