ICS systems, how they are designed, deployed and operated Familiarity with OT cybersecurity standards or regulatory frameworks including but not limited to IEC 62443/ISA, NIST CSF, NCSC CAF, the Network and Information Systems (NIS) Regulations and ISO21434 Automotive cyber expertise would be desirable with knowledge of UN155/156 regulations GICSP, IEC/ISA 62443 or other More ❯
Work closely with MOD stakeholders to understand requirements, translate them into architectural solutions, and ensure delivery aligns with their long term cloud roadmap. • Security & Compliance: Embed best practices-covering NCSC principles, government standards, and regulatory requirements-into all designs and transition plans. Required qualifications to be successful in this role • Cloud Expertise: Deep knowledge of private cloud platforms and public … Defence cloud delivery, with 3+ years as lead architect for legacy to cloud migrations. • Certifications: Cloud Architect Expert certification in at least one major platform. • Government Frameworks: Familiarity with NCSC Cloud Security Principles, Technology Code of Practice, G Cloud, Digital Service Standards, or similar. Why CGI? • Shape the UK's Defence cloud transformation strategy • Work on high classification, mission critical More ❯
Cheltenham, England, United Kingdom Hybrid / WFH Options
FR Secure
Assurance within Defence or UK Government environments. Strong understanding of risk management frameworks and secure-by-design principles. Familiarity with government and defence security standards such as: HMG/NCSC IA Policies and Guidelines JSP440 and other MoD IA standards Cyber Essentials NIST, NIS-D ONR SyAPs (Security Assessment Principles) Excellent stakeholder communication skills – you can clearly explain complex securityMore ❯
Chelmsford, Essex, South East, United Kingdom Hybrid / WFH Options
Keystream Group Limited
and experience with leadership in a security functional role is essential. Recognised cybersecurity certifications and a track record of continuous professional development is preferred UK CyberSecurity Council, NCSC, CISSP, CEH, SFIA etc. Deep technical knowledge of cybersecurity trends, threats, tools, and protocols -demonstratable vendor agnostic technical appreciation of both defensive and offensive CyberSecurity with focus on More ❯
Guidelines). Has a comprehensive understanding of what it takes to comply with cybersecurity industry standards and frameworks in practise (e.g. ISO 27001, NIST CSF, SP 800-53, NCSC CAF, Cyber Essentials). Has a thorough understanding of cybersecurity threat and risk with the ability to think like an attacker and design controls that make a real difference. More ❯
Guidelines). Has a comprehensive understanding of what it takes to comply with cybersecurity industry standards and frameworks in practise (e.g. ISO 27001, NIST CSF, SP 800-53, NCSC CAF, Cyber Essentials). Has a thorough understanding of cybersecurity threat and risk with the ability to think like an attacker and design controls that make a real difference. More ❯
Wandsworth, Greater London, UK Hybrid / WFH Options
Risk Ledger Ltd
Guidelines). Has a comprehensive understanding of what it takes to comply with cybersecurity industry standards and frameworks in practise (e.g. ISO 27001, NIST CSF, SP 800-53, NCSC CAF, Cyber Essentials). Has a thorough understanding of cybersecurity threat and risk with the ability to think like an attacker and design controls that make a real difference. More ❯
a sole UK National. Desirable Skills: To support the requirements of this role an awareness of national and international standards including the ISO27000 family, along with familiarity with recent NCSC guidance would be helpful. Knowledge and experience of using a suitable maturity model to develop the SOC, and the subsequent implementation of an agreed standard to improve this maturity where More ❯
Leeds, Yorkshire, United Kingdom Hybrid / WFH Options
PSR Limited
services supporting the financial sector Contribute to the preparation and delivery of departmental engagements with a broad range of stakeholders, including HM Treasury, the Bank of England, PRA, NationalCyberSecurityCentre and I nternational counterparts Assess CTPs' compliance against our published rules and resilience expectations, helping to reduce systemic risk to the UK financial system; this includes setting the More ❯
proactive approach . Must be SC clearable Desirable: . Experience selling into public sector, regulated industries, or enterprise environments . Awareness of compliance frameworks (eg ISO 27001, Cyber Essentials, NCSC guidelines) . Understanding of the broader cyber and digital forensics landscape This is a fantastic opportunity to grow your career in a forward-thinking cybersecurity organisation. If you're More ❯
Regulation Framework, cross-HMGsecurity principles) into usable, department-specific tools and guidance. * Engagewith OGDs and cross-HMG forums to ensure our frameworks align with DSIT,Cabinet Office and NationalCyberSecurityCentre standards. * Establish and maintain secure-by-design and explainability guardrails for AI across theestate. * Provideenterprise-level architectural governance across AI pilots, ensuring reuse,integration and compliance. * Collaboratewith senior … cross-HMG security principles) into usable, department-specific tools and policies. Engage with OGDs and cross-HMG forums to ensure our frameworks align with DSIT, Cabinet Office and NationalCyberSecurityCentre standards. This type of cross-cutting AI governance skillset is niche and spans enterprise architecture, information assurance and applied AI ethics. We welcome applications from people with a More ❯
Regulation Framework, cross-HMGsecurity principles) into usable, department-specific tools and guidance. * Engagewith OGDs and cross-HMG forums to ensure our frameworks align with DSIT,Cabinet Office and NationalCyberSecurityCentre standards. * Establish and maintain secure-by-design and explainability guardrails for AI across theestate.* Provideenterprise-level architectural governance across AI pilots, ensuring reuse,integration and compliance.* Collaboratewith senior … cross-HMG security principles) into usable, department-specific tools and policies. Engage with OGDs and cross-HMG forums to ensure our frameworks align with DSIT, Cabinet Office and NationalCyberSecurityCentre standards.This type of cross-cutting AI governance skillset is niche and spans enterprise architecture, information assurance and applied AI ethics. We welcome applications from people with a wide More ❯
Birmingham, Staffordshire, United Kingdom Hybrid / WFH Options
National Physical Laboratory
officials, industry leaders, and academic professionals, supporting UKTL leaders in coordinating meetings and briefings. As a trusted national capability, UKTL will collaborate with standards bodies like 3GPP, the NationalCyberSecurityCentre, the UK intelligence community, academia, Ofcom, and telecommunications service providers and vendors. What you could be doing for us: Managing the software development lifecycle of bespoke UKTL tools. More ❯
Brilliant organisational skills with forensic attention to detail Comfortable working cross-functionally with high-performing teams Proficient in Google Suite & MS Office Bonus Points: Prior experience working with MOD, NCSC, or NATO vetting systems Experience in multinational or public sector environments Familiarity with performance dashboards or security metrics More ❯
patching, and application deployments. OpManager Manage Engine Password Manager Windows Server OSes Windows 10 & 11 Desktop MS 365 Apps The ideal candidate will possess a solid understanding of CIS & NCSCsecurity best practices, along with expertise in Pen Testing and Vulnerability remediation. Requirements Strong technical skills in VMware, Veeam, HPE, SCCM, and more. Confidence in on-site client support in More ❯
and implement robust security frameworks. You will lead Gap Analysis and GRC assessments, playing a pivotal role in helping organizations align with industry standards like ISO27001, Cyber Essentials, and NCSC CAF. This role requires immediate impact, with a start date of November. Responsibilities: Act as a vCISO for multiple mid-enterprise businesses, providing expert guidance on cybersecurity strategies. Conduct comprehensive … Gap Analysis and GRC assessments to identify and mitigate risks. Implement and oversee security strategies, ensuring alignment with ISO27001, Cyber Essentials, and NCSC CAF. Collaborate with clients to enhance their overall security posture and compliance with industry regulations. Skills/Must have: Proven experience in Governance, Risk, and Compliance (GRC). Strong background in conducting Gap Analysis and risk assessments. … In-depth knowledge of ISO27001, Cyber Essentials, and NCSC CAF frameworks. Ability to start by November. Nice to Haves: Experience working with mid-enterprise businesses. Benefits: Flexibility to be based anywhere in the UK, with office access in Leeds. Salary: £60,000 - £70,000 Join them in this crucial role to help businesses strengthen their cybersecurity defences. Apply now to More ❯
Support the wider team in cyber risk assessments, technical audits, and consultancy as required. Key Skills and Experience: Experience delivering Cyber Essentials and Cyber Essentials Plus audits. Understanding of NCSC guidelines and IASME standards. Strong communication skills and ability to work directly with clients. Relevant certifications desirable: CE Assessor Ability to work independently in a hybrid environment with a self More ❯
Andover, Hampshire, South East, United Kingdom Hybrid / WFH Options
Data Careers
Enterprise Architect Permanent Location: Home/Hampshire (Hybrid) Salary: £100,000 - £110,000 (+ benefits) Skills: TOGAF, Zachman, Sparx, OWASP, NCSC Are you a seasoned Enterprise Architect with a passion for designing modular, scalable, and future-ready technology solutions? We're working with a leading technology consultancy delivering a high-impact transformation programme within central government. This is an opportunity More ❯
and Azure Monitor. Work hands-on with Cisco Umbrella, Meraki, and F5 firewalls. Security at the core: Apply your security knowledge to align with ISO27001, Cyber Essentials Plus, and NCSC guidance. Enjoy a flexible work environment with a 35-hour week and extensive opportunities for professional and personal development. Access to an enhanced contributory pension scheme which could you see More ❯
sector. Since its inception, the company has grown to employ elite technical experts who have contributed to some of the world's largest technology and digital security projects. The NCSC-approved CHECK company specializes in penetration testing and security assessment services under the government-accredited CHECK scheme. They are currently seeking for a skilled Penetration Tester to join the growing More ❯
Gloucester, Gloucestershire, United Kingdom Hybrid / WFH Options
BAE Systems (New)
Managers producing truly world leading solutions that provide content and network threat defence between networks of different security classifications or trust levels. Our capability is developed in collaboration with NCSC, ACSC and NCDSMO and we have been doing this for over 20 years. This enables our clients in Intelligence Agencies, Law Enforcement, Military and Critical National Infrastructure to move information More ❯
Wiltshire, South West, United Kingdom Hybrid / WFH Options
Network IT
and artefact development across all SECRET Cloud platforms. Support network security assurance for current and future SECRET Cloud services. Develop compliant technology designs aligned with MOD 604, 440 governance, NCSC, and industry best practices. Produce High- and Low-Level Designs for integrating Tier 2 Hyperscale Cloud onto the Defence Network. Collaborate with supplier and cross-government network leads. Specialise in More ❯
and artefact development across all SECRET Cloud platforms. Support network security assurance for current and future SECRET Cloud services. Develop compliant technology designs aligned with MOD 604, 440 governance, NCSC, and industry best practices. Produce High- and Low-Level Designs for integrating Tier 2 Hyperscale Cloud onto the Defence Network. Collaborate with supplier and cross-government network leads. Specialise in More ❯
and artefact development across all SECRET Cloud platforms. Support network security assurance for current and future SECRET Cloud services. Develop compliant technology designs aligned with MOD 604, 440 governance, NCSC, and industry best practices. Produce High- and Low-Level Designs for integrating Tier 2 Hyperscale Cloud onto the Defence Network. Collaborate with supplier and cross-government network leads. Specialise in More ❯
and artefact development across all SECRET Cloud platforms. Support network security assurance for current and future SECRET Cloud services. Develop compliant technology designs aligned with MOD 604, 440 governance, NCSC, and industry best practices. Produce High- and Low-Level Designs for integrating Tier 2 Hyperscale Cloud onto the Defence Network. Collaborate with supplier and cross-government network leads. Specialise in More ❯