1 to 25 of 41 Permanent NIST Jobs in the South East

policies, and best practices Oversee day-to-day security operations (SIEM, EDR, incident response, vulnerability management) Ensure compliance with frameworks such as ISO 27001, NIST, CIS Controls and GDPR Manage risk assessments, remediation planning, and continuous improvement initiatives Secure cloud and hybrid environments ( Azure/AWS ) Act as the escalation ...

drive cyber security governance, risk management, and compliance activities across the organisation. Maintain and enhance security controls aligned to recognised frameworks including ISO 27001, NIST Cybersecurity Framework, CIS Controls, and other relevant standards. Manage security incidents, major cyber events, and crisis response activities. Build strong relationships with internal stakeholders, ensuring ...

and tenant migration projects. Ensure identity security controls align with applicable regulatory, compliance, and contractual requirements, including Cyber Essentials Plus, ISO 27001, NCSC guidance, NIST frameworks, and other government or industry security standards. Develop automation, reporting, and operational improvements using PowerShell, Microsoft Graph, KQL, Logic Apps, and infrastructure‐as‐code ...

Qualifications & Certifications CISSP, CISM, GIAC, GCIH, GCIA, or equivalent security certifications. Experience within regulated or critical service environments. Knowledge of security frameworks such as NIST CSF, ISO 27001, CIS Controls, or MITRE ATT&CK. Experience managing third-party SOC or security service providers. ...

Cyber Essentials Plus, IASME Governance, GDPR and relevant information security standards or best practice frameworks Knowledge of additional frameworks such as CAF, NIS-2, NIST Cybersecurity Framework, CIS Controls, SOC 2, ISO 22301, ISO 27701 or PCI DSS. ExperienceusingGRC,auditmanagement,riskregisterorreporting tools. HoldSC/DVclearanceorwillingnesstoundertakesecurity vetting. MemberofCiSPoranotherrelevantprofessional community. Willingnesstostudyforandattainfurtherrelated qualifications. ...

Microsoft security technologies (Azure, Entra ID, Conditional Access, PIM, Defender, Microsoft 365 security stack) Strong understanding of security governance, risk, and compliance frameworks including NIST and FAIR Experience delivering security architecture within multi-year transformation programmes Strong stakeholder management and executive communication skills If you're looking to join ...

engage with senior stakeholders, suppliers and technical delivery teams. Desirable: Experience within regulated or security sensitive environments. Knowledge of Zero Trust principles. Familiarity with NIST, ISO 27001, CAF or similar security frameworks. Experience securing complex SaaS platforms and enterprise integrations. ...

Knowledge of secure software development, application security and OWASP principles Experience working with Identity & Access Management (IAM) Knowledge of security frameworks such as ISO27001, NIST or NIS2 Experience within regulated environments would be advantageous, with exposure to DORA, CMMC or similar frameworks beneficial What Next? If you're a Cyber ...

SentinelOne, Cloudflare, OneTrust, or Microsoft Purview • Background in eComm, marketplace, or retail technology • Scripting (Python, PowerShell), Terraform, or detection-as-code experience • Familiarity with NIST CSF, ISO 27001, OWASP LLM Top 10, or similar frameworks What's on Offer for the Security Engineer • Real ownership — a genuine mandate to drive ...

teams throughout project delivery. Essential Skills & Experience Security architecture experience within highly regulated or secure environments. Risk management expertise using recognised frameworks such as NIST 800-53. Experience designing security controls across networks, endpoints, identity, cryptography, and cloud platforms. Strong understanding of secure development practices and secure-by-design ...

and experience • Experience in Information Security, Cyber Security, Technology Risk or Security Governance • Experience in FCA-regulated financial services • Strong knowledge of ISO 27001, NIST and CIS Controls • Strong understanding of Microsoft Entra ID and AWS security • Experience conducting access reviews, risk assessments and supplier assurance • Excellent stakeholder management skills ...

senior IT GRC leadership role (desirable). SAP/ERP, cloud (RISE), AI governance and major transformation experience (desirable). Familiarity with ISO 27001, NIST CSF and CIS Controls (desirable). Hard Skills Cyber Risk Management ITGCs Control Testing Vulnerability Management Patch Management Security Assurance Risk Frameworks Incident Response Transformation ...

complex Managed Services environments Strong understanding of cloud infrastructure, networking and cybersecurity Experience delivering within Agile environments Knowledge of frameworks such as ISO 22301, NIST, ITIL or similar Excellent stakeholder management and communication skills Desirable certifications include TOGAF, CISSP, CBCP or equivalent. What's on Offer ...

security assessments and producing assurance reports. Ability to engage and influence stakeholders at all levels. Familiarity with security frameworks and standards (e.g., ISO 27001, NIST, CIS Controls). Excellent communication, planning, and organisational skills. Experience managing teams and developing talent. Ability to interpret complex technical and business information to assess ...

practice. This is a hands-on, client-facing role covering: OT/ICS security assessments SCADA and control system environment reviews IEC 62443, NIST SP 800-82 and NCSC CAF aligned work IT/OT convergence, segmentation and remote access reviews OT-aware vulnerability assessments using non-disruptive approaches Reporting ...

RMADS or SbD documentation Strong communication skills with the ability to work autonomously and adapt to changing project demands Nice to Have Experience with NIST 800 series, CESG Good Practice Guides, or NCSC risk assessment methodology Familiarity with Defence Security Standards (Def Stan 05-138, Def Stan 05-139, JSP440 ...

Exceptional: Provide additional assistance to the Supportability Function What you’ll need Key Must Have skills: Experience in Project Security planning and implementation e.g. NIST 800 series. Experience in delivering project documentation using SbD principles. Experience in Security/Information Assurance e.g. CESG Good Practice Guides. Experience in Security risk ...

runtime security. Experience within highly regulated or enterprise-scale environments. Exposure to cloud-native security platforms and zero-trust architectures. Understanding of SOC2, ISO27001, NIST or Cyber Essentials frameworks. What Success Looks Like Security becomes embedded within the engineering life cycle rather than acting as a gatekeeper. Automated controls reduce ...

variety of infrastructures, including cloud environments. We are looking for someone who has experience: performing risk assessments using MOD methodologies (such as NIST 800-53), supporting development in a secure by design methodology, and working at a technical level with teams. You will need knowledge of JSP 604/ ...

risk registers, ensuring clear visibility, prioritisation, and mitigation progress. Ensure alignment with key standards and regulatory frameworks including: NCSC guidance and CAF ISO 27001 NIST CSF Cyber Essentials Plus Secure by Design principles Work with procurement to ensure cyber requirements are appropriately flowed down to suppliers, partners, and third-party … SIEM platforms and log analytics Firewalls, boundary protection, and secure networking Endpoint security and system hardening Hands-on implementation experience of frameworks such as: NIST CSF ISO 27001 CIS Controls Cyber Essentials (Plus) Secure by Design/Security by Design Proven ability to balance strategic thinking with tactical execution. Experience ...

business systems. Strong understanding of hybrid/cloud convergence and securing legacy or brownfield enterprise landscapes. Knowledge of recognised enterprise security standards such as NIST CSF, ISO 27001, and zero-trust principles. Experience designing secure segmentation models (zero-trust, micro-segmentation), next-gen firewalls, and secure remote access solutions. Familiarity ...

equivalent) Experience with automation scripting and integrating security tooling via API or workflow platforms Familiarity with compliance frameworks: ISO 27001, Cyber Essentials Plus, NIST, or DORA Background in mid-market UK organisations or regulated sectors (Legal, Finance, Public Sector) Security Practice Lead - £85,000 to £100,000 – South East (Multi ...

and cultures • Background of defining security standards and processes in large corporate IT environments • Working knowledge of Cyber Security frameworks/methodologies (such as NIST, ISO 27001, MITRE ATT&CK, Lockheed Martin Kill Chain etc) Network Security Architect Due to the volume of applications received for positions, it will ...

Sector as part of a managed service. Have an excellent understanding of risk management and assessment principles and frameworks, such as ISO27005 and the NIST Cyber Security Framework. Work with multi-disciplinary teams, helping to ensure that products are delivered in a secure manner that is aligned with the wider ...

recognised security frameworks. Ability to interpret security requirements and demonstrate how technical controls satisfy them. Experience supporting assurance, governance and accreditation activities. Familiarity with: NIST 800-53 NCSC guidance MOD security policies JSP 440 principles Defence assurance processes Network Security TCP/IP, routing and switching VLANs and segmentation Firewalls ...