8 of 8 NCSC Jobs in Bristol

mitigation strategies across programmes Provide authoritative guidance on risk trade-offs and security posture Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC) Ensure architectural traceability from requirements through to controls and implementation Develop and lead the security architecture practice Mentor, coach, and upskill security architects and consultants Define ...

programs, such as AWS APN and Azure Partners Experience with well-architected frameworks Knowledge of UK public sector technology guidance and frameworks, such as NCSC's Cyber Assessment Framework (CAF) and the Technology Code of Practice (TCoP) Familiarity with Python, Bash and JavaScript Agile practices such as Scrum ...

access management requirements for shipboard systems. Support the definition and validation of secure architecture patterns across onboard and supporting environments. Apply relevant MOD, NCSC, defence, and maritime security frameworks to support assurance, accreditation, and compliance activities. Maintain and support security risk registers, ensuring risks are clearly articulated, owned, treated, tracked … Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer/Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF-related experience or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding, naval, critical national infrastructure or operationally critical environments would ...

shared engineering responsibility rather than a specialist handover at the end of a sprint. Navigate UK government security standards with confidence. Apply the NCSC Cyber Assessment Framework, GovAssure, Cyber Essentials, HMG Security Policy Framework, and relevant legislation (UK GDPR, NIS Regulations) proportionately across engagements — framing standards as guardrails that enable … expect every candidate to bring all of these. Certifications Certified in Risk and Information Systems Control (CRISC) Certified Information Security Manager (CISM) NCSC Certified Cyber Professional (CCP) Capabilities and experience Experience establishing and operating vulnerability management programmes at organisational scale — including risk-based prioritisation using EPSS, KEV, and asset criticality ...

shared engineering responsibility rather than a specialist handover at the end of a sprint. Navigate UK government security standards with confidence. Apply the NCSC Cyber Assessment Framework, GovAssure, Cyber Essentials, HMG Security Policy Framework, and relevant legislation (UK GDPR, NIS Regulations) proportionately across engagements - framing standards as guardrails that enable … expect every candidate to bring all of these. Certifications Certified in Risk and Information Systems Control (CRISC) Certified Information Security Manager (CISM) NCSC Certified Cyber Professional (CCP) Capabilities and experience Experience establishing and operating vulnerability management programmes at organisational scale - including risk-based prioritisation using EPSS, KEV, and asset criticality ...

clearly framed around risk and remediation rather than just compliance status. Drive continuous compliance monitoring against applicable standards and regulations - Cyber Essentials, the NCSC Cyber Assessment Framework, GovAssure, UK GDPR, and NIS Regulations - feeding posture data into governance and risk reporting rather than treating it as a point-in-time … Information Systems Control (CRISC). Certified Information Systems Security Professional (CISSP). Experience advising clients on UK government security frameworks including GovAssure, the NCSC Cyber Assessment Framework, Cyber Essentials Plus, and the HMG Security Policy Framework and how they interact in practice. Experience leading risk assessments using structured methodologies ...

security assurance across large, complex transformation programmes involving multiple suppliers and stakeholders. Strong knowledge of government security policies and frameworks, including Secure by Design, NCSC guidance and related standards. Experience conducting security assessments, audits and assurance reviews. Experience reviewing technical security architectures and providing constructive challenge to delivery teams. Strong … Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within highly regulated public sector or government environments. What's on Offer ...

what the SOC is seeing into the language that informs decisions. The UK public sector context matters here. You'll align your work to NCSC guidance, the Cyber Assessment Framework, and OFFICIAL handling requirements - not because compliance is the goal, but because those frameworks reflect the real risk environment your … train L1/L2 analysts to write and tune detections themselves. Own the threat-landscape narrative for your engagement - turn intelligence from NCSC advisories, sector feeds, and threat actor reporting into hunt themes, coverage gap analysis, and detection priorities that the SOC and client stakeholders can act on. ...