76 to 87 of 87 NCSC Jobs in England

clearly framed around risk and remediation rather than just compliance status. Drive continuous compliance monitoring against applicable standards and regulations - Cyber Essentials, the NCSC Cyber Assessment Framework, GovAssure, UK GDPR, and NIS Regulations - feeding posture data into governance and risk reporting rather than treating it as a point-in-time … Information Systems Control (CRISC). Certified Information Systems Security Professional (CISSP). Experience advising clients on UK government security frameworks including GovAssure, the NCSC Cyber Assessment Framework, Cyber Essentials Plus, and the HMG Security Policy Framework and how they interact in practice. Experience leading risk assessments using structured methodologies ...

clearly framed around risk and remediation rather than just compliance status. Drive continuous compliance monitoring against applicable standards and regulations - Cyber Essentials, the NCSC Cyber Assessment Framework, GovAssure, UK GDPR, and NIS Regulations - feeding posture data into governance and risk reporting rather than treating it as a point-in-time … Information Systems Control (CRISC). Certified Information Systems Security Professional (CISSP). Experience advising clients on UK government security frameworks - including GovAssure, the NCSC Cyber Assessment Framework, Cyber Essentials Plus, and the HMG Security Policy Framework - and how they interact in practice. Experience leading risk assessments using structured methodologies ...

security assurance across large, complex transformation programmes involving multiple suppliers and stakeholders. Strong knowledge of government security policies and frameworks, including Secure by Design, NCSC guidance and related standards. Experience conducting security assessments, audits and assurance reviews. Experience reviewing technical security architectures and providing constructive challenge to delivery teams. Strong … Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within highly regulated public sector or government environments. What's on Offer ...

security assurance across large, complex transformation programmes involving multiple suppliers and stakeholders. Strong knowledge of government security policies and frameworks, including Secure by Design, NCSC guidance and related standards. Experience conducting security assessments, audits and assurance reviews. Experience reviewing technical security architectures and providing constructive challenge to delivery teams. Strong … Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within highly regulated public sector or government environments. What's on Offer ...

network environments. Working alongside infrastructure, network and systems engineering teams, you will ensure solutions are secure by design and compliant with MOD and NCSC security standards. You'll play a key role in security assurance, risk management and accreditation activities throughout the project lifecycle. Responsibilities Design and develop security architectures … Support security assurance, accreditation and governance activities. Work closely with infrastructure, network and engineering teams to embed security throughout delivery. Ensure compliance with MOD, NCSC and industry security standards. Provide technical guidance on secure infrastructure, identity, cryptography and boundary protection technologies. Essential Skills & Experience Proven experience as a Security Architect ...

strategy aligned with regulatory expectations and industry best practice. Define and maintain IAM policies, standards and governance frameworks in line with ISO 27001, NCSC guidance and PRA operational resilience requirements. Lead the implementation, configuration and integration of IAM and PAM technologies across cloud, enterprise and third-party environments. Drive improvements … within a regulated environment. Experience identifying and mitigating identity risks, improving resilience and supporting incident response and recovery planning. Good understanding of ISO 27001, NCSC guidance and PRA/FCA operational resilience requirements, with the ability to apply security and governance best practice. Experience designing identity governance and assurance frameworks ...

delivering experience with leading security and healthcare assurance frameworks, including the NHS Data Security and Protection Toolkit and Cyber Assessment Framework (DSPT-CAF), National Cyber Security Centre Cyber Assessment Framework (NCSC CAF), ISO27001:2013/2022, NIST Cyber Security Framework and other relevant regulatory or assurance requirements. Advising healthcare organisations ...

what the SOC is seeing into the language that informs decisions. The UK public sector context matters here. You'll align your work to NCSC guidance, the Cyber Assessment Framework, and OFFICIAL handling requirements - not because compliance is the goal, but because those frameworks reflect the real risk environment your … train L1/L2 analysts to write and tune detections themselves. Own the threat-landscape narrative for your engagement - turn intelligence from NCSC advisories, sector feeds, and threat actor reporting into hunt themes, coverage gap analysis, and detection priorities that the SOC and client stakeholders can act on. ...

Risk Profile (CRP) audit work. Responsibilities: Plan and conduct audits of customer processes and systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssure. Support and, over time, help lead audit activity, ensuring findings are properly documented and reported. Communicate audit findings … risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills/Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience of cyber report writing. Relevant ISO certification (for example ISO 27001 Lead Auditor ...

Audit Consultant role over time. Responsibilities: Plan and conduct audits of customer processes and systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssure. Support and, over time, help lead audit activity, ensuring findings are properly documented and reported. Communicate audit findings … risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills/Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience of cyber report writing. Relevant ISO certification (for example ISO 27001 Lead Auditor ...

technical domains. Design end-to-end solutions spanning networks, cloud, identity, endpoint, backup, security, safeguarding, compliance and operational monitoring using reference architectures and DfE, NCSC and KCSIE guardrails. Produce and defend high-quality proposal content including solution overviews, HLDs, diagrams, SOWs, scope, assumptions, responsibilities and acceptance criteria. Present recommendations confidently … part of a wider "One Team". Nice to have: Previous experience working in or closely aligned to the education sector with understanding of NCSC, DfE and KCSIE standards. If not, your ability to understand educational outcomes and translate them into effective IT solutions is what counts. What we offer ...

engineering product development lifecycle Though not essential to succeed in the role, the following may also be useful: A working practical knowledge of NCSC CAPS Evaluation processes and practices with awareness of generic Secure by Design Principles as presented by NCSC, UK MOD and NIST Practical experience of following DevSecOps ...