151 to 175 of 386 NIST Jobs in England

programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve challenging security problems through research ...

programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve challenging security problems through research ...

Knowledge of UK MOD and Government security standards and frameworks, including GovS 007, HMG IS1 & IS2 and relevant JSPs . Knowledge of frameworks including NIST SP800-30/37/53 and ISO 27001 . Experience working directly with product development and engineering teams. Knowledge of current cryptographic technologies and ...

both technical and non-technical audiences. Strong leadership, problem-solving and stakeholder-management capabilities. Familiarity with security frameworks such as ISO 27001 and NIST is advantageous. Relevant professional qualifications such as CISSP, ITIL, CompTIA Security+, SANS or equivalent would be beneficial. Existing Government Security Clearance is advantageous, although candidates should ...

and vulnerability assessment, security governance and risk acceptance is important. Experience with frameworks such as ISO 27001, ISO 27005, the NCSC Cyber Assessment Framework, NIST or MOD security standards would be beneficial. Experience within defence, government, critical infrastructure or another high-assurance environment would be particularly relevant. Experience with cloud ...

regulatory consultations and certification body interactions. What We're Looking For Proven, hands‐on experience with ISO 27001/27004/27005 and the NIST Risk Management Framework (RMF), applied to regulated hardware or embedded product programmes. Experience owning a security risk management system for highly regulated, safety‐critical products ...

/GCP/Azure CISM/CISSP/CRISC/ISO 27001 LI/LA/CISA Experience of core control frameworks, such as, NIST, SANS Top 20 CSC, ISO 27001, Privacy, NIS and CAF. Behaviours Flexibility in working hours (as per client requirement). Ability to travel both nationwide ...

compliance, risk management and security frameworks. Identify and respond to cyber threats and vulnerabilities. Experience Strong hands-on cyber security experience and knowledge of NIST, CIS and PCI-DSS. Experience with Cortex XDR, Illumio Core/CloudSecure and Microsoft Security. Knowledge of Defender, Azure AD, Purview and Sentinel. Experience with ...

Trust, ZTNA, SASE, SSE, network segmentation, and SDN. Financial services/banking or other highly regulated industry experience. Knowledge of PCI-DSS, ISO 27001, NIST CSF, and CIS Controls. Experience supporting cloud migration, hybrid networking, and network security transformation. Security certifications such as CISSP, CCNP/CCIE Security, PCNSE, CCSP ...

managing and developing an Information Security team. We're looking for: Proven experience leading cyber/information security and compliance teams Strong knowledge of NIST, NIS2, ISO 27002, Cyber Essentials Plus and GDPR Experience managing enterprise risk registers and security metrics Experience with ISO 27002/Cyber Essentials Plus audits ...

managing and developing an Information Security team. We’re looking for: Proven experience leading cyber/information security and compliance teams Strong knowledge of NIST, NIS2, ISO 27002, Cyber Essentials Plus and GDPR Experience managing enterprise risk registers and security metrics Experience with ISO 27002/Cyber Essentials Plus audits ...

Service Edge (SSE) technologies. Experience within large-scale financial services, banking, or other highly regulated environments. Knowledge of regulatory frameworks including PCI-DSS, ISO27001, NIST Cyber Security Framework, CIS Controls, and relevant financial industry regulations. Experience supporting network security transformation, cloud migration, and hybrid networking programmes. Familiarity with software-defined ...

Infrastructure-as-Code (e.g., Terraform, CloudFormation, ARM) and scripting (e.g., PowerShell, Python, Bash). Familiarity with cloud security best practices and compliance frameworks (e.g., NIST 800-53, JSP 440, ISO 27001). Strong communication, documentation, and mentoring skills. Desired Active SC/DV status Professional cloud certifications (e.g., AWS Solutions ...

Strong experience configuring EDR tools CrowdStrike Falcon or MS Defender Experience with Incident Response and Vulnerability management Knowledge of frameworks such as ISO 27001, NIST, CIS or PCI-DSS Experience with modern Microsoft security tooling Experience working in Professional Services or enterprise environments Hybrid working: 3 days onsite/ ...

their timeline, without breaking the systems that run their business. Lead architecture reviews, threat modelling sessions, and control gap assessments against frameworks like NIST, ISO 27001, and industry-specific regulation. Translate risk into a roadmap Turn assessment findings into a prioritised remediation plan the client's engineering teams can actually ...

years of hands‐on experience as a Devops or Platform engineer Excellent understanding of networking andA WS cloud. Knowledge of security frameworks (ISO 27001, NIST) applied in practice. Experience with DevOps tooling, automation, and secure system design. Certifications such as CISSP, CISM, CCSP, or cloud security certifications are desirable. Desirable ...

Bachelor’s degree and/or equivalent experience in cybersecurity, technology, risk, or related disciplines. Working knowledge of industry control frameworks (e.g., CIS/NIST‐aligned approaches). Understanding of project and delivery methodologies (e.g., Agile/Waterfall); formal qualification beneficial but not mandatory given the oversight nature of ...

development and mentoring of junior team members. Confident understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005. Varied Experience of assessing risk and building or evolving risk management framework components such as measurement criteria. Good ...

and audit level Knowledge & Skills Proven understanding of information and cybersecurity principles, cybersecurity risk management frameworks, and the delivery and verification of ISO 27001, NIST SP 800-53, CE+, or DCC controls Ability to influence internal stakeholders, using data and analysis to support reasoning Can work independently, in compliance with ...

recognised methods such as STRIDE and MITRE ATT&CK for Industrial Control Systems, expressed as attack paths. Support the preliminary security risk assessment using NIST SP 800-30 and ISO/IEC 27005, and maintain entries in the design risk register. Capture security requirements and maintain the traceability thread from ...

and other regional laws in those fields; it helps if you understand related frameworks and standards, such as ISO 27001, 27701, 23894 and 42001, NIST Privacy and AI Risk Management frameworks, SOC 2, and Privacy by Design (PbD) principles. On the last bullet: we are interested in your practical abilities ...

fraud detection, digital banking security, and third-party/vendor risk management. Advise financial institutionsonregulatory compliance(e.g., FCA/PRA, - relevant regulations, , ISO 27001, NIST,CSF, Data Privacy regulation). Act as a thought leader, contributing to industry forums, white papers, and public discussions ondigital security, cyber risks, and operational ...

technology platforms (OneTrust, ServiceNow GRC, Archer, MetricStream, or similar). Familiarity with widely used GRC frameworks and standards (ISO 27001, ISO 27701, SOC 2, NIST CSF, COSO, or similar). Working knowledge of GDPR, the EU AI Act, and the wider regulatory landscape across the UK and EU. Exposure ...

equivalent qualification in risk, IT or information security. Strong technical experience in IT, information security, technology risk and resilience, including frameworks such as NIST and ISO 27001. Proven second line experience in risk oversight, assessment, control evaluation and embedding enterprise risk frameworks and risk appetite. Demonstrated leadership and delivery capability ...

and influence outcomes in support of enterprise projects. You will be confident working across the major information security frameworks and standards, including ISO 27001, NIST and SOC 2, and able to shape risk, compliance and control decisions in a way that keeps both us and our clients secure without slowing ...