1 to 25 of 26 Permanent NIST Jobs in the Thames Valley

Implementor/Auditor, CEH or equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience ...

and hybrid infrastructure security, with strong knowledge of networking, operating systems and attacker techniques. Practical understanding of MITRE ATT&CK, Cyber Kill Chain, NIST and SANS incident response frameworks. Experience working within regulated and audited environments, including ISO 27001 and Cyber Essentials. Excellent communication, stakeholder management and documentation skills, with ...

systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth understanding ...

Risk Management (Security Scorecard). SIEM tools (Microsoft Sentinel, Splunk, ELK, Siemplify). Vulnerability Management (Qualys, Nessus, Nexpose). Cyber Security certifications (e.g., CompTIA, NIST, ISO27000, SOC2, GDPR). What do we offer Hybrid working. 25 days annual leave plus a half day for a “Duvet morning” and another ...

high-quality outcomes within agreed timescales. Desirable Experience and Qualifications Experience in a regulated environment, utilities or critical national infrastructure. Familiarity with COBIT, COSO, NIST CSF or CIS Controls. Exposure to cybersecurity domains such as vulnerability management and identity management. Experience with reporting and analytics tools such as Power ...

Desirable MLOps or LLMOps experience (SageMaker, Kubeflow, ZenML). Prometheus or other observability tooling. AWS Karpenter and Compute Optimizer experience. Knowledge of ISO 27001, NIST or OWASP frameworks. Experience working within Defence or other secure environments. If you're an SC-cleared DevOps Engineer looking to take ownership of cloud ...

Management and Data Protection. Understanding of recognised cyber frameworks and standards such as NIS Regulations, CAF (Cyber Assessment Framework), CIS Controls, ISO 27001 and NIST Cybersecurity Framework. Experience managing cyber transformation initiatives involving multiple technology and business stakeholders. Ability to oversee programmes with significant regulatory, compliance and operational resilience requirements. ...

with auditors, suppliers and customers to demonstrate risk managed and controls operating effectively. The role requires building security assurance across ISO 27001, PCI-DSS, NIST/CIS, with vendor risk management and cloud security in Microsoft 365, Azure, AWS or Google Cloud. #J-18808-Ljbffr ...

Experience with Video content and Simulation creation tools like Adobe Premiere, Screenflow, Camtasia, Captivate. Understanding of compliance standards and frameworks such as PCI, CIS, NIST, etc. Knowledge of any one of the Public Cloud Platforms such as AWS, Microsoft Azure, and Google Cloud Platform. Experienced in creating/modifying custom ...

producing comprehensive, court‐admissible deliverables for clients, legal counsel, and regulatory bodies. Conducting Incident Response Capability Assessments (IRCA), developing IR plans (IRPD) based on NIST and SANS frameworks, and facilitating breach simulation tabletop exercises for C‐suite and Board‐level leadership. Functioning as the principal DFIR liaison and customer success ...

technical certifications, ideally AZ‐500 and SC‐300. It would be great if you also have Knowledge of frameworks and standards such as CIS, NIST, ISO 27001, Cyber Essentials and GDPR. An SC‐100 or CompTIA Cybersecurity Analyst+ certification. Existing Security Check clearance, or the ability to obtain it. Strong ...

Professional (CISSP). Standards, frameworks, and regulatory experience including - EU NIS Directive, ISA/IEC 62443 Series/ISO 27000 Series, MITRE ATT&CK, NIST Cyber Security Framework (CSF), NCSC CAF, Office for Nuclear Regulation (ONR) Security Assessment Principles, Technical Assessment Guides, and supplementary guidance. Our Culture: Our values stand ...

cyber security, GRC or information assurance consultancy. Practical auditing, compliance review or security control assessment experience. Knowledge of ISO 27001 and/or NIST CSF Understanding of risk assessments, evidence gathering and reporting findings. Confident communicating with clients and working collaboratively. Government or defence sector experience is advantageous. Active ...

Security Clearance. Experience integrating security within engineering or technical environments. Excellent stakeholder management and communication skills. CISSP, CISM, or equivalent security qualification. Knowledge of: NIST 800-53 NIST 800-30 NIST 800-37 Desirable Degree or equivalent experience. NIST CSF knowledge. CRISC certification. CNSSI 1253 experience. This is a highly ...

independently. About You Previous experience in information security, risk and compliance consultancy. Practical auditing and assessment experience. Knowledge of ISO 27001 and/or NIST Cybersecurity Framework (CSF). Confident working directly with clients and managing your own workload. Government or defence sector experience is advantageous. Eligible to obtain ...

Security Service Provider (MSSP) Security Awareness Training/Human Risk Management (Know Be 4/KB4) Other relevant Cyber Security certifications (e.g. Comp TIA, NIST, ISO2700X, SOC2, GDPR) About Saepio Cyber security isn’t an add-on to IT. It’s a specialist discipline. That’s why modern UK organisations ...

Strong knowledge of SAML, OAuth 2.0, OpenID Connect and SCIM Knowledge of Active Directory, LDAP and hybrid identity Working knowledge of ISO 27001 and NIST CSF Strong troubleshooting and documentation skills Active SC clearance If this sounds suitable and you have active SC Clearance please apply with ...

. Oversee information security risk management, including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST/CIS Controls and customer compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide senior oversight of third … Proven hands‐on experience implementing and improving ISO 27001/ISMS and security controls. Strong understanding of security frameworks including ISO 27001/27002, NIST, CIS Controls, PCI-DSS and Cyber Essentials Plus . Experience leading security projects, audits, assessments and remediation programmes. Strong understanding of information security risk and ...

roadmaps for secure transformation across Defence and Government environments. You will advise on security architectures, run workshops, and manage stakeholders while applying frameworks like NIST, #J-18808-Ljbffr ...

security transformation initiatives Desirable experience: Experience with SailPoint, Saviynt, Omada, Okta, One Identity, or other IGA platforms Knowledge of security frameworks including ISO 27001, NIST, and COBIT Exposure to Active Directory, cloud identity solutions, and reporting platforms such as Power BI Experience onboarding applications and cloud services into ...

ServiceNow, alongside VMware-based Core deployments. • Excellent analytical, technical, communication and leadership skills, with an Engineering or equivalent technical degree/experience. • Awareness of NIST, OWASP, GCF and UK TSA requirements, with willingness to support on-call and travel to customer locations when required. Due to the large volume of ...

with clients, delivery teams, and senior stakeholders to embed security into solution design Standards & Compliance – Ensure adherence to industry standards such as ISO 27001, NIST, and government security policies Skills and Experience Experience working as a Security Architect or in a senior security role within complex environments Strong practical experience … experience conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. ...

Information Security Management System (ISMS) , including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST/CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks … purely theoretical knowledge. Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO 27001/27002, NIST, CIS Controls, PCI-DSS and Cyber Essentials Plus . Experience developing and maintaining security policies and procedures. Experience with third-party/vendor risk management ...

implementing security standards, processes, and governance within large corporate IT environments Working knowledge of OT security frameworks and standards, including ISA/IEC 62443, NIST SP 800-82, and the Purdue Enterprise Reference Architecture (PERA) OT Security Technical Lead Due to the volume of applications received for positions, it will ...

Advising on security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments Cyber Security Manager Essential Skills Strong background within cyber or information … security Experience working within Defence, Government or National Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing communication skills Understanding of network ...