1 to 25 of 115 Remote/Hybrid Permanent NCSC Jobs

related compliance frameworks. Security frameworks and standards including ISO 27001, NIST Cyber Security Framework and CIS Controls v8. UK Government and NCSC security policies, guidance and best practices. Cloud security architecture, particularly AWS services such as IAM, KMS and ECS. Event-driven and microservices-based architectures. Cloud Security Posture Management ...

public sector/government agencies . Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling – Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

Excellent stakeholder management, communication, and influencing skills, with experience engaging with senior stakeholders. Thorough understanding of government digital service standards (GDS), security principles (e.g., NCSC), and data protection regulations (GDPR). Experience in managing third-party suppliers and navigating public sector procurement processes. Strong leadership potential, with a track record ...

Excellent stakeholder management, communication, and influencing skills, with experience engaging with senior stakeholders. Thorough understanding of government digital service standards (GDS), security principles (e.g., NCSC), and data protection regulations (GDPR). Experience in managing third-party suppliers and navigating public sector procurement processes. Strong leadership potential, with a track record ...

Excellent stakeholder management, communication, and influencing skills, with experience engaging with senior stakeholders. Thorough understanding of government digital service standards (GDS), security principles (e.g., NCSC), and data protection regulations (GDPR). Experience in managing third-party suppliers and navigating public sector procurement processes. Strong leadership potential, with a track record ...

Excellent stakeholder management, communication, and influencing skills, with experience engaging with senior stakeholders. Thorough understanding of government digital service standards (GDS), security principles (e.g., NCSC), and data protection regulations (GDPR). Experience in managing third-party suppliers and navigating public sector procurement processes. Strong leadership potential, with a track record ...

Excellent stakeholder management, communication, and influencing skills, with experience engaging with senior stakeholders. Thorough understanding of government digital service standards (GDS), security principles (e.g., NCSC), and data protection regulations (GDPR). Experience in managing third-party suppliers and navigating public sector procurement processes. Strong leadership potential, with a track record ...

mitigation strategies across programmes Provide authoritative guidance on risk trade-offs and security posture Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC) Ensure architectural traceability from requirements through to controls and implementation Develop and lead the security architecture practice Mentor, coach, and upskill security architects and consultants Define ...

security architecture, cyber transformation and regulatory compliance for cyber.Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2 or equivalent.Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk.Desire to work ...

security architecture, cyber transformation and regulatory compliance for cyber.Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2 or equivalent.Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk.Desire to work ...

security architecture, cyber transformation and regulatory compliance for cyber.Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2 or equivalent.Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk.Desire to work ...

similar languages (e.g. Rust), particularly with infrastructure as code. Familiarity with UK and international compliance frameworks such as MOD Secure by Design, JSP 453, NCSC Cloud Security Principles, NIST 800-53. Proven experience deploying systems in air-gapped or classified environments. Experience building and maintaining secure CI/ ...

Compliance Apply Zero Trust principles across cloud platforms. Implement identity and access management controls. Configure security monitoring, logging and compliance controls. Ensure alignment with NCSC, GDS and UK Government security frameworks. Identify and mitigate technical risks throughout delivery. Essential Skills & Experience We are looking for candidates with proven experience delivering ...

security architecture, cyber transformation and regulatory compliance for cyber.Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2.Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk.Desire to work with large ...

risk identification, and mitigation strategies across programmesProvide authoritative guidance on risk trade-offs and security postureOversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC)Ensure architectural traceability from requirements through to controls and implementationDevelop and lead the security architecture practiceMentor, coach, and upskill security architects and consultantsDefine and evolve ...