1 to 25 of 28 Remote/Hybrid NIST 800 Jobs in England

risks between System 1 (products) and System 2 (enabling systems). Apply NIST risk management frameworks and standards, including NIST SP 800-30, 800-37, 800-53 and the NIST Cybersecurity Framework. Facilitate alignment between engineering and security … Experience Proven experience in security risk management, product security or security risk integration. Strong knowledge of NIST frameworks, particularly NIST SP 800-37 and NIST SP 800-53 . Understanding of security risk assessment, threat analysis, vulnerability assessment and mitigation ...

compliance Working knowledge of security principles, IT security controls and related technologies and products Familiarity with relevant security and control frameworks, including NIST 800-53, NIST 800-171, NIST 800-66, CMMC, NIST Framework, ISO, HITRUST ...

starting point of minimal security maturity. Supporting clients to implement frameworks, standards, and guidance, including ISA/IEC62443, NCSC CAF, NIST SP 800-82, ISO 27001, HSE OG86. Helping clients to understand their attack vectors that could be exploitable by threats. Designing secure OT network architectures … cyber security in OT & IT. Knowledge of cyber security frameworks, including but not limited to ISA/IEC62443, NCSC CAF, NIST SP 800-82, HSE OG86, ISO 27001. Awareness and understanding of the OT security threat landscape. Ability to understand and articulate the impacts of cyber ...

coordinating evidence collection, and resolving assessment findings and control gaps in a SaaS, cloud, or technology environment. Strong working knowledge of NIST SP 800-53, including evaluating control implementations, validating evidence, and maintaining ongoing compliance. Technical understanding of cloud architectures, system boundaries, inherited controls, and shared … aligning controls and evidence across federal requirements, CJIS, SOC 2, ISO 27001, or international public sector frameworks. Familiarity with CMMC and NIST SP 800-171. People who thrive on our team tend to share the following traits: - Humble, open, and curious: You invite collaboration ...

Information Assurance Strategies to meet complex customer security requirements. Lead risk management activities that align with an industry standard such as NIST SP 800-37 or the ISO/IEC 27000 series. Create and maintain security documentation including system security plans, policies, procedures, and compliance evidence. … Security The ability to interpret and implement industry security standards and frameworks such as the ISO/IEC 27000 series or NIST SP-800 series. Experience in information assurance, security engineering, cyber security, or a similar field. Deep understanding of security risk management and assurance methodologies & processes. Experience ...

security risk identification, assessment, treatment and acceptance activities. Conduct threat modelling, security assessments and architectural risk reviews. Apply recognised frameworks including ISO 27001, NIST RMF and NIST 800-53. Support security accreditation, governance and assurance processes. Provide recommendations to reduce risk while enabling … security architecture frameworks and methodologies. Experience conducting threat modelling, risk assessments and security assurance activities. Working knowledge of ISO 27001, ISO 27002, NIST RMF and NIST 800-53 frameworks. Experience designing secure cloud, infrastructure and network solutions. Strong stakeholder engagement, communication and documentation skills. ...

ensuring traceability across technologies and processes. The successful candidate will map controls to originating frameworks (ISO/IEC 27001:2022, NIST SP 800-53, NIST CSF, CAF, Cyber Essentials Plus) and define governance with #J-18808-Ljbffr ...

will design and develop a unified set of technology, cyber security and IT controls, mapping to ISO/IEC 27001:2022, NIST SP 800-53, NIST CSF and CAF, and drive governance across Technology, Security and Risk teams. #J-18808-Ljbffr ...

consistently understood and applied across the client. Consolidate frameworks, standards and regulatory requirements: Analyse and rationalise ISO/IEC 27001:2022, NIST SP 800-53, NIST CSF, Cyber Assessment Framework (CAF), Cyber Essentials Plus and applicable legal/regulatory obligations, identifying overlaps, duplication, conflicts ...

consistently understood and applied across the client. Consolidate frameworks, standards and regulatory requirements : Analyse and rationalise ISO/IEC 27001:2022, NIST SP 800-53, NIST CSF, Cyber Assessment Framework (CAF), Cyber Essentials Plus and applicable legal/regulatory obligations, identifying overlaps, duplication, conflicts ...

Proven track record managing enterprise-scale vulnerability remediation programmes Experience operating within complex, global organisations Exposure to regulatory environments such as NIST SP 800-40, DORA, FCA/PRA requirements, ISO 27001 and NIST Cybersecurity Framework Strong understanding of risk-based vulnerability prioritization Proven ...

scan results reported by the ISSOs to provide assurance that IT system operation meets specified security control implementation requirements as specified in the NIST SPB00 … supporting DHS guidance. Review documentation submitted in support of requesting a waiver for compliance with specified security requirements per the NIST SP 800-53, and provide recommendations to the client for approval and acceptance of associated risk. Review and assess system changes to determine the level ...

Previous experience analyzing data from security scanning tools such as Tenablio, Qualys Guard, Acunetix, Frontline, Nexpose, etc. Working knowledge of the NIST SP 800-37 Risk Management Works well independently and possesses a solid understanding of cyber security concepts. Ability to communicate clearly and effectively ...

implementation documentation (HLDs, LLDs, work instructions) from a security perspective Conduct and routinely manage security risk assessments and associated security controls using NIST 800 methodologies, and lead mitigation action Produce security awareness material, briefings, and Security Operating Procedures (SyOPs) for system users and maintainers Manage third … governance, risk, and compliance experience in secure or regulated environments, including producing assurance documentation and evidence Experience applying Secure by Design principles and NIST 800 risk assessment methodologies Experience managing IT health checks, penetration tests, and vulnerability assessments through to remediation Ability to evaluate technical design ...

/or Okta. Experience designing enterprise logging and security monitoring architectures. Familiarity with security frameworks such as SABSA, TOGAF or NIST SP 800-53. If you're an experienced Security Architect available for your next contract and have a strong background in cyber transformation ...

processes (ISN2023/09), and associated policies and practices across the lifecycle.* In the application of standards including NIST Special Publications (e.g. SP 800-30, 37 & 53), and/or RTCA-DO-326A/B, 355A & 356A.* In the application of Defence security standards, such ...

ISN2023/09), and associated policies, practices and deliverables across the lifecycle. In the application of standards including NIST Special Publications (e.g. SP 800-30, 37 & 53), and/or RTCA-DO-326A/B, 355A & 356A. That extends outside of traditional enterprise IT scenarios extending ...

operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part of a fast-growing community of like-minded … ensure ongoing effectiveness Identify control gaps, deficiencies, and areas for improvement Compliance & Risk Alignment Assess controls against relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2) Assess control effectiveness across: Design Effectiveness (DE), Operating Effectiveness (OE) and Control Automation (CA) Support regulatory and internal compliance ...

equivalent experience.* Strong and demonstrable experience in Excel, PowerPoint, and other Office applications.* An understanding of cybersecurity control and risk assessment frameworks (e.g., NIST CSF, CIS, NIST 800-53, ISO 27001) and their unique differences.* Awareness of the regulatory landscape and well-known data ...

equivalent experience. Strong and demonstrable experience in Excel, PowerPoint, and other Office applications. An understanding of cybersecurity control and risk assessment frameworks (e.g., NIST CSF, CIS, NIST 800-53, ISO 27001) and their unique differences. Awareness of the regulatory landscape and well‐known data ...

have either CISSP, CISM or CRISC qualification. Comprehensive knowledge of risk management, specifically around information security. With experience in recognised methodologies such as NIST 800-30/37, ISO 31000 etc. Experience of working with system, operational and strategic level risk. Demonstrable experience of threat modelling … intelligence into actionable reports. Working knowledge of information security. Demonstrable experience of providing advice, guidance and assuring documentation against security standards such as NIST, ISO27001, CIS, CAF, HMG GovS 007 and NPSA. Experience of working in multiple projects and initiatives with limited supervision; working effectively across multiple internal ...

implements roadmaps and plans to close gaps. Develop, communicate and implement a suitable security management solution based on ISO/IEC 27001 and NIST 800-53. Consults on security direction, maintaining oversight over assurance of the information security management system and information systems assets. Cooperates ...

security risk Lead the technical design of systems and services, advising on appropriate security controls from best of breed security standards: Such as NIST 800-53; ISO27001; IEC62443; NCSC CAF and other industry-relevant and government standards Assure the implementation of security controls through life, from ...

mentoring of junior team members. Confident understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005. Varied Experience of assessing risk and building or evolving risk management framework components such as measurement criteria. Good ...

Procurement functions Strong Knowledge of IS and Privacy Frameworks/standards such as SSAE16 Type II, Safe Harbor, ISO/IEC 2700x series, NIST 800-53, COBIT, HITRUST, HIPAA, PCI etc. Strategy & Vision Ability to translate business strategy, regulatory requirements, and risk posture into actionable security ...