25 of 25 NIST Jobs in Birmingham

defence infrastructure projects, or government contractors . Knowledge of JSP 440, DEFCON 76, Secure by Design, Cyber Essentials Plus, ISO 27001, and NIST frameworks . Key Attributes We're looking for someone who demonstrates: Integrity, professionalism, and discretion. Strong risk awareness and sound judgement. Excellent analytical and problem-solving skills. ...

Design Review Board activities. Review third-party solutions and provide security guidance during procurement and onboarding. Ensure solutions align with security policies, ISO 27001, NIST and client security requirements. Develop security architecture patterns, standards and design guidance. Provide security consultancy to business and IT stakeholders throughout project delivery. Collaborate with ...

Design Review Board activities. Review third-party solutions and provide security guidance during procurement and onboarding. Ensure solutions align with security policies, ISO 27001, NIST and client security requirements. Develop security architecture patterns, standards and design guidance. Provide security consultancy to business and IT stakeholders throughout project delivery. Collaborate with ...

accurately recorded and managed. Help maintain the Cyber Risk Management Framework and assess risks against recognised standards, including SPF, NCSC guidance, ISO 27001 and NIST-aligned approaches. Produce cyber risk reports, analysis and briefings for senior leaders and assurance forums. Support cyber assurance activities across digital change programmes, cloud services ...

environments, including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems.Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent.GenAI security: experience assessing and mitigating risks ...

Design and validate Zero Trust architectures across identity, device, network, application, and data layers. Define enterprise security architecture guardrails, controls, and patterns aligned to NIST, CIS, ISO 27001, Zero Trust, and industry regulations. Support architecture governance boards, ensuring all designs adhere to security standards. Identify systemic, long-term structural risks ...

existing system designs, including recommending sensible mitigations that balance cost, risk and usability.• Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR).• Experience in one of the following specialisms: AI/ML/Data/Cloud/M365/Security Architecture• Experience in application architecture ...

and communication skills. Ability to interpret security operational outputs and reporting. Experience developing governance documentation, process guidance, and assurance materials. Desirable Skills Knowledge of: NIST Cyber Security Framework (CSF) Secure by Design principles UK Government and NCSC security guidance Experience in highly regulated or security-sensitive environments. Experience supporting operational ...

strong cloud security and governance expertise, you will: Security Architecture Translate business, data protection and security requirements into practical architectural designs leveraging industry frameworks (NIST, ISO 27001, CIS).Design and maintain cloud‐native security architectures, with deep expertise in GCP architecture, security services, and secure workload design.Establish secure architectural patterns … policies and standards.Support compliance assessments and audits, including cloud‐specific controls and emerging AI regulatory frameworks.Ensure alignment to governance standards such as ISO 27001, NIST 800‐53/CSF, NIS2, DORA, and industry cloud security benchmarks. Technology Evaluation & Continuous Improvement Conduct cloud and AI security architecture reviews, including: Cloud configuration ...

strong cloud security and governance expertise, you will: Security Architecture Translate business, data protection and security requirements into practical architectural designs leveraging industry frameworks (NIST, ISO 27001, CIS). Design and maintain cloud‐native security architectures , with deep expertise in GCP architecture, security services, and secure workload design . Establish … standards. Support compliance assessments and audits, including cloud‐specific controls and emerging AI regulatory frameworks. Ensure alignment to governance standards such as ISO 27001, NIST 800‐53/CSF, NIS2, DORA, and industry cloud security benchmarks. Technology Evaluation & Continuous Improvement Conduct cloud and AI security architecture reviews, including: Cloud configuration ...

from a security standpoint. Expertise in Continuous Security, Continuous Integration and Continuous Delivery techniques Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc. Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and ...

from a security standpoint.• Expertise in Continuous Security, Continuous Integration and Continuous Delivery techniques• Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc.• Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and ...

system designs or products, including recommending sensible mitigations that balance cost, risk and usability. • Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR).• Deep architectural xxperience in one of the following specialisms: AI/ML Security/Cloud/M365/DevSecOps Security Architecture• Experience ...

compliance, risk management and security frameworks. Identify and respond to cyber threats and vulnerabilities. Experience Strong hands-on cyber security experience and knowledge of NIST, CIS and PCI-DSS. Experience with Cortex XDR, Illumio Core/CloudSecure and Microsoft Security. Knowledge of Defender, Azure AD, Purview and Sentinel. Experience with ...

Identity, Secure Development, Third-Party risk, Incident Management Desirable: CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor/Implementer or equivalent experience. Knowledge of NIST CSF, ISO/IEC 27001, COBIT, CIS Controls or enterprise risk frameworks. Experience with SQL, JSON/CSV, APIs, Power BI or data quality controls. ...

Head of IT Security, Head of Cyber Security, ISO27001, NIST, CISM, CISO, Birmingham Head of IT Security required to work for an exciting Law Firm based in Birmingham. This will be a hybrid role where you will be expected to be in the office circa 2 days per week, along ...

Splunk, Log Rhythm, Qualys Implementing security technology controls, secure config and implementation of security projects Information security risks management, controls and frameworks (NIST, CIS, PCI-DSS) IT Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM ...

bring: Mandatory skills Significant experience in Information Security and GRCStrong understanding of risk management methodologies and international security standards (e.g., ISO 27001, US NIST, TSA, etc.) and the ability to assess risks, identify vulnerabilities, etc.Familiarity with data privacy legislation such as EU GDPRExperience maintaining and auditing Information Security Management Systems ...

embed security requirements and guide secure delivery from design through to procurement. You will apply threat modelling, risk assessments and industry standards (ISO 27001, NIST) while collaborating with IAM, GRC and infrastructure teams to ensure secure operations. #J-18808-Ljbffr ...

Build and own the offensive AI security testing methodology, testing harness, covering LLM, agentic and AI-enabled systems, aligned to OWASP LLM Top 10, NIST AI RMF and emerging regulation including the EU AI Act.Own technical standards, peer review, quality assurance and research and development across all offensive service lines ...

operations, security and business stakeholders. Support governance, reporting, audit readiness and continuous improvement. Implement automation and operational best practices where applicable. Technical Skills : CVSS, NIST, DORA, ISO 27001, Cyber Defence Preferred Skills : Enterprise-scale operations experience, stakeholder management, automation mindset, strong analytical and problem-solving capabilities. ...

stakeholders. Support governance, reporting, audit readiness and continuous improvement. Implement automation and operational best practices where applicable. Required Experience - 9+ years Technical Skills - CVSS, NIST, DORA, ISO 27001, Cyber Defence Preferred Skills Enterprise-scale operations experience, stakeholder management, automation mindset, strong analytical and problem-solving capabilities. Benefits A supportive, diverse ...

coordinating third-party security providers such as managed SOC or security service partners. Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF or similar. Experience in an engineering or manufacturing business delivering long-lived systems would be helpful. Experience in high-trust, regulated or mission-critical ...

platform security and work across engineering, operations and stakeholders to ensure audit readiness. The role requires 9+ years of experience and expertise in CVSS, NIST, DORA, ISO 27001 and cyber defence, with a focus on automation and process improvement. #J-18808-Ljbffr ...

chain management and perform cyber security auditsExperience in producing Zones and Conduits Partitioning Diagrams, Cyber Security Requirements definition and cyber security AssuranceISO 27005/NIST 800-82/NIST 800-53 KnowledgeDesirable requirements for the role includeNIS/NIS2 knowledgeRailway industry experience and TS 50701 KnowledgeUnderstanding of Railway frameworks (e.g. ...