1 to 25 of 306 Permanent NIST Jobs in the UK excluding London

and traceability. Frameworks and Standards Working knowledge of some of the following: ISO/IEC 27001. ISO/IEC 27005. NCSC Cyber Assessment Framework. NIST Cybersecurity Framework. MOD Defence Standard 05-138. Government Security Classifications. Defence, government or critical national infrastructure experience. Experience within high‐assurance or regulated environments. ...

intrusion detection systems, encryption etc. Standards & Frameworks Experience of MOD security standards and principles (e.g., JSP440, JSP453, Secure by Design), and industry frameworks (e.g., NIST Cyber Security Framework, ISO 27001). Professional certifications such as CISSP, CISM, or NCSC Certified Cyber Professional (CCP) [desirable]. Our Culture Our values stand ...

intrusion detection systems, encryption etc. Standards & Frameworks: Experience of MOD security standards and principles (e.g., JSP440, JSP453, Secure by Design), and industry frameworks (e.g., NIST Cyber Security Framework, ISO 27001). Professional certifications such as CISSP, CISM, or NCSC Certified Cyber Professional (CCP) desirable . Our Culture: Our values stand ...

professional development through mentoring, structured career pathways and industry-recognised certifications including: CISSP CISMP CREST Certifications ISO 27001 Lead Implementer/Auditor SABSA TOGAF NIST Programmes UK Cyber Security Council Professional Registration Each consultant is supported by a dedicated Mentor and Performance & Development Manager to help achieve individual career goals. ...

often well suited due to the breadth of technical exposure and security focus these environments can provide. Desirable Experience Knowledge of security frameworks including NIST, MITRE ATT&CK and ISO 27001. Experience leading, mentoring or influencing technical teams. Professional certifications such as CISSP, CISM or equivalent. Experience securing cloud and ...

professional development through mentoring, structured career pathways and industry-recognised certifications including: CISSP CISMP CREST Certifications ISO 27001 Lead Implementer/Auditor SABSA TOGAF NIST Programmes UK Cyber Security Council Professional Registration Each consultant is supported by a dedicated Mentor and Performance & Development Manager to help achieve individual career goals. ...

security best practices. Experience working within aerospace, manufacturing, defence, or other highly regulated environments. Knowledge of cybersecurity frameworks such as Cyber Essentials Plus, CMMC, NIST, ISO 27001, or similar. Experience with security technologies such as EDR/XDR, SIEM, Privileged Access Management, Vulnerability Management, Cloud Security, and Endpoint Protection. Excellent ...

information security assurance and technical cyber‐security operations within a UK organisation Strong working knowledge of ISO/IEC 27001, Cyber Essentials Plus, NIST CSF and UK GDPR/DPA 2018 Hands‐on experience with modern security tooling, including Microsoft Defender, SIEM (e.g. Sentinel), EDR/XDR and vulnerability management ...

and cyber threat intelligence processes. Security certifications such as CISSP, CISM, CompTIA Security+, GICSP, CEH, or ISO 27001 Lead Implementer/Auditor. Knowledge of NIST 2.0 CSF or NCSC guidance for Security of IT Systems. Experience working in or supporting nuclear, energy, or manufacturing environments. Familiarity with Active Directory hardening ...

defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors. Familiarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards. Experience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations, or large-scale enterprise ...

senior leadership. Essential Experience 5+ years' experience in Information Security, Cybersecurity or Product Security. Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP. Experience conducting risk assessments, threat modelling and vulnerability management. Experience integrating security into software development lifecycles. Strong cloud security knowledge, ideally AWS. Experience ...

Clearance . Strong knowledge of: Security architecture principles Threat modelling methodologies NCSC Cyber Assessment Framework (CAF) Secure-by-design principles NIS Regulations ISO 27001 NIST Frameworks Desirable CISSP, SABSA, TOGAF, CCSP or equivalent professional certification. Experience within utilities, water, critical national infrastructure or OT/ICS environments. Experience supporting audit ...

such as CISSP, CISM, CISA, CEH , or an equivalent qualification demonstrating advanced security expertise. Strong knowledge of cybersecurity frameworks and standards, including ISO 27001, NIST, CIS Controls , and experience supporting their implementation and continuous improvement. Hands-on experience with security technologies, tools, monitoring platforms, and SIEM solutions , including incident detection ...

and resource allocation. Security & IT Governance & Compliance: Oversee delivery governance, risk control frameworks, and alignment with industry security standards (e.g., ISO 27001, SOC 2, NIST, GDPR, and FCA financial regulations). Cross-Functional Security Roadmap Integration: Build and maintain delivery roadmaps and executive reporting, managing dependencies across Security Engineering ...

access management, data protection, email security, cloud security posture, and system hardening. Frameworks and standards. Applying security frameworks, standards, and regulatory drivers such as NIST, ISO 27001, GDPR, and NIS2 through practical technical controls. Cyber Essentials Plus. Technical control implementation, evidence collection, remediation tracking, and preparation for assessment. Secure deployment. ...

generative AI platforms, machine learning environments or AI governance and security controls. ** A solid understanding of cybersecurity principles, frameworks and best practices, such as NIST, ISO 27001 and GDPR. ** Knowledge of AI-specific security risks, including prompt injection, data privacy, model security and AI supply chain vulnerabilities. ** Experience securing enterprise ...

generative AI platforms, machine learning environments or AI governance and security controls. A solid understanding of cybersecurity principles, frameworks and best practices, such as NIST, ISO 27001 and GDPR. Knowledge of AI-specific security risks, including prompt injection, data privacy, model security and AI supply chain vulnerabilities. Experience securing enterprise ...

Information Protection Experience working with Role-Based Access Controls (RBAC) and access governance processes. Familiarity with security frameworks and standards such as ISO 27001, NIST or Cyber Essentials Plus. Comfortable engaging with a broad range of technical and non-technical stakeholders. Strong understanding of data protection principles and their application ...

requirements. Key Responsibilities Information Security & Governance Develop, implement, and maintain information security policies, standards, and procedures Ensure alignment with recognised frameworks (e.g. ISO 27001, NIST, CIS) Support information security risk assessments and maintain the risk register Assist with internal and external audits, certifications, and compliance reviews Promote security awareness and ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

reviews, security requirements management and pragmatic risk treatment in fast-moving projects You have experience working with security control standards and frameworks e.g. ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others You have demonstrable continuous personal development, supported by relevant certifications and accreditations You have good interpersonal ...

detection, investigation and root cause analysis. Security automation, scripting or workflow improvement. You’ll also be comfortable working with recognised security frameworks such as NIST CSF, ISO 27001, CIS Controls or the NCSC Cyber Assessment Framework. About you Has significant experience within cyber security, information security or security operations. Enjoys ...

Implementor/Auditor, CEH or equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience ...

ingestion strategies, detection engineering and security posture management. Strong working knowledge of Zero Trust architecture and the application of recognised security frameworks such as NIST CSF, ISO 27001, PCI DSS, DORA, MITRE ATT&CK and CSA guidance. Demonstrable experience operating within a Partner delivery model, including customer-facing consultancy, reference ...

telecommunications, SCADA, industrial control systems or field-connected technology. Relevant certifications such as Microsoft Azure, networking, CISSP, CISM, IEC 62443 or ITIL. Familiarity with NIST Cybersecurity Framework, ISO 27001, Cyber Assessment Framework or sector-specific requirements. Experience establishing separate identity, cloud or management environments for OT. Experience designing or operating ...