21 of 21 NIST Jobs in Hampshire

such as CISSP, CISM, CISA, CEH , or an equivalent qualification demonstrating advanced security expertise. Strong knowledge of cybersecurity frameworks and standards, including ISO 27001, NIST, CIS Controls , and experience supporting their implementation and continuous improvement. Hands-on experience with security technologies, tools, monitoring platforms, and SIEM solutions , including incident detection ...

Manager. Coordinate with all teams during critical incidents. Ensure compliance of the Consolidated SOC with relevant standards (e.g., ISO 27001, SOC 2, NIST, GDPR). Provide regular reporting to leadership on Consolidated SOC metrics, trends, and risks. What We’re Looking For We value people who take ownership, think critically ...

DevSecOps security. Knowledge of application security and common web application vulnerabilities. Experience using SIEM, EDR and threat intelligence alongside vulnerability data. Knowledge of NIST, CIS, ISO 27001 or Cyber Essentials. Relevant security certifications such as CISSP, CISM, GIAC, OSCP or similar. ...

equivalent Or an equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience of Enterprise ...

demonstrable experience Strong communication, analytical and report-writing skills Desirable Experience Knowledge and application of Secure by Design principles Experience working with ISO 27001, NIST or similar security frameworks Understanding of security assurance and compliance activities Familiarity with classified or highly regulated environments Experience within Defence, Government, Critical National Infrastructure ...

CISSP, CISM, or equivalent**Knowledge/Experience:*** Substantive experience in product security* Hands-on experience with risk management frameworks and best practice like NIST SP800-37, ISO27001, and Secure by Design (ISN 2023/09)This is not an exhaustive list, and we are keen to hear from you even ...

CompTIA Security+, CySA+, CEH, or equivalent Experience with Purview Compliance workloads (eDiscovery, audit logs, retention) Familiarity with ISO 27001, Cyber Essentials Plus, or NIST CSF Experience working with or managing an external SOC relationship Experience in a peer-model security team or SOC environment Exposure to a regulated industry with ...

business, security, infrastructure, and compliance teams to develop security roadmaps, assess risks, integrate modern security technologies, and ensure alignment with industry frameworks such as NIST 800-207. The role requires extensive experience in security architecture, cloud security, identity management, and enterprise risk management, combined with strong stakeholder engagement and … related disciplines, with experience delivering security solutions within Defence or highly regulated environments. Proven experience designing and implementing Zero Trust Architectures, aligned to NIST SP 800-207 principles. Strong knowledge of Identity and Access Management (IAM), network security, endpoint security, cloud security, and security monitoring capabilities. Experience developing and integrating ...

particularly interested in people with skills/experience in: Able to perform Risk management using industry approved methodologies (such as NIST 800-53). Identification of suitable risk management activities (technical, physical, or procedural) to treat/mitigate the identified risks; Support development in a secure by design methodology ...

of Product Security, to deliver effective security assurance and risk management. What you'll bring: Practical experience of ISO27001/27004/27005 and NIST Risk Management Framework (RMF). Experience of supporting a security risk management system for highly regulated products based on recognised frameworks such as aerospace, nuclear ...

competitive bids to secure new business. Maintain active knowledge of evolving AI governance frameworks and standards (e.g. ISO/IEC 42001, EU AI Act, NIST) to build immediate credibility with prospective clients. Define product roadmaps based on real client feedback and partner capabilities, coordinating with internal delivery teams to ensure ...

data security. Understanding of threat modelling and risk assessment methodologies. Knowledge of ITAR regulations and export control requirements. Understanding of security standards (ISO 27001, NIST CSF, etc.). Practical knowledge of common IT architectures and technologies. Personal Attributes Strong analytical and problem-solving skills. Excellent leadership skills. Excellent written and ...

people with skills/experience as described below. Essential experience includes: Experience of working on risk assessments using industry approved methodologies (such as NIST, ISO 27005). Producing clear, actionable risk treatment plans aligned to security objectives to treat/mitigate the identified risks. Experience supporting compliance and assurance activities ...

repeatable code. Monitoring and enforcement: Use telemetry and automated controls to detect, contain and respond to anomalies. Core Technical Skills Zero Trust: NCSC and NIST frameworks, micro-segmentation, software-defined perimeters and context-aware access. Cloud and infrastructure security: Azure, AWS, and on-premises virtualised infrastructure. Infrastructure as Code: Terraform ...

collaborate with outsourced IT providers. Broad understanding of networking, infrastructure, and enterprise technologies. Experience in multi‐customer, multi‐classification, secure environments. Experience in cybersecurity, NIST frameworks, and assurance processes. Experience leading teams and managing vendors. SC Clearance (or eligible). Contract Details £700–750/day Outside IR35 Initial ...

advise on vulnerability, risk, audit and compliance in business contexts across multiple UK sites including Portsmouth, Farnborough and Bristol. You will apply frameworks like NIST and ISO27001, develop risk models, support accreditation and governance, and articulate mitigations to customers, while coordinating with stakeholders and expanding knowledge of MITRE ATT&CK. ...

management, digital signatures, key management systems (KMS), and HSMs. Post-Quantum Cryptography (PQC) Knowledge: Strong understanding of quantum computing threats to modern encryption, NIST PQC standards, hybrid key exchange, and strategies for achieving crypto‐agility. Threat Modeling & System Design: Demonstrated ability to perform threat modeling on complex cloud-native applications … clear guidance for both technical teams and senior leadership. Desirable Experience in Fintech, Banking, or highly regulated cloud environments (e.g. PCI-DSS, ISO 27001, NIST guidelines). Demonstrated background in a highly technical role (e.g. Security Engineering, Infrastructure Engineering, Penetration Testing). Experience in infrastructure, application, and AI security (e.g. ...

business, security, infrastructure, and compliance teams to develop security roadmaps, assess risks, integrate modern security technologies, and ensure alignment with industry frameworks such as NIST 800-207. The role requires extensive experience in security architecture, cloud security, identity management, and enterprise risk management, combined with strong stakeholder engagement and … architecture, or related disciplines, with experience delivering security solutions within Defence or highly regulated environments.Proven experience designing and implementing Zero Trust Architectures, aligned to NIST SP 800-207 principles.Strong knowledge of Identity and Access Management (IAM), network security, endpoint security, cloud security, and security monitoring capabilities.Experience developing and integrating security ...

with business, security, infrastructure and compliance teams to develop security roadmaps, assess risk, integrate modern security technologies and ensure alignment with frameworks such as NIST SP 800-207. Key Responsibilities Architect solutions and technically lead their implementation, including on-prem secure cloud and Zero Trust architecture, in line with … security, security architecture or related disciplines, including delivery within Defence or highly regulated environments Proven experience designing and implementing Zero Trust Architectures aligned to NIST SP 800-207 Strong knowledge of IAM, network security, endpoint security, cloud security and security monitoring Experience integrating security architectures into wider enterprise, cloud and ...

and project stakeholders. Identifying opportunities to improve security services through upgrades, automation and better operational processes. You'll also help maintain alignment with the NIST Cybersecurity Framework and applicable Network and Information Systems (NIS) Regulations. What You'll Bring You'll have significant hands-on experience supporting complex IT, network … of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability to maintain security policies, procedures, technical documentation and audit evidence. A methodical approach ...

articulating mitigations for cyber risk developing cyber security risk case to customers. Your responsibilities will include: Applying cyber security frameworks and industry standards, including NIST and ISO27001, to support risk assessments and security assurance activities Assisting with the identification, assessment and documentation of cyber security risks, vulnerabilities and mitigation strategies … Consultant: Previous experience in security vulnerability, risk, audit & compliance Digitally literate (including fluency in Microsoft Office tools) Previous experience applying/working to relevant NIST and ISO27001 frameworks and standards Essential qualifications for the Cyber Security Consultant: STEM degree or equivalent or relevant experience We value difference and ...