1 to 25 of 81 Permanent NCSC Jobs in the UK

across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

Cloud Security Microsoft 365 Security DevSecOps Security Architecture Experience in application architecture, software engineering, or infrastructure architecture Knowledge of security standards and frameworks including NCSC, ISO 27001, SOC, NIST, PCI DSS, GDPR Experience with security testing tools and techniques Experience implementing Continuous Security, CI/CD, and DevSecOps practices Strong ...

/government agenc ies. Expertis e in:Security legislation (GDPR, PCI DSS, ICO)Frameworks (ISO 27001, NIST CSF, CIS Control s v8)HMG/NCSC policies and gui danceCloud security (AWS, A zure)Microservice architec turesPKI, Cryptography, Privileged Access Manag ement Certifica tions: SABSA, TOGAF, AWS/Azure Architect, CISSP ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling – Kill Chain ...

security qualification such as CISSP, CCSK or CCSP. It would be great if you had: Knowledge of security architecture frameworks and methodologies, including: NIST. NCSC guidance. SABSA. Understanding of Secure by Design principles. Experience across one or more security domains, such as: Identity & Access Management (IAM). Infrastructure. Security. Data ...

Manage and maintain entity-level cyber risk registers, ensuring clear visibility, prioritisation, and mitigation progress. Ensure alignment with key standards and regulatory frameworks including: NCSC guidance and CAF ISO 27001 NIST CSF Cyber Essentials Plus Secure by Design principles Work with procurement to ensure cyber requirements are appropriately flowed down ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

cloud orchestration and containerisation technologies, such as Docker and Kubernetes Working knowledge of DevOps, CI/CD and Infrastructure-as-Code Understanding of NCSC Cloud Security Principles and its practical implementations Aker Systems Attributes At Aker we work as a team, we are collaborative, hardworking, open, and delivery obsessed. There ...

Looking For: Proven experience within Cyber Security Governance, Risk & Compliance (GRC) environments. Strong knowledge of NIST CSF, NIST 800-53, ISO 27001, and NCSC CAF . Experience conducting risk assessments and security control reviews. Ability to interpret regulatory or contractual requirements and translate them into actionable security controls. Excellent stakeholder ...

security qualification such as CISSP, CCSK or CCSP. It would be great if you had: Knowledge of security architecture frameworks and methodologies, including: NIST. NCSC guidance. SABSA. Understanding of Secure by Design principles. Experience across one or more security domains, such as: Identity & Access Management (IAM). Infrastructure. Security. Data ...

emphasis on balancing security needs with useability and reducing user friction. Technical Mastery: Knowledge of security frameworks (e.g. ISO 27001, NIST, and/or NCSC guidance), security risk management, security architecture, and best practices for safeguarding sensitive assets. Regulatory Compliance: Familiarity with UK legislation, standards, and protocols. Incident Management: Demonstrable ...

Chartered Institute of Information Security (CIISec) — highly desirable. • Chartered or Principal status via the UK Cyber Security Council for Secure Systems Architecture. • NCSC Certified Cyber Professional (CCP) in Security Architecture. • IEng or CEng registered with a UK engineering body. • Chartership through BCS, The Chartered Institute for IT. • SABSA Chartered Security ...

following: Cyber Governance, Risk & Compliance (GRC) Delivering security consulting engagements Implementing or assessing controls against recognised frameworks including: ISO 27001 NIST NIS NCSC Cyber Assessment Framework (CAF) DORA TISAX IEC 62443 Conducting cyber risk assessments and governance reviews Developing security policies, standards and procedures Building business cases and regulatory compliance ...

doing so play a key role in nationally critical projects which make a real difference to people’s everyday lives. We are a National Cyber Security Centre Assured Cyber Security Consultancy. Locations: London, Guildford, Bristol, M4 corridor Roles and Responsibilities Working either individually or as part of a larger Actica ...

Chartered Institute of Information Security (CIISec) - highly desirable. · Chartered or Principal status via the UK Cyber Security Council for Secure Systems Architecture. · NCSC Certified Cyber Professional in Security Architecture. · IEng or CEng registered with UK Engineering body. · Chartership through the British Computer Society. · SABSA Chartered Security Architect Other Information Market ...

Chartered Institute of Information Security (CIISec) - highly desirable. Chartered or Principal status via the UK Cyber Security Council for Secure Systems Architecture. NCSC Certified Cyber Professional in Security Architecture. IEng or CEng registered with UK Engineering body. Chartership through the British Computer Society. SABSA Chartered Security Architect. Other Information Market ...

Legacy Windows technologies - Win32, WPF, MFC/ATL, COM, MSI packaging. Geospatial data formats - GeoJSON, MBTiles, GML. Familiarity with MOD Secure by Design and NCSC software security standards. Experience working in UK public sector or government digital services. Python geospatial tooling or data pipeline experience. Tech Stack: Backend: .NET Core ...

assess and manage cyber security risks proportionately, balancing risk appetite, security controls and operational needs. Strong knowledge of security policies, standards and frameworks, including NCSC guidance and defence-in-depth principles. Confident communicator who can explain complex security concepts clearly to technical teams, senior leaders, programme boards and external stakeholders. ...

tools, and frameworks. Develop overall technology standards and practices, setting governance standards across the portfolio. Understand security such as GDPR, ISO 27001, Cyber Essentials, NCSC framework. Working as a key member of the Bid Factory management, aiding with bids/tenders. Assess opportunities with B2B leads, starting from enquiries into ...

SCADA, and OT networks Practical experience performing risk assessments across IT/OT environments Familiarity with industry standards and frameworks such as: IEC 62443 NCSC CAF NIST CSF ISO 27001 Knowledge of industrial communication protocols and OT networking concepts Ability to balance security with safety and operational continuity Excellent communication ...

across technical, operational and executive audiences. Coaching, mentoring and developing cyber security professionals. Experience in one or more of the following would be advantageous: NCSC guidance, UK Cyber Security Council frameworks and CIISec professional standards. Defence, Government, Critical National Infrastructure or other highly regulated sectors. Security governance, risk and compliance ...

policy-based access control solutions. Practical experience with Open Policy Agent and policy-as-code solutions at scale. Practical experience HMG security assurance (e.g. NCSC Cyber Assessment Framework). Ability to produce high-quality architecture and security design documentation. Ability to translate complex security concepts for technical and non-technical ...

collaboratively within a team environment. It would be great if you had: • Exposure to security frameworks such as ISO 27001, Cyber Essentials or National Cyber Security Centre guidance. • Understanding of third-party risk management concepts. • Experience working with structured processes such as onboarding, compliance or risk assessments. • Awareness of data ...

multiple user-research led agile product teams. Experience of working with Government Digital Service standards, GOV.UK services (Notify, One Login, Pay) and National Cyber Security Centre guidelines and security standards. Experience of guiding and documenting cloud and API solution architectures including design solutions using AWS API Gateway and Lambdas. Proficiency ...