20 of 20 Permanent NIST Jobs in Scotland

technologies, Generative AI platforms, machine learning environments or AI governance and security controls. Solid understanding of cybersecurity principles, frameworks and best practices(e.g., NIST Cybersecurity Framework, ISO 27001, GDPR). Knowledge of AI security risks and controls, including model security, prompt injection, data privacy, AI supply chain risks and secure ...

Python or PowerShell for automation. Deep understanding of threat detection, incident response, and the cyber kill chain. Familiarity with frameworks including MITRE ATT&CK, NIST, and CIS. Strong communication, analytical, and presentation skills. Solid understanding of network traffic flows, vulnerability management, and penetration testing principles. Knowledge of ITIL processes (Incident ...

enterprise. Hands‐on experience with ISO/IEC 27001 (ISMS lifecycle, Annex A controls, risk assessment and treatment) and related security control frameworks (e.g., NIST CSF, ISO 27000, TISAX, etc.).Demonstrated experience with Integration Risk Management (project/solution risk assessments) and Third‐Party Risk Management (vendor due diligence, ongoing ...

stakeholder engagement and governance leadership skills Experience presenting risk and compliance information to senior stakeholders Desirable Knowledge of Industry certifications and frameworks, i.e. ISO27001, NIST, NCSC Experience within Defence, Government, Critical National Infrastructure, or regulated industries Experience with GRC platforms such as ServiceNow GRC, Archer, or equivalent You can bring ...

engage effectively with both technical and non-technical stakeholders and facilitate balanced risk discussions. Working knowledge of security frameworks and governance concepts, including NIST CSF, ISO 27000 series, FAIR risk analysis, and privacy-related requirements. Preferred Skills and Qualifications: Relevant industry certifications such as CISSP, SSCP, or GCIA are preferred. ...

including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems. Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent. GenAI security: experience assessing and mitigating risks ...

code to deliver secure, consistent and maintainable identity services Advising clients on IAM best practices, standards and regulatory requirements, including GDPR, ISO 27001, NIST Frameworks About You Strong engineering background with deep expertise across Active Directory, Entra ID and PKI/ADCS in large, complex environments Pragmatic, methodical problem‐solver ...

and application security Experience with Go and/or C# development Knowledge of HTTP, REST, TLS and TCP/IP Strong understanding of OWASP, NIST, ISO 27001 and CIS Excellent communication skills with the ability to work closely with developers and technical stakeholders Desirable Experience with: Vulnerability research/exploit ...

Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005, IEC62443 etc. Experience and knowledge of Industrial Control Systems is advantageous, but you will be provided with the opportunity to learn ...

skills with the ability to influence senior leadership. Nice-to-haves: Experience with governance platforms and workflow tooling. Familiarity with ISO/IEC 42001, NIST AI RMF, ISO 27001, GDPR, and related standards. Experience operating governance boards or assurance forums. Professional certifications in governance, risk, data management, privacy, audit ...

successful candidate will have: Strong understanding and experience of cyber security operations and security best practices, with knowledge of recognised frameworks such as NIST CSF, ISO 27001, CIS Controls or ITIL. Strong knowledge of network security, intrusion detection/prevention systems and SIEM tools. Experience with security technologies such ...

development and mentoring of junior team members. Confident understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005. Varied Experience of assessing risk and building or evolving risk management framework components such as measurement criteria. Good ...

internal and external assessmentsSupport the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc. Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning the security risk management process to include ...

record of delivering digital transformation and technology change programmes ** Strong understanding of information and cyber security, ideally including Cyber Essentials Plus, ISO 27001 or NIST ** Strong Microsoft technology experience across Azure, Microsoft 365 and wider IT infrastructure ** Experience overseeing servers, networks, end-user technology, communications, backup/recovery and ...

vulnerabilities and recommending improvementsDesign and implement robust cybersecurity solutions tailored to ICS environmentsDevelop ICS security control frameworks incorporating industry best practices and international standards (NIST, ISO 27001, IEC 62443)Create key deliverables including threat and risk assessments, security policies, procedures, assurance management plans, and compliance evidenceTeam Development & GrowthMentor Accenture team ...

data security, including data classification, DLP, encryption, and data lifecycle protection. Strong understanding of relevant standards and frameworks (e.g. ISO/IEC 27001, NIST CSF, CIS Controls).Proven experience owning or leading a global or enterprise‐scale security service or capability. Ability to operate at both strategic and operational levels ...

patternsHybrid classical/PQC key exchangeCryptographic agility frameworksSecure key management and HSM integrationDevelop defensible design patterns, for high-assurance systems, ensuring alignment with NCSC, NIST, ETSI and sector specific standards. Provide technical leadership to engineering teams, guiding implementation, testing, and assurance. Engage with senior stakeholders, translating complex trust and crypto ...

across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance activities. - Facilitate governance forums, stakeholder workshops and senior executive briefings to embed decision rights and reporting ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

mitigationsTechnical DeliveryDeploy security controls tailored to operational technology environments, balancing security with operational continuitySupport the implementation of ICS security frameworks based on IEC 62443, NIST CSF, and other OT-specific standardsDevelop network segmentation strategies for OT/IT convergence scenariosConduct security testing in industrial environments while maintaining operational safetyDocumentation & ComplianceCreate …/ICS security exposureUnderstanding of Industrial Control Systems (SCADA, DCS, PLC) and their unique security challengesKnowledge of OT security frameworks and standards (IEC 62443, NIST CSF, ISA/IEC 62443)Familiarity with OT-specific regulations (NIS, NIS2, CAF, CRA)Understanding of the OT threat landscape and attack vectors specific ...