11 of 11 Permanent NIST Jobs in Yorkshire

full project lifecycle from bid through delivery and into service. Desirable ExperiencePost-Quantum Cryptography (PQC) planning and migration. Cryptographic standards and frameworks including NCSC, NIST, ETSI, ISO and IEC standards. Scripting and automation using PowerShell, Python, or Bash. Identity & Access Management (IAM) integration. Critical National Infrastructure (CNI) or Operational Technology ...

Cyber Risk Management Framework Assist in assessing cyber risks against: Government Security Policy Framework (SPF) DSPT Cyber Assurance Framework NCSC guidance ISO 27001/NIST aligned approaches Promote a proportionate, risk-based approach to cyber security across the organisation Governance & Reporting Contribute to cyber risk reporting for senior management and ...

technical stakeholders. Desirable Experience Engineering, manufacturing, industrial or regulated-sector environments. Cyber Essentials Plus or similar compliance frameworks, such as ISO 27001 or NIST Business continuity and disaster recovery planning. ...

managing and developing an Information Security team. We're looking for: Proven experience leading cyber/information security and compliance teams Strong knowledge of NIST, NIS2, ISO 27002, Cyber Essentials Plus and GDPR Experience managing enterprise risk registers and security metrics Experience with ISO 27002/Cyber Essentials Plus audits ...

Bachelor’s degree and/or equivalent experience in cybersecurity, technology, risk, or related disciplines. Working knowledge of industry control frameworks (e.g., CIS/NIST‐aligned approaches). Understanding of project and delivery methodologies (e.g., Agile/Waterfall); formal qualification beneficial but not mandatory given the oversight nature of ...

internal and external assessmentsSupport the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc. Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning the security risk management process to include ...

equivalent qualification in risk, IT or information security. Strong technical experience in IT, information security, technology risk and resilience, including frameworks such as NIST and ISO 27001. Proven second line experience in risk oversight, assessment, control evaluation and embedding enterprise risk frameworks and risk appetite. Demonstrated leadership and delivery capability ...

protection projects. Exposure to operational technology (OT) or IT/OT-converged environments. Familiarity with related standards or frameworks such as ISO 27001 or NIST CSF. Experience delivering projects involving data security, operational resilience or critical national infrastructure more broadly. ...

data security, including data classification, DLP, encryption, and data lifecycle protection. Strong understanding of relevant standards and frameworks (e.g. ISO/IEC 27001, NIST CSF, CIS Controls).Proven experience owning or leading a global or enterprise‐scale security service or capability. Ability to operate at both strategic and operational levels ...

maintaining recognised Industry Security Qualifications e.g., CCP, CISSPYou'll have proven experience of assessing and managing risk in line with industry good practice (NIST, ISO 27001)You'll bring significant experience with using security baselines, mitigations and controlsYou'll be considerably familiar with a life cycle phased approachThe Engineering Delivery ...

security policies, VPNs, zero-trust architecture, access controls and encryption. Basic understanding of vulnerability remediation processes and procedures Familiarity with standards like ISO 27001, NIST or CIS controls to guide project alignment. Exposure to ITIL environments and service management principles. Experience in managing both technical and business change. ...