1 to 25 of 282 NCSC Jobs in England

Secure by Design Principles DevSecOps Methodologies Security Operations & Incident Response Identity & Access Management (IAM) Data Protection & Privacy Controls Enterprise Security Architecture Frameworks Familiarity with: NCSC Cloud Security Principles ISO 27001 NIST Cybersecurity Framework CIS Controls OWASP Technical Experience Cloud Platforms AWS Microsoft Azure Google Cloud Platform (GCP) Security Technologies Microsoft ...

infrastructure, and cloud environments. Conduct security design reviews and provide assurance across projects and programmes. Ensure alignment with standards such as ISO 27001, NIST, NCSC and Cyber Essentials Plus. Risk Management & Compliance Identify, assess, and manage cyber security risks across systems and suppliers. Support risk assessments, threat modelling, and vulnerability ...

related compliance frameworks. Security frameworks and standards including ISO 27001, NIST Cyber Security Framework and CIS Controls v8. UK Government and NCSC security policies, guidance and best practices. Cloud security architecture, particularly AWS services such as IAM, KMS and ECS. Event-driven and microservices-based architectures. Cloud Security Posture Management ...

audit requirements, governance and assurance within regulated environments. Desirable Skills Previous Central Government or wider UK Public Sector security and identity experience. Knowledge of NCSC guidance, Government Security Framework and government digital/security standards. Experience with technologies such as Microsoft Entra ID (Azure AD), Active Directory, PAM and modern ...

across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

defence, financial services or enterprise environmentsAgile and Waterfall project deliveryClient-facing consulting and stakeholder managementKnowledge of security frameworks such as NIST CSF, ISO 27001, NCSC CAF, GDPR and NIS2 is essential.DesirableExperience across cloud security, vulnerability management, threat management or IAM.Professional certifications such as CISSP, CISM, CISA, M.Inst.ISP or equivalent.Eligibility ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

Security Architecture within Central Government or the wider Public Sector. Strong understanding of ISO 27001, NIST CSF and CIS Controls. Deep knowledge of NCSC and HMG security standards and guidance. Expertise in Azure security technologies, including Entra ID, Azure Policy, Key Vault and Identity & Access Management. Experience securing cloud-native ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.Financial services security: experience designing controls for regulated financial ...

explaining technical risk clearly Balancing security requirements against practical delivery and business needs Experience with areas such as NIST, SABSA, TOGAF, ISO 27001, NCSC guidance, Zero Trust, IAM/PAM, cloud security or security assurance would all be useful, but we're not expecting one person to tick every box. ...

product vision and roadmap for secure AWS-based platform products used within government programmes. Align product delivery with business objectives, government standards (e.g., NCSC Cloud Security Principles), and compliance frameworks. Drive backlog prioritisation, balancing feature delivery, security requirements, and operational excellence. Stakeholder Engagement Act as the product voice with government ...

infrastructure operations.Experience supporting government, defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors.Familiarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards.Experience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations, or large ...

operations. Experience supporting government, defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors. Familiarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards. Experience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations ...

delivery, including IT/OT convergence Advanced Visio skills and fluency with TOGAF or equivalent architecture methods. Working knowledge of NIST CSF, IEC 62443, NCSC CAF, EU NIS2, cloud and network fundamentals Willingness to travel for client delivery (domestic and international as required). Ideally, You’ll Also Have Experience ...

Excellent stakeholder management, communication, and influencing skills, with experience engaging with senior stakeholders. Thorough understanding of government digital service standards (GDS), security principles (e.g., NCSC), and data protection regulations (GDPR). Experience in managing third-party suppliers and navigating public sector procurement processes. Strong leadership potential, with a track record ...

Excellent stakeholder management, communication, and influencing skills, with experience engaging with senior stakeholders. Thorough understanding of government digital service standards (GDS), security principles (e.g., NCSC), and data protection regulations (GDPR). Experience in managing third-party suppliers and navigating public sector procurement processes. Strong leadership potential, with a track record ...

Excellent stakeholder management, communication, and influencing skills, with experience engaging with senior stakeholders. Thorough understanding of government digital service standards (GDS), security principles (e.g., NCSC), and data protection regulations (GDPR). Experience in managing third-party suppliers and navigating public sector procurement processes. Strong leadership potential, with a track record ...

mitigation strategies across programmes* Provide authoritative guidance on risk trade-offs and security posture* Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC)* Ensure architectural traceability from requirements through to controls and implementationDevelop and lead the security architecture practice* Mentor, coach, and upskill security architects and consultants* Define ...

Trust Architectures. Deep technical knowledge of Microsoft Azure, Building Cloud Platforms, Migrating Applications to Cloud Platforms. Agile Delivery using standard DevSecOps toolchains Knowledge of NCSC, GDS, and UK government security frameworks, including Secure by Design, Cloud Security Principles, Government Functional Standards, and the Technology Code of Practice. Working in Secure ...

CISSP, CISM, SABSA, TOGAF, CCSP or equivalent professional experience. TOGAF Certified. SABSA Chartered Security Architect. Azure Solutions Architect Expert. AWS Solutions Architect Professional. NCSC Certified Cyber Professional (Security Architecture). Chartered status through UK Cyber Security Council, CIISec, BCS, IET or equivalent professional body. Other information: Logiq is committed ...

architectural experience in securing software, hardware and cloud environments (AWS) using best security practice and security frameworks aligned to NIST, ISO, CIS, CSA, PCI, NCSC etc. is essential. What's in it for you? Besides the opportunity to work for a global company that is customer and people-focused ...