20 of 20 Permanent NIST Jobs in Surrey

government, defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors.Familiarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards.Experience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations, or large-scale enterprise modernisation ...

defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors. Familiarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards. Experience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations, or large-scale enterprise ...

and resilience, advising executive leadership on risk-based decision makingEstablish and maintain corporate information security policies, standards, and governance aligned to frameworks such as NIST CSF, ISO 27001, SOX ITGCs, GDPR, Australia and UK data protection requirementsOversee enterprise-wide risk management and compliance:Conduct regular risk and information security assessments ...

Terraform, Ansible, Python or Bash. Familiarity with containers and orchestration platforms such as Docker and Kubernetes. Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001 or SOC 2. Ability to conduct threat modelling, infrastructure risk assessments and architecture reviews. Strong troubleshooting, documentation and cross-functional communication ...

Infrastructure-as-Code and automation tools including Terraform, Ansible, Python or Bash, together with knowledge of Docker, Kubernetes and recognised security frameworks such as NIST, CIS Benchmarks and ISO 27001, would be advantageous. Strong troubleshooting, documentation and communication skills are also required. Due to the secure nature of the environment ...

Terraform, Ansible, Python, or Bash.· Familiarity with containers and orchestration platforms such as Docker and Kubernetes.· Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, or SOC 2.· Ability to conduct threat modelling, infrastructure risk assessments, and architecture reviews.· Strong troubleshooting, documentation, and cross-functional communication ...

automation and Infrastructure-as-Code tools such as Terraform, Ansible, Python or Bash. Familiarity with Docker and Kubernetes. Understanding of security frameworks such as NIST, CIS Benchmarks and ISO 27001. Strong troubleshooting, documentation and communication skills. Due to a highly secure envrionment you must be eligable for SC clearance and ...

and conversion of risk into actionable delivery requirements aligned to organisational risk appetite. Experience with relevant AI security, risk and governance frameworks, such as NIST AI RMF, OWASP guidance for LLM applications, ISO/IEC 42001 or equivalent industry practices. Familiarity with privacy, data protection, regulatory and compliance considerations relevant ...

substantial training leading to nationally recognised certifications, such as chartered or principal status with the UK Cyber Security Council, or certifications such as CompTIA, NIST, PCiIAA, CISMP, CISSP, CREST, ISO27001 Lead Implementer/Auditor, SABSA, and TOGAF. A Mentor will be on hand to provide support and guidance throughout your ...

design and audit level. Knowledge & Skills Strong understanding of information and cybersecurity principles and cybersecurity risk management frameworks. Experience delivering and verifying ISO 27001, NIST SP 800-53, CE+, or DCC controls. Ability to influence internal stakeholders using data and analysis. Able to work independently, follow procedures and recognise appropriate ...

and audit level Knowledge & Skills Proven understanding of information and cybersecurity principles, cybersecurity risk management frameworks, and the delivery and verification of ISO 27001, NIST SP 800-53, CE+, or DCC controls Ability to influence internal stakeholders, using data and analysis to support reasoning Can work independently, in compliance with ...

architecture, design, and audit levelKnowledge & SkillsProven understanding of information and cybersecurity principles, cybersecurity risk management frameworks, and the delivery and verification of ISO 27001, NIST SP 800-53, CE+, or DCC controlsAbility to influence internal stakeholders, using data and analysis to support reasoningCan work independently, in compliance with procedures, and ...

and applications across the organization Apply security best practices throughout the deployment lifecycle, ensuring systems meet industry compliance standards such as GDPR, ISO, or NIST Collaborate with development and security teams to integrate security measures into DevOps processes (DevSecOps) Maintain and improve cloud infrastructure, ensuring high availability, scalability, and security ...

and privileged access SIEM, EDR and vulnerability management TCP/IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and/or ISO 27001 Security incident investigation and remediation You don’t need to tick every box. What matters is a strong ...

and privileged access SIEM, EDR and vulnerability management TCP/IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and/or ISO 27001 Security incident investigation and remediation You don’t need to tick every box. What matters is a strong ...

and cloud infrastructure management* Expertise in identity and access management, vulnerability management, and compliance* Strong understanding of security best practices and industry standards (e.g., NIST, ISO, PCI DSS)* Hands-on experience with security tools and technologies (e.g., AWS Security Hub, GuardDuty, CloudTrail)* Ability to analyze security logs, identify threats, and ...

and experiences A passion for and understanding of cyber security trends and threats.Experience in use and application of security risk management frameworks such as NIST CSF and ISO 27001.Experience in a consulting environment.Effective business acumen and an understanding of the cyber security challenges faced by organisations and their supply chains.Ability ...

risk management. Proven experience developing and implementing governance frameworks and controls. Working knowledge of relevant standards and frameworks, including ISO 27001, ISO 42001 and NIST AI RMF. Strong understanding of security, privacy and third-party risk. Excellent stakeholder engagement and written communication skills. Ability to work independently, manage competing priorities ...

integrations within SIEM platforms (e.g., Splunk, Elastic, QRadar), use of Risk-based alerting Familiarity with cybersecurity frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, NIST CSF). Experience with cloud security platforms (e.g., Wiz) and integrating their outputs into detection pipelines. Background in AI/ML or data science applied ...

developing security artefacts such as Security Management Plans, Risk Assessments, and Security Architecture Documents. Strong technical understanding of information systems, cybersecurity frameworks (ISO 27001, NIST, CE+, DCC), and related controls. Ability to facilitate certification processes, including writing, coordinating, and prioritising remediation actions. Professional qualifications such as ChCSP, CISM, CISA, CISMP … residency of at least 5 years. Preferred but not essential: Experience within space or aerospace communication systems. Knowledge of cybersecurity standards such as NIST SP 800-53. Higher-level security vetting such as DV, supported by a 10-year unbroken UK residency. This role offers a unique chance ...