17 of 17 Remote/Hybrid NIST Jobs in Bristol

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

and confidence Drive secure architecture at scale Define and assure enterprise, solution, and system-level security architectures Apply and tailor security frameworks such as NIST, ISO 27001, SABSA and Zero Trust principles Ensure systems are secure by design, proportionate, and aligned to mission objectives Own risk and assurance outcomes Lead ...

Experience conducting or supporting ISO management system audits Knowledge of security standards and frameworks such as Cyber Essentials Plus, ISO 22301 and NIST Experience with security risk assessments, control assurance and remediation Understanding of third-party and supplier security risk Good broader knowledge of cyber security and technology Familiarity with ...

risk management and accreditation Building trusted client relationships and influencing stakeholders Producing high-quality assurance documentation Desirable experience includes: JSP 440/JSP 604 NIST, CAF, ISO 27001 or Cyber Essentials Active SC Clearance (DV advantageous) Professional certifications such as CISSP, CISM or CRISC are highly desirable. Chartered Cyber Security ...

design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR, and PCI-DSS Working closely with engineers, architects, and stakeholders to embed security by design Contributing to Agile delivery teams and supporting continuous improvement About ...

and on-premise environments. A security-first mindset and confidence working with both technical and non-technical stakeholders. Knowledge of frameworks such as NIST, ISO 27001, CIS, GDPR would be preferred. A proactive, accountable approach- you like owning outcomes. Why This Role Stands Out This isn't just another security ...

communication skills, with the ability to turn technical security concerns into clear, actionable decisions. Familiarity with recognised frameworks or certifications such as ISO 27001, NIST CSF or similar would be helpful. Experience in a product, platform or SaaS business. Experience in high-trust, regulated or mission-critical environments would ...

energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum 2 days onsite/client site). Annual performance bonus. ...

utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within Agile delivery environments. What's on Offer Hybrid working (minimum ...

across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance activities. - Facilitate governance forums, stakeholder workshops and senior executive briefings to embed decision rights and reporting ...

concept to operation with hybrid working between onsite Ashton Vale and home offices. You will implement IA strategies, lead risk management per ISO27001/NIST, create security documentation, and liaise with stakeholders to assure robust protection across projects. #J-18808-Ljbffr ...

and risk reporting rather than treating it as a point-in-time exercise. Lead risk assessments and threat-modelling sessions , selecting methodologies (ISO 27005, NIST RMF, STRIDE, MITRE ATT&CK) that are proportionate to system criticality, and ensuring findings feed into programme governance decisions rather than sitting in security documentation … Cyber Essentials Plus, and the HMG Security Policy Framework - and how they interact in practice. Experience leading risk assessments using structured methodologies (ISO 27005, NIST RMF, or FAIR) and embedding risk outputs into programme governance rather than treating them as standalone deliverables. Demonstrated ability to design security controls and governance ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

Develop and implement comprehensive Information Assurance Strategies to meet complex customer security requirements.Lead risk management activities that align with an industry standard such as NIST SP 800-37 or the ISO/IEC 27000 series.Create and maintain security documentation including system security plans, policies, procedures, and compliance evidence.Interface with internal … Product Security Engineer - Information AssuranceThe ability to interpret and implement industry security standards and frameworks such as the ISO/IEC 27000 series or NIST SP-800 series.Experience in information assurance, security engineering, cyber security, or a similar field.Deep understanding of security risk management and assurance methodologies & processes.Experience working across ...

and implement comprehensive Information Assurance Strategies to meet complex customer security requirements. Lead risk management activities that align with an industry standard such as NIST SP 800-37 or the ISO/IEC 27000 series. Create and maintain security documentation including system security plans, policies, procedures, and compliance evidence. Interface … Security Engineer - Information Assurance The ability to interpret and implement industry security standards and frameworks such as the ISO/IEC 27000 series or NIST SP-800 series. Experience in information assurance, security engineering, cyber security, or a similar field. Deep understanding of security risk management and assurance methodologies & processes. ...

position is 90% information security and 10% network engineering, and offers hybrid working with three days onsite in Bristol. A strong background in ISO27001, NIST and SOC coordination is essential. #J-18808-Ljbffr ...

regulation to: Design and implement AI governance frameworks, policies, controls and operating models. Advise on AI regulations and standards including the EU AI Act, NIST AI RMF and ISO/IEC 42001. Deliver AI risk assessments, model governance reviews and Responsible AI evaluations. Support governance across the AI lifecycle, including … emerging technology regulation. You should have experience with: AI governance frameworks, policies and controls. AI regulations and standards such as EU AI Act, NIST AI RMF or ISO 42001. AI risk assessments and governance reviews. Generative AI and associated governance considerations. Working with senior stakeholders across business, legal, compliance, risk ...