1 to 25 of 43 Permanent NIST Jobs in Scotland

access management, data protection, email security, cloud security posture, and system hardening. Frameworks and standards. Applying security frameworks, standards, and regulatory drivers such as NIST, ISO 27001, GDPR, and NIS2 through practical technical controls. Cyber Essentials Plus. Technical control implementation, evidence collection, remediation tracking, and preparation for assessment. Secure deployment. ...

generative AI platforms, machine learning environments or AI governance and security controls. ** A solid understanding of cybersecurity principles, frameworks and best practices, such as NIST, ISO 27001 and GDPR. ** Knowledge of AI-specific security risks, including prompt injection, data privacy, model security and AI supply chain vulnerabilities. ** Experience securing enterprise ...

generative AI platforms, machine learning environments or AI governance and security controls. A solid understanding of cybersecurity principles, frameworks and best practices, such as NIST, ISO 27001 and GDPR. Knowledge of AI-specific security risks, including prompt injection, data privacy, model security and AI supply chain vulnerabilities. Experience securing enterprise ...

Microsoft Entra ID/Active Directory. Strong understanding of security and compliance principles, technologies and frameworks, including Zero Trust, Microsoft Defender/Sentinel, NCSC, NIST and ISO 27001. Experience engaging with senior customer stakeholders and acting as a trusted technical advisor. Strong understanding of ITIL‐aligned service management and managed ...

services and cloud-native security monitoring. Experience working within Operational Technology (OT), Critical National Infrastructure, utilities or energy environments. Understanding of security frameworks including NIST, MITRE ATT&CK and Cyber Essentials. Experience supporting SIEM migration or transformation programmes. Current Security Check (SC) clearance or eligibility to obtain clearance. At Sword ...

security requirements with wider business and technology priorities. ** Experience or understanding of AI security and governance would be advantageous. ** Knowledge of security frameworks including NIST CSF and ISO 27000, with an understanding of risk methodologies such as FAIR. ** Strong communication skills, with the ability to explain technical security issues clearly ...

engagement. Knowledge or experience of recognised cyber security frameworks, standards and regulatory requirements would be beneficial, including: NCSC Cyber Assessment Framework (CAF) IEC 62443 NIST Cybersecurity Framework Network and Information Systems (NIS) Regulations ISO 27001 Experience working within critical national infrastructure, utilities, energy, manufacturing or other industrial environments would ...

reviews. Conducting OT and ICs risk assessments. Contributing to security architecture and secure-by-design reviews. Delivering assessments against frameworks such as IEC 62443, NIST CSF, NIST SP 800-82 and the NCSC CAF. Producing high-quality reports and client deliverables. Supporting workshops, interviews and stakeholder meetings. Working with colleagues … and conducting security risk assessments, including the identification of threats and vulnerabilities and the development of proportionate mitigation recommendations. Practical knowledge of ISO 27001, NIST, IEC 62443, UK GDPR and the NCSC Cyber Assessment Framework, together with experience delivering security audit and assurance activities. Nice to have ...

Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005, IEC62443 etc. Experience and knowledge of Industrial Control Systems is advantageous, but you will be provided with the opportunity to learn ...

of delivering cloud focused security solutions with a solid understanding of modern cyber threats and threat modelling techniques (preferred) Good understanding of security frameworks (NIST CSF, Mitre ATT & CK) (essential) At Sword, our core values and culture are based on caring about our people, investing in training and career development ...

influence future actions/processes. Strong coaching, teamworking, collaboration and partnering skills. Awareness of recognised technology governance and cybersecurity frameworks, including COBIT 2019, NIST CSF 2.0 and NCSC CAF would be beneficial but not essential. Experience of auditing AI implementation, multi-year technology change programmes, and use of data analytics ...

essential) Cyber Security KPI monitoring and delivery (preferred) Experience engaging 3rd party security specialists to provide additional assurance. (preferred) Good understanding of security frameworks (NIST CSF, Mitre ATT & CK) (preferred) At Sword, our core values and culture are based on caring about our people, investing in training and career development ...

Secure by Design principles and their application in product lifecycle development. Familiarity with security and information assurance frameworks (ISO27001/27004/27005 and NIST Risk Management Framework). The ability to keep abreast of current trends and events relating to security. Security Clearance This role is subject ...

Secure by Design principles and their application in product lifecycle development. Familiarity with security and information assurance frameworks (ISO27001/27004/27005 and NIST Risk Management Framework). The ability to keep abreast of current trends and events relating to security. Security Clearance This role is subject ...

demonstrated expertise and experience in one of the following domains:##* **Security Assurance** – Leading the delivery of key security frameworks such as ISO 27001, NIST, and Cyber Essentials to clients, ensuring their systems and processes meet industry standards and are resilient to threats. This includes overseeing tailored implementations, guiding teams … applications through the assessment, design or implementation of effective and secure architectural patterns that align with industry standards (e.g. CIS L1/2, NIST, ISO27001, COBIT, etc.).* **Generative AI** – Enabling the secure design and adoption of Gen AI for business, IT and/or security functions in alignment with ...

digital workplace, cyber security, managed services Strong Azure, M365 and Entra ID/AD knowledge Strong grounding in Zero Trust, Defender/Sentinel, NCSC, NIST, ISO 27001 ITIL v4 Foundation; senior MS certs (SC-100, MS-102, AZ-305) desirable Desirable: team/capability scaling experience, IaC (PowerShell/Bicep ...

attack surface; asset and attack surface visibility; security operations, telemetry and retention; and the compliance drivers behind SMB security spend, from CIS and NIST CSF to HIPAA, PCI DSS, CMMC and cyber insurance. A record of getting hands on with new technology quickly, and the confidence to say when something ...

incident remediation while supporting the broader security function. The role requires experience with security tools (SIEM, SOAR, EDR) and familiarity with security frameworks like NIST and ISO 27001. #J-18808-Ljbffr ...

MCSE, or equivalent knowledge and experience, would be advantageous. Knowledge of recognised OT cyber security frameworks and standards, such as IEC 62443 and NIST, would be beneficial. An understanding of industrial site safety practices and the operational considerations associated with working in critical infrastructure environments. BOSIET certification would be desirable ...

partnerships and removing barriers to achieve them Monitoring licensed entities’ compliance with the BMA Cyber Codes and ongoing supervision of entities in accordance with NIST, ISO, COBIT or any other framework (or combinations of frameworks) chosen by the BMA Providing guidance on emerging industry and international best practices Identifying gaps ...

continuous improvement across security controls. Ideal candidates have broad experience in GRC, strong leadership, and deep knowledge of regulatory requirements such as ISO 27001, NIST CSF, GDPR, and SOC 2. #J-18808-Ljbffr ...

methodologies, leading comprehensive risk assessments and delivering security audit and assurance programmes. Practical experience applying recognised cyber security frameworks and standards, including IEC 62443, NIST Cybersecurity Framework, NIST SP 800-82, ISO/IEC 27001 and the NCSC Cyber Assessment Framework. Experience planning, managing and delivering consultancy engagements, including managing … and experience to support colleagues. Nice to have CISM or CISA IEC ISA 62443 expert cyber security certificate. Experience with the Cyber Assessment Framework, NIST CSF, NIST SP 800-82, IEC ISA 99/62443 and CIS Controls. Strong understanding of IT and OT security risks. Knowledge of the threat ...

business impact. Relevant professional qualification such as CISA, CISM or CRISC. Desirable: Experience in technology risk functions, knowledge of COBIT, ITIL, ISO 27001 or NIST frameworks, exposure to cyber security, resilience, cloud, data, AI and third-party technology assurance, and experience using data analytics or AI-enabled audit tools. Disability ...

activities, whilst promoting compliance with Government security guidance to internal stakeholders. What you bring: Knowledge of security frameworks and standards such as ISO 27001, NIST, OWASP, MITRE. Experience of performing risk assessments, providing recommendations for meeting the security requirements of systems and information systems so that they remain compliant with ...

Audits Working with Third Parties/Vendors to understand their Risk profile Knowledge of Information Security controls Knowledge of the likes of ISO27001 and NIST The role would be hybrid and based out of either their Bristol or Edinburgh offices 3 days per week. If you hold the likes of ...