1 to 25 of 241 Permanent NCSC Jobs in the UK

infrastructure, and cloud environments. Conduct security design reviews and provide assurance across projects and programmes. Ensure alignment with standards such as ISO 27001, NIST, NCSC and Cyber Essentials Plus. Risk Management & Compliance Identify, assess, and manage cyber security risks across systems and suppliers. Support risk assessments, threat modelling, and vulnerability ...

across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

Must hold, or be eligible to obtain and maintain, UK Security Check (SC) Clearance . Strong knowledge of: Security architecture principles Threat modelling methodologies NCSC Cyber Assessment Framework (CAF) Secure-by-design principles NIS Regulations ISO 27001 NIST Frameworks Desirable CISSP, SABSA, TOGAF, CCSP or equivalent professional certification. Experience within ...

security.* **Compliance & Governance:** ensure Thales on-premises and cloud environments comply with government policies, such as Cyber Essentials, DefStan 05-138, UK GDPR, NCSC guidelines and other applicable contractual and regulatory frameworks.* **Evidence Continual Security Assurance:** Creation, Maintenance and Review of all IS/IT technical security documentation, policy ...

improvement. Working knowledge of AWS and Microsoft Azure architecture and operating models. Knowledge of Government Digital Service standards, the Technology Code of Practice and NCSC cloud security principles. Understanding of ITIL 4, SIAM principles, ISO/IEC 27001, ISO/IEC 20000-1 and OWASP practices. Strong stakeholder management ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

repeatable deployment patterns. Knowledge of relevant standards and frameworks such as: NIST Cybersecurity Framework/NIST 800‐53 ISO/IEC 27001 UK NCSC guidance and Cloud Security Principles Zero Trust Architecture (NIST SP 800‐207) Experience defining architectures independently of specific technologies and then mapping them onto implementations. Personal ...

product vision and roadmap for secure AWS-based platform products used within government programmes. Align product delivery with business objectives, government standards (e.g., NCSC Cloud Security Principles), and compliance frameworks. Drive backlog prioritisation, balancing feature delivery, security requirements, and operational excellence. Stakeholder Engagement Act as the product voice with government ...

platform security solutions. Apply Zero Trust, defence-in-depth and threat-informed design principles. Ensure security architectures align with NIST, ISO 27001, CIS, NCSC and client security requirements. Act as a security design authority, providing technical guidance and architectural decisions. Work closely with enterprise, infrastructure, network and application architects ...

e.g., JSP440, JSP453, Secure by Design), and industry frameworks (e.g., NIST Cyber Security Framework, ISO 27001). Professional certifications such as CISSP, CISM, or NCSC Certified Cyber Professional (CCP) [desirable]. Our Culture Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people ...

e.g., JSP440, JSP453, Secure by Design), and industry frameworks (e.g., NIST Cyber Security Framework, ISO 27001). Professional certifications such as CISSP, CISM, or NCSC Certified Cyber Professional (CCP) [desirable]. Our Culture Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people ...

e.g., JSP440, JSP453, Secure by Design), and industry frameworks (e.g., NIST Cyber Security Framework, ISO 27001). Professional certifications such as CISSP, CISM, or NCSC Certified Cyber Professional (CCP) desirable . Our Culture: Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people ...

also have a strong understanding of: Secure-by-Design | Zero Trust | IAM | Network Security | Encryption | Key Management | Secure Information Exchange Knowledge of NCSC guidance, ISO 27001, Cyber Essentials, MoD 05-138 or NIST would be advantageous. Relevant qualifications or certifications such as CISSP, SABSA, TOGAF, CCSP ...

mitigation strategies across programmes. Provide authoritative guidance on risk trade-offs and security posture. Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC). Ensure architectural traceability from requirements through to controls and implementation. Develop and lead the security architecture practice. Mentor, coach, and upskill security architects and consultants. ...

mitigation strategies across programmes* Provide authoritative guidance on risk trade-offs and security posture* Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC)* Ensure architectural traceability from requirements through to controls and implementationDevelop and lead the security architecture practice* Mentor, coach, and upskill security architects and consultants* Define ...

Microsoft Entra ID/Active Directory. Strong understanding of security and compliance principles, technologies and frameworks, including Zero Trust, Microsoft Defender/Sentinel, NCSC, NIST and ISO 27001. Experience engaging with senior customer stakeholders and acting as a trusted technical advisor. Strong understanding of ITIL‐aligned service management and managed ...

architectural experience in securing software, hardware and cloud environments (AWS) using best security practice and security frameworks aligned to NIST, ISO, CIS, CSA, PCI, NCSC etc. is essential. What's in it for you? Besides the opportunity to work for a global company that is customer and people-focused ...

Also Have Security-related qualifications such as CISSP, CISM, CISMP, ISO27001 lead implementer or auditor, MBCI, or IAPP. Experience operating within an NCSC Assured Cyber Consultancy. Understanding of the cybersecurity regulatory landscape and assessment frameworks (e.g., NIS2, NIST CSF). Key delivery experience in cybersecurity strategy, transformation, and compliance. Sector ...

Friday. WHAT WE’RE LOOKING FOR Experience designing secure solutions across cloud and on-premise environments. Strong knowledge of security frameworks such as NIST, NCSC CAF, CIS and IEC 62443. The ability to recommend security solutions that balance business needs with robust protection. Knowledge of OT/IoT security, ideally ...

Splunk) and EDR/XDR platforms (e.g., Microsoft Defender for Endpoint, CrowdStrike Falcon). Security Frameworks: Solid understanding of MITRE ATT&CK, NIST CSF, NCSC Caf v4.0 and ISO 27001. Communication: Ability to write concise incident reports and speak comfortably with both engineers and business leaders. Experience working in management ...

standards. Typical Qualifications/Experience Professional Experience: 7+ years’ experience in cybersecurity, secure systems architecture, and technical security leadership, including experience engaging MOD accreditors, NCSC guidelines, and cryptographic risk frameworks. Education & Foundational Benchmark: Cyber or IT NVQ Level 4 or equivalent higher education/degree in Information Security or Computer ...

data protection and national security standards. What you'll bring Experience in cybersecurity, secure systems architecture, and technical security leadership, including experience engaging accreditors, NCSC guidelines, and cryptographic risk frameworks. Education & Foundational Benchmark Cyber or IT NVQ Level 4 or equivalent higher education/degree in Information Security or Computer ...