1 to 25 of 500 Remote/Hybrid Permanent NIST Jobs

services, covering ISMS management, risk management, and management reporting. Working knowledge of information security and data protection frameworks and regulation, including ISO 27001:2022, NIST CSF, UK GDPR, and awareness of FCA/PRA and payment scheme expectations. Sound understanding of the cyber threat landscape, threat intelligence, vulnerability management and ...

Knowledge Strong understanding of: Security legislation and regulatory requirements, including GDPR, PCI DSS and related compliance frameworks. Security frameworks and standards including ISO 27001, NIST Cyber Security Framework and CIS Controls v8. UK Government and NCSC security policies, guidance and best practices. Cloud security architecture, particularly AWS services such ...

identity management, red-team/pentesting, or enterprise vulnerability management tools.Familiarity with regulated industries (e.g., healthcare, financial, defense) and related compliance frameworks (ISO 27001, NIST, GDPR, etc.) is beneficial.Medpace OverviewMedpace is a full-service clinical contract research organization (CRO) providing phase l-lV clinical development services to the biotechnology, pharmaceutical ...

Hybrid Identity.Strong client-facing consultancy experience with executive stakeholder engagement.DesirableManaged Services, SOC integration, AI security, DevSecOps, and multi-cloud security experience.Knowledge of ISO 27001, NIST, NIS2, Cyber Essentials, GDPR, DORA, and FCA/PRA frameworks.Relevant certifications such as CISSP, CCSP, CISM ...

Hybrid Identity.Strong client-facing consultancy experience with executive stakeholder engagement.DesirableManaged Services, SOC integration, AI security, DevSecOps, and multi-cloud security experience.Knowledge of ISO 27001, NIST, NIS2, Cyber Essentials, GDPR, DORA, and FCA/PRA frameworks.Relevant certifications such as CISSP, CCSP, CISM ...

Hybrid Identity.Strong client-facing consultancy experience with executive stakeholder engagement.DesirableManaged Services, SOC integration, AI security, DevSecOps, and multi-cloud security experience.Knowledge of ISO 27001, NIST, NIS2, Cyber Essentials, GDPR, DORA, and FCA/PRA frameworks.Relevant certifications such as CISSP, CCSP, CISM ...

Hybrid Identity.Strong client-facing consultancy experience with executive stakeholder engagement.DesirableManaged Services, SOC integration, AI security, DevSecOps, and multi-cloud security experience.Knowledge of ISO 27001, NIST, NIS2, Cyber Essentials, GDPR, DORA, and FCA/PRA frameworks.Relevant certifications such as CISSP, CCSP, CISM ...

client-facing consultancy experience with executive stakeholder engagement. DesirableManaged Services, SOC integration, AI security, DevSecOps, and multi-cloud security experience. Knowledge of ISO 27001, NIST, NIS2, Cyber Essentials, GDPR, DORA, and FCA/PRA frameworks. Relevant certifications such as CISSP, CCSP, CISM ...

architecture with Azure or AWS, network segmentation, AI governance, advanced identity management, red‐team or pentesting, enterprise vulnerability management tools, regulated industries, ISO 27001, NIST, GDPR. Условия: Competitive compensation programs that recognize and reward performance; Comprehensive health, wellness, retirement, and PTO benefits; Office-based environment with on‐site mentors; Defined ...

and traceability. Frameworks and Standards Working knowledge of some of the following: ISO/IEC 27001. ISO/IEC 27005. NCSC Cyber Assessment Framework. NIST Cybersecurity Framework. MOD Defence Standard 05-138. Government Security Classifications. Defence, government or critical national infrastructure experience. Experience within high‐assurance or regulated environments. ...

Compliance & Certifications: Own end‐to‐end audit readiness for enterprise and defense frameworks, including SOC 2 Type II, ISO 27001, Cyber Essentials Plus, and NIST 800‐53. Partner with Product & Engineering: Embed DevSecOps and secure SDLC practices into our CI/CD pipelines; oversee pentesting, red teaming, and threat modeling ...

DevSecOps security. Knowledge of application security and common web application vulnerabilities. Experience using SIEM, EDR and threat intelligence alongside vulnerability data. Knowledge of NIST, CIS, ISO 27001 or Cyber Essentials. Relevant security certifications such as CISSP, CISM, GIAC, OSCP or similar. The Ideal Candidate - My client is looking for someone ...

with container, Kubernetes or DevSecOps security.Knowledge of application security and common web application vulnerabilities.Experience using SIEM, EDR and threat intelligence alongside vulnerability data.Knowledge of NIST, CIS, ISO 27001 or Cyber Essentials.Relevant security certifications such as CISSP, CISM, GIAC, OSCP or similar.The Ideal Candidate -My client is looking for someone ...

driving operational standards.Excellent documentation, analytical, and stakeholder management skills.DesirableCertifications such as SC-200, SC-300, CISSP, GCIH, GCIA, or equivalent.Knowledge of MITRE ATT&CK, NIST Cyber Security Framework, and Zero Trust principles.Experience with PowerShell, Python, or security automation technologies.Experience contributing to cyber service development, tooling strategy, or architectural design.Background ...

documentation, analytical, and stakeholder management skills. Desirable Certifications such as SC-200, SC-300, CISSP, GCIH, GCIA, or equivalent. Knowledge of MITRE ATT&CK, NIST Cyber Security Framework, and Zero Trust principles. Experience with PowerShell, Python, or security automation technologies. Experience contributing to cyber service development, tooling strategy, or architectural ...

1. TechnicalDelivery(OT Cyber Security) Perform OT risk assessments, threat modelling, and vulnerability assessments. Assess and/or assure compliance withtheNIS Regulations, NCSC CAF, NIST CSF, IEC 62443, ISO 27001, and sector-specific guidance. Develop security measures and designs to deliver security improvements Provideexpert guidance oncommon OT cyber security challenges ...

of cloud security (AWS, Azure, or GCP), including identity, network security, and platform controls. Active SC Clearance. Experience with security frameworks and standards (eg NIST, ISO 27001, CIS, OWASP). Hands‐on understanding of modern application architectures (microservices, APIs, event‐driven systems). Experience working within Agile/Scrum delivery ...

maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001/27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF. Develop and maintain information security policies, standards and procedures, ensuring organisational compliance. Define, coordinate and assess the implementation of specific security controls ...

designing data security solutions by creating high-level and low-level designs that align with business objectives and comply with industry cybersecurity standards (e.g., NIST, ISO 27001). For example, this includes:Creating high-level and low-level system architecture diagrams with technical descriptions of each component.Defining the dependencies ...

architect data security solutions by creating high-level and low-level designs that align with business objectives and comply with industry cybersecurity standards (e.g., NIST, ISO 27001). For example, this includes:· Creating high-level and low-level system architecture diagrams with technical descriptions of each component.· Defining the dependencies ...

technical cyber role working across public sector/government agencies . Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure ...

Cybersecurity capability (strong experience across some of these areas): Cybersecurity strategy and operating model design Cyber risk management, governance and compliance (e.g. ISO 27001, NIST, NIS2, GDPR) Security architecture and secure‐by‐design principles in cloud and hybrid environments Identity and access management, security operations or cyber controls engineering Cyber ...

effective remediation co-ordination. • Threat intelligence: experience consuming TI feeds (MISP, OpenCTI, commercial TI platforms) to contextualise vulnerabilities. • Familiarity with compliance frameworks: ISO 27001, NIST CSF, CIS Controls, PCI DSS, SOC 2 – as they relate to vulnerability management. SOFT SKILLS & COMPETENCIES • Strong risk communication skills – translates technical vulnerability data into ...

security requirements. Key Responsibilities Zero Trust Strategy & Architecture Define and deliver enterprise-wide Zero Trust strategies and roadmaps Design Zero Trust architectures aligned to NIST 800-207 principles Implement identity-first security models across users, devices, applications and data Develop continuous verification and adaptive access control frameworks Lead micro-segmentation … regulated sectors Experience leading security transformation and modernisation initiatives Technical Knowledge Deep expertise in Zero Trust Architecture principles and implementation methodologies Strong knowledge of NIST 800-207 and modern security architecture frameworks Expert understanding of Identity & Access Management technologies Experience with Microsoft Entra ID, Conditional Access, PIM and PAM solutions ...

supporting Platform Security initiatives within complex environments.Understanding of Security Architecture Design and secure-by-design principles.Familiarity with cyber frameworks such as MITRE ATT&CK, NIST, or Cyber Kill Chain.Experience producing intelligence reports and presenting findings to stakeholders.Strong analytical and problem-solving abilities.Excellent written and verbal communication skills.Experience working within large ...