22 of 22 Permanent NIST Jobs in the South West

Support security cases, risk treatment plans and accreditation-style documentation. Review vulnerability assessment, penetration test and supplier assurance outputs. Support alignment with ISO 27001, NIST, CAF, GovAssure, Secure by Design and HMG/MOD assurance expectations. Requirements Strong background in Security Architecture, Cyber Security Consultancy, Security Assurance or Secure Design. ...

Desirable Degree in Information Security or significant programme security experience Certifications: CISSP, CISM, CRISC, CGRC (any) Knowledge of Government Standard 007, ISO 27001 and NIST Strong written/oral/presentation skills Supply chain security management experience/knowledge Experience supporting security awareness/education programmes Problem management and/ ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

accreditation and secure by design processes (ISN2023/09), and associated policies and practices across the lifecycle. \nIn the application of standards including NIST Special Publications (e.g. SP 800-30, 37 & 53), and/or RTCA-DO-326A/B, 355A & 356A.In the application of Defence security standards, such ...

strong understanding of security operations, threat detection and incident response You have a good knowledge of security standards and regulatory compliance requirements (ISO, NIST) You have experience with 3rd party risk management and supplier assurance You're familiar with penetration testing processes and remediation tracking You have a good understanding ...

Skills & Experience 2-3+ years' experience in cyber security, with a focus on vulnerability management, risk assessment, audit, and compliance. Strong understanding of NIST Cyber Security Framework and ISO 27001, with practical experience applying these standards. Knowledge of the MITRE ATT&CK framework. Experience working within Secure by Design ...

equivalent\n Knowledge/Experience: \n \n Substantive experience in product security \nHands-on experience with risk management frameworks and best practice like NIST SP800-37, ISO27001, and Secure by Design (ISN 2023/09)\n This is not an exhaustive list, and we are keen to hear from ...

will develop a deep understanding of relevant security requirements, apply design principles to security architectures and ensure alignment to relevant standards (eg. ISO27001, NIST, MoD standards). Requirements This programme requires an innovative security professional, passionate about improving security standards with experience of driving success in MoD (or government) environments. ...

command), from detection through containment and remediation. Working knowledge of MITRE ATT&CK and at least one recognised control framework (ISO 27001, CIS or NIST). Risk-based prioritisation of remediation using threat intelligence. Operated endpoint security and endpoint detection and response (EDR) tooling (e.g. CrowdStrike or equivalent ...

depth, proven experience in security operations, and the ability to translate complex risks into clear business impact. A background in frameworks such as ISO27001, NIST or similar, alongside relevant certifications, will be highly beneficial. Excellent benefits, flexible hybrid working, and the chance to make a genuine impact in a forward ...

Analytics, PRTG, SCCM, or similar) Centralised backup platforms (Azure Backup, Commvault, or similar) Experience supporting governance/compliance frameworks (ISO 27001, Cyber Essentials, NIST, or similar) Experience working in environments with multiple regions/tenants/business units Evidence of the following qualifications or equivalent on-the-job experience would ...

maintaining recognised Industry Security Qualifications e.g., CCP, CISSP \nYou'll have proven experience of assessing and managing risk in line with industry good practice (NIST, ISO 27001)YYou'll bring significant experience with using security baselines, mitigations and controlsYou'll be considerably familiar with a life cycle phased approach ...

Security Assurance Coordinators in support of security Accreditation.\n What you'll bring: \n \n Practical experience of ISO27001/27004/27005 and NIST Risk Management Framework (RMF). \nExperience of owning a security risk management system for highly regulated products based on recognised frameworks such as aerospace, nuclear ...

architectures and solution designs, such as Privilege Access Management, SSO, IDAM, Network security and encryption. Advise clients on regulatory compliance (e.g., ISO 27001, NIST, GDPR, PCI-DSS) Identify security vulnerabilities in system architectures and articulate these via risk terminology Due to the nature of the role Government Security Clearance ...

Security Governance, Risk and Compliance Consultant to support an internal consultancy initiative aimed at aligning contractual security requirements with recognised industry frameworks such as NIST, ISO 27001, and Secure by Design principles. This role plays a key part in ensuring that both client-facing engagements and internal services meet contractual … practical, actionable solutions. Your role Security Requirements Alignment: Translate contractual and regulatory security requirements into actionable controls aligned with industry frameworks (e.g., ISO 27001, NIST, CIS). Risk Assessment & Gap Analysis: Evaluate existing security controls, identify gaps or weaknesses, and assess risks associated with non-compliance or control failure. Mitigation ...

IIoT) and industrial data communications Experience with OT cyber security architecture, risk management and security monitoring Familiarity with security frameworks and standards such as: NIST Cyber Security Framework, ISO 27001/ISO 27005, IEC 62443/ISA-99, NCSC CAF/NIS Guidance, NERC CIP Experience working within ...

projects across the full systems lifecycle Working closely with delivery teams, engineers, and stakeholders Delivering security assurance and accreditation artefacts Assessing environments against CAF, NIST, Cyber Essentials, and SbD What we're looking for Proven experience in security architecture or technical cyber roles Strong background in networks, infrastructure, and secure ...

risk reporting rather than treating it as a point-in-time exercise. \n Lead risk assessments and threat-modelling sessions, selecting methodologies (ISO 27005, NIST RMF, STRIDE, MITRE ATT&CK) that are proportionate to system criticality, and ensuring findings feed into programme governance decisions rather than sitting in security documentation … Essentials Plus, and the HMG Security Policy Framework — and how they interact in practice. \n Experience leading risk assessments using structured methodologies (ISO 27005, NIST RMF, or FAIR) and embedding risk outputs into programme governance rather than treating them as standalone deliverables. \n Demonstrated ability to design security controls and ...

within a commercial environment. What You'll Do Contribute to security assessment and improvement programmes aligned to frameworks such as ISO/IEC 27001, NIST CSF, Cyber Essentials, CAF, CSA CCM and comparable standards Perform structured gap analyses that consider business risk, regulatory drivers, and client priorities Support the execution … of cyber and information risk assessments using recognised approaches (e.g. ISO 27005, NIST RMF, FAIR or similar methodologies) Develop, review, and maintain security documentation including policies, standards, procedures, and supporting guidance Assist with the design and implementation of administrative, technical, and physical security controls mapped to relevant frameworks (including ...

active role in shaping and maintaining security policies, standards, and operational procedures Help ensure ongoing alignment with key compliance requirements such as ISO 27001, NIST, and GDPR Deliver and support security awareness initiatives across the business, including phishing campaigns and user education Keep up to date with the evolving threat … attack methods, and core security principles Confident investigating security incidents and identifying opportunities for improvement Familiar with key compliance frameworks such as ISO 27001, NIST, and GDPR Able to communicate technical issues clearly to both technical and non-technical audiences Strong analytical thinking with a structured, problem-solving approach ...

accreditation at the highest classifications and within the UK defence domain Understand the current trends and developments in cyber security Ensure compliance with the NIST Risk Management Framework and NIST Cyber Security Framework or similar frameworks and be responsible for planning or participating in CHECK/penetration tests Essential Skills ...

assurance/accreditation at the highest classifications and within the UK defence domainUnderstand the current trends and developments in cyber securityEnsure compliance with the NIST Risk Management Framework and NIST Cyber Security Framework or similar frameworks and be responsible for planning or participating in CHECK/penetration tests\n Essential ...