2 of 2 Remote/Hybrid Part-Time ISO/IEC 27005 Jobs

governance and risk reporting rather than treating it as a point-in-time exercise. Lead risk assessments and threat-modelling sessions , selecting methodologies (ISO 27005, NIST RMF, STRIDE, MITRE ATT&CK) that are proportionate to system criticality, and ensuring findings feed into programme governance decisions rather … Framework, Cyber Essentials Plus, and the HMG Security Policy Framework - and how they interact in practice. Experience leading risk assessments using structured methodologies (ISO 27005, NIST RMF, or FAIR) and embedding risk outputs into programme governance rather than treating them as standalone deliverables. Demonstrated ability ...

security operating procedures. Liaison with Security Accreditors and Security Assurance Coordinators in support of security Accreditation. What you'll bring: Practical experience of ISO27001 / 27004 / 27005 and NIST Risk Management Framework (RMF). Experience of owning a security risk management system for highly regulated ...