1 to 25 of 156 Permanent NCSC Jobs in the UK excluding London

clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks. Financial services security: experience designing controls for regulated ...

clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks. Financial services security: experience designing controls for regulated ...

clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks. Financial services security: experience designing controls for regulated ...

clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks. Financial services security: experience designing controls for regulated ...

clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks. Financial services security: experience designing controls for regulated ...

explaining technical risk clearly Balancing security requirements against practical delivery and business needs Experience with areas such as NIST, SABSA, TOGAF, ISO 27001, NCSC guidance, Zero Trust, IAM/PAM, cloud security or security assurance would all be useful, but we're not expecting one person to tick every box. ...

make informed security decisions. What You'll Bring: Proven experience leading large-scale Security Architecture initiatives. Strong knowledge of frameworks such as TOGAF, SABSA, NCSC Cloud Security and related industry standards. Experience working within regulated environments and frameworks such as GDPR and DORA. The ability to translate complex technical concepts ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

Microsoft Entra ID/Active Directory. Strong understanding of security and compliance principles, technologies and frameworks, including Zero Trust, Microsoft Defender/Sentinel, NCSC, NIST and ISO 27001. Experience engaging with senior customer stakeholders and acting as a trusted technical advisor. Strong understanding of ITIL‐aligned service management and managed ...

architectural experience in securing software, hardware and cloud environments (AWS) using best security practice and security frameworks aligned to NIST, ISO, CIS, CSA, PCI, NCSC etc. is essential. What's in it for you? Besides the opportunity to work for a global company that is customer and people-focused ...

Friday. WHAT WE'RE LOOKING FOR Experience designing secure solutions across cloud and on-premise environments. Strong knowledge of security frameworks such as NIST, NCSC CAF, CIS and IEC 62443. The ability to recommend security solutions that balance business needs with robust protection. Knowledge of OT/IoT security, ideally ...

mitigation strategies across programmes* Provide authoritative guidance on risk trade-offs and security posture* Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC)* Ensure architectural traceability from requirements through to controls and implementationDevelop and lead the security architecture practice* Mentor, coach, and upskill security architects and consultants* Define ...

operations. Experience supporting government, defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors. Familiarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards. Experience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations ...

Standards Ensure alignment with nuclear and OT cyber standards, including: IEC 62443 (Industrial Automation & Control Systems Security), ISO/IEC 27001 (Information Security Management), NCSC guidance and UK Cyber Essentials and ONR Security Assessment Principles (SyAPs) Secure by Design Leadership Act as the primary interface for Secure by Design ...

Working knowledge of Jira, Confluence, and IT Service Management platforms. Good understanding of hybrid environments incorporating on-premise and cloud-hosted services. Familiarity with NCSC security guidance, Secure by Design principles, Zero Trust architectures, and UK Government security frameworks. Desirable Experience supporting products from vendors such as Everfox (Deep Secure ...

Experience leading architecture across user-centred and agile delivery teams. Knowledge of Government Digital Service standards, GOV.UK services (Notify, One Login, Pay), and National Cyber Security Centre guidance and security standards. Experience designing and governing modern cloud-native, API-led, integration, data, and enterprise architectures across one or more major ...

project lifecycle from bid through delivery and into service.### ### Desirable Experience* Post-Quantum Cryptography (PQC) planning and migration.* Cryptographic standards and frameworks including NCSC, NIST, ETSI, ISO and IEC standards.* Scripting and automation using PowerShell, Python, or Bash.* Identity & Access Management (IAM) integration.* Critical National Infrastructure (CNI) or Operational ...

full project lifecycle from bid through delivery and into service. Desirable ExperiencePost-Quantum Cryptography (PQC) planning and migration. Cryptographic standards and frameworks including NCSC, NIST, ETSI, ISO and IEC standards. Scripting and automation using PowerShell, Python, or Bash. Identity & Access Management (IAM) integration. Critical National Infrastructure (CNI) or Operational Technology ...

full project lifecycle from bid through delivery and into service. Desirable ExperiencePost-Quantum Cryptography (PQC) planning and migration. Cryptographic standards and frameworks including NCSC, NIST, ETSI, ISO and IEC standards. Scripting and automation using PowerShell, Python, or Bash. Identity & Access Management (IAM) integration. Critical National Infrastructure (CNI) or Operational Technology ...

ECS. Experience with AWS Lambda and serverless technologies. Experience implementing event-driven architectures. Understanding of Zero Trust and secure-by-design principles. Knowledge of NCSC, GDS and UK Government security frameworks. Experience delivering technology services within secure and regulated environments. Experience working within Agile and DevOps environments. Security Requirements Candidates ...

scripting or workflow improvement. You'll also be comfortable working with recognised security frameworks such as NIST CSF, ISO 27001, CIS Controls or the NCSC Cyber Assessment Framework. About youWe're looking for someone who: Has significant experience within cyber security, information security or security operations. Enjoys leading investigations ...

Excellent understanding of the engineering lifecycle and key gate review activities. Knowledge of current Crypto technologies,Key ManagementSystems & practicalCOMSECimplementations and MOD/NCSC standards. Knowledge or experience of ARP4754A/ARP4761 and its interrelationship with security. Security Clearance This role is subject to pre-employment screening in line with ...

Understanding of the engineering lifecycle and key gate review activities. Knowledge of current Crypto technologies, Key Management Systems & practical COMSEC implementations and MOD/NCSC standards. Knowledge or experience of ARP4754A/ARP4761 and its interrelationship with security. This is not an exhaustive list, and we are keen to hear ...

understanding of the engineering lifecycle and key gate review activities. Knowledge of current Crypto technologies, Key Management Systems & practical COMSEC implementations and MOD/NCSC standards. Knowledge or experience of ARP4754A/ARP4761 and its interrelationship with security. Security Clearance This role is subject to pre-employment screening in line ...