18 of 18 Remote/Hybrid NIST Jobs in the East of England

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

management. Experience advising on and implementing security controls within large, complex organisations. Solid understanding of recognised security frameworks and standards such as ISO 27001, NIST, and CIS Controls. Strong understanding of modern security concepts including Zero Trust, cloud security, identity‐first security, and cyber resilience. Experience identifying security risks and ...

industries. Desirable experience includes: hybrid and multi‐cloud estates such as Azure and AWS alongside a substantial on‐premises footprint; HPC and scientific computing; NIST CSF and Secure by Design; FinOps and run‐cost modelling; large‐scale workplace transformation across Microsoft 365, Windows, device lifecycle, identity and access; and certification ...

industries. Desirable experience includes: hybrid and multi-cloud estates such as Azure and AWS alongside a substantial on-premises footprint; HPC and scientific computing; NIST CSF and Secure by Design; FinOps and run-cost modelling; large-scale workplace transformation across Microsoft 365, Windows, device lifecycle, identity and access; and certification ...

control. Proven experience advising on security controls in large, complex organisations. A solid understanding of security frameworks and best practice, such as ISO 27001, NIST and CIS. Strong knowledge of modern security concepts, including Zero Trust, identity‐first security and cloud security. Experience taking a risk‐based approach to improve ...

Microsoft 365, Entra ID, Intune and Windows Server Experience with Microsoft Defender and security-focused technologies Knowledge of security frameworks such as ISO 27001, NIST and CIS Controls Experience delivering infrastructure migration or transformation projects Excellent communication and stakeholder management skills Relevant Microsoft certifications highly desirable Desirable Certifications CISSP CCNP ...

of setting security strategy and driving risks, vulnerabilities and incidents through to resolution. You know the key standards and frameworks, such as ISO 27001, NIST, Cyber Essentials and OWASP. And you have the people skills to build a strong team and work well across technology, legal, procurement and suppliers. ...

Knowledge of UK MOD and Government security standards and frameworks, including GovS 007, HMG IS1 & IS2 and relevant JSPs . Knowledge of frameworks including NIST SP800-30/37/53 and ISO 27001 . Experience working directly with product development and engineering teams. Knowledge of current cryptographic technologies and ...

learn Desirable experience: Experience in data protection, with a good understanding of relevant data protection legislation (e.g., UK GDPR). ISO 27001, SOC 2, NIST CSF, CAF, HIPAA, DSPT Gap analysis, auditing, or penetration testing Process and procedure development Software or AI development/testing Client-facing roles Relevant certifications ...

development and mentoring of junior team members. Confident understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005. Varied Experience of assessing risk and building or evolving risk management framework components such as measurement criteria. Good ...

Compromise Malware & Ransomware Account Compromise Privilege Escalation Insider Threats DLP & Data Exfiltration Alerts Suspicious Authentication Activity Knowledge of: MITRE ATT&CK, Cyber Kill Chain, NIST CSF, and security event classification. PLEASE NOTE - Head Resourcing DO NOT use AI in the matching/screening/selection of candidates. Head Resourcing ...

onsite). Key duties include monitoring, triaging and investigating security incidents using IBM QRadar SIEM and Microsoft Defender, with knowledge of MITRE ATT&CK, NIST CSF and incident response lifecycle. #J-18808-Ljbffr ...

simple, practical terms. Desirable SkillsExperience with AI governance, responsible AI, model risk management or AI assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with ...

and multidisciplinary delivery teams to embed security throughout the project lifecycle. You will also drive the continued maturity of our security assurance capability, including NIST-aligned risk assessment methods, assurance processes, tooling, and reporting that improve consistency and visibility across programmes. You will be part of a wider UK cyber … and Experience Proven experience delivering Information Assurance, risk management, and security assurance within Defence, Government, Intelligence, or other highly regulated environments. Strong understanding of NIST RMF/CSF, ISO 27001, and Government security frameworks, with experience developing assurance artefacts such as SyOPs, RMADs, Security Impact Assessments, risk assessments, and accreditation ...

/AI in a controls functionStrong data enquiry/analytics/scripting skillsExperience of managing a co-source agreementUnderstanding of other regulatory frameworks e.g. NIST, ISO 27001, EU CRAUK Benefits include:Flexible benefits fund, emergency leave days, adoption leave, 28 days annual leave (plus bank holidays), pension, life cover, private ...

will investigate incidents across platforms, manage the incident lifecycle, perform log analysis, and contribute to post-incident reviews, working to MITRE ATT&CK and NIST frameworks. #J-18808-Ljbffr ...

to. 5+ years of relevant experience in the medical device space (either industry or through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat … modeling, security testing) and determining residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle ...

gain experience in the development and mentoring of junior team members. Basic understanding of security compliance & basic knowledge of a control framework such as NIST SP800-53 and ISO270002, IEC62443. Basic understanding of security maturity & basic knowledge of a security maturity framework such as NIST CSF Implementation Tiers, C2M2 and ...