17 of 17 Permanent NCSC Jobs in Scotland

clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks. Financial services security: experience designing controls for regulated ...

Microsoft Entra ID/Active Directory. Strong understanding of security and compliance principles, technologies and frameworks, including Zero Trust, Microsoft Defender/Sentinel, NCSC, NIST and ISO 27001. Experience engaging with senior customer stakeholders and acting as a trusted technical advisor. Strong understanding of ITIL‐aligned service management and managed ...

Working knowledge of Jira, Confluence, and IT Service Management platforms. Good understanding of hybrid environments incorporating on-premise and cloud-hosted services. Familiarity with NCSC security guidance, Secure by Design principles, Zero Trust architectures, and UK Government security frameworks. Desirable Experience supporting products from vendors such as Everfox (Deep Secure ...

security technologies including Identity & Access Management, remote access solutions, SIEM, software‐defined networking or data integration platforms. Awareness of industry standards including IEC 62443, NCSC Cyber Assessment Framework (CAF), NIS/NIS2 and related frameworks. Experience with architecture modelling tools such as Bizzdesign or similar. TOGAF or equivalent architecture methodology. ...

within regulated industries such as energy, public sector or financial services. Knowledge of security frameworks and recognised best practice, including Zero Trust, CIS and NCSC guidance. Experience with scripting and automation using technologies such as PowerShell, Microsoft Graph or Azure Runbooks. Experience with complementary security, identity governance, backup or resilience ...

integration and extension artefacts. Experience with Oracle Analytics Cloud, Fusion Data Intelligence or reporting-aligned integration outputs. Knowledge of UK Government security frameworks, NCSC CAF, ISO 27001 or Cyber Essentials Plus. Ability to mentor junior developers and establish delivery standards across distributed teams. Additional InformationWhy Version 1Be part ...

Experience conducting security reviews or assessments of projects and change against defined policies and standards Working knowledge of at least one recognised security framework: NCSC Cyber Assessment Framework, ISO/IEC 27001, or NIST CSF Experience producing governance reporting Strong communication and stakeholder management skills Ability to work collaboratively across ...

Domain experience within the utilities or wider critical national infrastructure sector Familiarity with OT security standards and frameworks (eg IEC 62443, NIST Cybersecurity Framework, NCSC CAF) Experience operating within a regulated environment with formal incident and change management processes #J-18808-Ljbffr ...

such as Firewalls, VPN Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005, IEC62443 etc. Experience and knowledge of Industrial Control Systems is advantageous, but you will be provided with ...

design patternsHybrid classical/PQC key exchangeCryptographic agility frameworksSecure key management and HSM integrationDevelop defensible design patterns, for high-assurance systems, ensuring alignment with NCSC, NIST, ETSI and sector specific standards. Provide technical leadership to engineering teams, guiding implementation, testing, and assurance. Engage with senior stakeholders, translating complex trust ...

communication skills are essential, along with the ability to translate complex topics into clear, engaging and practical messages. Knowledge of the NIS Regulations, the NCSC Cyber Assessment Framework (CAF) and resilience best practice would be highly beneficial. Experience within Energy, Utilities or other Critical National Infrastructure sectors is also desirable. ...

Experience producing technical infrastructure and test documentation. Experience within OT, industrial, energy, utilities or CNI environments would be highly desirable. Knowledge of IEC 62443, NCSC CAF or OT cyber security principles would be advantageous. At Sword, our core values and culture are based on caring about our people, investing ...

delivering penetration testing, Cyber Essentials certification, consultancy, training and managed cyber security services to organisations across both the public and private sectors. As an NCSC CHECK provider and CREST member company , we're continuing to grow our penetration testing team and are looking for a talented Security Consultant to join … consultancy where technical excellence, innovation and professional development go hand in hand. When you join us you'll benefit from: Working for an NCSC CHECK provider and CREST member A varied mix of commercial, defence and public sector projects Funded training and industry certifications Clear progression towards CHECK Team Member ...

security requirements, architectures and approaches for complex OT systems and programmes. Support security reviews, risk assessments and assurance activities using relevant frameworks such as NCSC CAF, IEC 62443, ISO 27001 and NIST CSF. Support accreditation, regulatory and compliance activities where required. Produce clear, client-ready deliverables, including assessments, reports, roadmaps … safety, resilience and availability considerations. Practical knowledge of cyber risk and threat assessment approaches. Familiarity with relevant standards and frameworks, such as IEC 62443, NCSC CAF, ISO 27001, NIST CSF and the NIS Regulations. Awareness of common OT and IT security technologies, networks, architectures and protocols. The ability to work ...

want a Project Manager who's genuinely comfortable in this world and can hold their own in a conversation about cyber risk or the NCSC's Cyber Assessment Framework and enjoys bringing structure to operational and security teams who aren't used to formal project discipline. What … regulator-facing, audience. Specialist Experience We'd Love to See Direct exposure to the NIS Regulations, Operators of Essential Services (OES) obligations, or the NCSC's Cyber Assessment Framework (CAF). Background delivering cybersecurity, information security or operational resilience programmes. Experience in the energy or utilities sector. Knowledge of physical ...

back‐up and recovery arrangements, network segregation, monitoring, and incident response readiness Contribute to assurance activities aligned to the NIS Regulations 2018 and the NCSC Cyber Assessment Framework Contractors, OEMs, and Change Management Manage specialist SCADA, OT, telecoms, and automation contractors and OEM work scopes Review and challenge technical deliverables … legal and governance baseline should include; Health and Safety at Work Act 1974 Electricity at Work Regulation 1989 Network and Information Systems Regulations 2018 NCSC Cyber Assessment Framework Cyber Security and Resilience (Network and Information Systems) Bill Skills Strong safety and operational judgement Technical depth in SCADA, OT, and industrial ...

engineering product development lifecycleThough not essential to succeed in the role, the following may also be useful: A working practical knowledge of NCSC CAPS Evaluation processes and practices with awareness of generic Secure by Design Principles as presented by NCSC, UK MOD and NISTPractical experience of following DevSecOps lifecycles ...