12 of 12 Permanent NIST Jobs in the Midlands

Knowledge Strong understanding of: Security legislation and regulatory requirements, including GDPR, PCI DSS and related compliance frameworks. Security frameworks and standards including ISO 27001, NIST Cyber Security Framework and CIS Controls v8. UK Government and NCSC security policies, guidance and best practices. Cloud security architecture, particularly AWS services such ...

and the wider estate are sufficiently tested for signs of vulnerability. Governance, Risk & Compliance (GRC) Ensure audit readiness, control effectiveness (key SOX/ITGC, NIST/ISO mappings), and remediation governance; lead policy lifecycle and attestations. Oversee the enterprise risk process (RCSA, KRIs), executive reporting, and board risk briefings. Improve ...

defence infrastructure projects, or government contractors . Knowledge of JSP 440, DEFCON 76, Secure by Design, Cyber Essentials Plus, ISO 27001, and NIST frameworks . Key Attributes We're looking for someone who demonstrates: Integrity, professionalism, and discretion. Strong risk awareness and sound judgement. Excellent analytical and problem-solving skills. ...

from a security standpoint. - Expertise in Continuous Security, Continuous Integration and Continuous Delivery techniques - Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc. - Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and ...

and vulnerability assessment, security governance and risk acceptance is important. Experience with frameworks such as ISO 27001, ISO 27005, the NCSC Cyber Assessment Framework, NIST or MOD security standards would be beneficial. Experience within defence, government, critical infrastructure or another high-assurance environment would be particularly relevant. Experience with cloud ...

Infrastructure-as-Code (e.g., Terraform, CloudFormation, ARM) and scripting (e.g., PowerShell, Python, Bash). Familiarity with cloud security best practices and compliance frameworks (e.g., NIST 800-53, JSP 440, ISO 27001). Strong communication, documentation, and mentoring skills. Desired Active SC/DV status Professional cloud certifications (e.g., AWS Solutions ...

Splunk, Log Rhythm, Qualys Implementing security technology controls, secure config and implementation of security projects Information security risks management, controls and frameworks (NIST, CIS, PCI-DSS) IT Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM ...

design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR, and PCI-DSS Working closely with engineers, architects, and stakeholders to embed security by design Contributing to Agile delivery teams and supporting continuous improvement About ...

communication skills, with the ability to turn technical security concerns into clear, actionable decisions. Familiarity with recognised frameworks or certifications such as ISO 27001, NIST CSF or similar would be helpful. Experience in a product, platform or SaaS business. Experience in high-trust, regulated or mission-critical environments would ...

and non-technical colleagues. Experience working with external security providers, vulnerability management platforms, and SaaS security. Knowledge of frameworks such as ISO 27001 or NIST CSF, along with relevant professional certifications As a Cyber Security Engineer, you will be responsible for maintaining and enhancing security controls across identity, endpoint, cloud ...

coordinating third-party security providers such as managed SOC or security service partners. Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF or similar. Experience in an engineering or manufacturing business delivering long-lived systems would be helpful. Experience in high-trust, regulated or mission-critical ...

Governance, AI Risk Management, and emerging AI-related regulatory requirements. Experience developing control libraries, taxonomies, framework mappings, and enterprise control standards. Robust knowledge of: NIST Cybersecurity Framework (CSF) NIST 800-53 ISO 27002 CIS Controls COBIT Consulting, risk advisory, internal audit, or Big Four experience robustly preferred. Professional certifications such ...