51 to 75 of 79 NIST Jobs in London

and communication skills. Experience managing complex projects with multiple workstreams and dependencies. Strong governance, risk and delivery management skills. Experience with ISO 27001, NIS2, NIST, GDPR, third-party risk or critical national infrastructure. Get your Cv over for immediate consideration ...

understanding of quantum threat models like Shor's and Grover's algorithms . Crypto-Agility & Standards: Practical experience designing crypto-agile systems aligned with NIST, FIPS, or ISO 27001 standards. Tooling & Scripting: Proficiency in Python (preferred), Bash , or PowerShell . Nice to Have: Exposure to PQC algorithms (e.g., CRYSTALS-Kyber ...

Strong skills working with Wazuh (essential), as well as other SIEM tools (preferably Splunk) Experience working with StreamAlert (or similar) Excellent knowledge of ISO27001, NIST or Cyber Essentials Extensive knowledge of security threats, controls, processes and solutions Strong communication skills Comfortable in a primarily remote role with occasional travel ...

rotation and decommissioning of privileged credentials Planning and delivering upgrades, health checks and post-upgrade assurance Defining Safes, RBAC and master policies aligned to NIST and Zero Trust Building custom CPM/PSM connectors and automation scripts Providing SME-level support for incidents and troubleshooting Maintaining HLD, LLD and knowledge ...

energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum 2 days onsite/client site). Annual performance bonus. ...

utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within Agile delivery environments. What's on Offer Hybrid working (minimum ...

of OT security principles such as segmentation, access control, remote connectivity controls, patch governance and recoverability. Familiarity with relevant guidance/frameworks (IEC 62443, NIST, CIS) is advantageous but not essential. OT/cyber awareness certification (e.g., IEC 62443 fundamentals, GIAC GICSP) desirable but not required . Core Competencies Strong ...

of OT security principles such as segmentation, access control, remote connectivity controls, patch governance and recoverability. Familiarity with relevant guidance/frameworks (IEC 62443, NIST, CIS) is advantageous but not essential. OT/cyber awareness certification (e.g., IEC 62443 fundamentals, GIAC GICSP) desirable but not required . Core Competencies Strong ...

security transformation initiatives Desirable experience: • Experience with SailPoint, Saviynt, Omada, Okta, One Identity, or other IGA platforms • Knowledge of security frameworks including ISO 27001, NIST, and COBIT • Exposure to Active Directory, cloud identity solutions, and reporting platforms such as Power BI • Experience onboarding applications and cloud services into ...

and controls held inside a technology organisation, covering data, tech and cyber. Secure SDLC, IAM, cloud and data controls, audit evidence, third-party risk, NIST or ISO 27001, ICO and GDPR, EU AI Act. Real depth in generative and agentic systems. Evaluation, guardrails, adversarial testing, agent identity. A teaching record ...

and risk assessment Familiarity with tools such as Tenable OT, Nozomi, Claroty, or similar Understanding of OT architectures and security frameworks (e.g., IEC 62443, NIST) Ability to communicate technical findings to a range of stakeholders Guidant, Carbon60, Lorien & SRG - The Impellam Group Portfolio are acting as an Employment Business ...

Operational Risk, Technology Risk, IT Risk or Risk & Governance within a regulated financial services environment Experience working with recognised frameworks such as COBIT, NIST, ITIL or similar Excellent stakeholder management and communication skills Experience supporting regulatory compliance and governance activities The ability to translate complex technical risk issues into clear ...

across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance activities. - Facilitate governance forums, stakeholder workshops and senior executive briefings to embed decision rights and reporting ...

Cyber Security Consultant for our client based in East London. You must have strong experience within recognised frameworks and regulations including ISO 27001, SOC2, NIST Cyber Security Framework, NIST 800-61, GDPR, NIS2, Cyber Essentials. Minimum five years' experience in Cyber Security. Must have knowledge of the following: EDR, SIEM … Operations, Incident Response, Security Assurance, or GRC functions. Experience managing or overseeing MSSP, SOC activities, third party management. Strong understanding of: ISO 27001, SOC2, NIST Cyber Security Framework, Incident Response methodologies, Cyber Security Governance, GDPR and regulatory compliance Certifications (one or more) CISSP CISM CRISC The Cyber Security Assurance & Incident ...

data lineage, retention and evidence requirements. - Experience translating policy or control requirements into practical backlog items, acceptance criteria and evidence artefacts. - Working knowledge of NIST-style controls, SOC 2, ISO 27001 and enterprise GRC expectations. - Experience with Trade Secret, confidential or sensitive technical data handling. - Strong documentation skills for standards ...

data residency and cloud security. Evaluate security technologies and support vendor selection. Embed security into new products, platforms and technology projects. Translate ISO 27001, NIST, CIS and GDPR requirements into practical technical controls. Present security recommendations to senior technology and business stakeholders. Required experience: At least 5–10 years’ experience … data leakage and model integrity. Zscaler, Palo Alto Prisma, Netskope or an equivalent SASE platform. CISSP, CISM, CCSP, TOGAF or SABSA certification. ISO 27001, NIST, NIS2 and data-residency requirements. Legal or professional-services experience. BYOK or hardware security module solutions. This position requires an established Security Architect ...

LonWorks or similar Comfortable owning platform lifecycle, servers, databases, backups Vendor certs a bonus (Trend, Siemens, Schneider, Honeywell, Tridium Niagara) IEC 62443/NIST/CIS awareness advantageous, not essential RG Setsquare is acting as an Employment Agency in relation to this vacancy. ...

and recommending mitigations. Supporting security assurance and governance activities throughout the project lifecycle. Advising clients on security frameworks and regulatory standards including ISO 27001, NIST and GDPR. Producing security documentation, architecture artefacts and risk assessments. Working closely with architects, engineers, delivery teams and senior stakeholders. Researching emerging threats and helping … Single Sign-On (SSO). Privileged Access Management (PAM). Network Security. Cloud Security. Encryption technologies. Threat modelling. Security frameworks such as ISO 27001, NIST or equivalent. Strong communication and stakeholder management skills. Professional certifications such as CISSP, SABSA or similar are desirable but not essential. What's on Offer ...

and reporting Conduct vulnerability assessments and coordinate remediation with technical teams Assist with security control reviews and audits against frameworks such as ISO 27001, NIST CSF, and Cyber Essentials Contribute to the development and improvement of security policies and procedures Liaise with internal stakeholders and, where required, third-party vendors … security fundamentals and common attack vectors Familiarity with at least one major cloud platform (Azure, AWS, or GCP) Knowledge of relevant frameworks (ISO 27001, NIST CSF, Cyber Essentials) Strong analytical skills and attention to detail Good communication skills, with the ability to explain technical risk to non-technical stakeholders Desirable ...

infrastructure when required. Role responsibilities: Information Security (90%) Lead the organisation's information security strategy and technical security operations. Drive compliance with ISO 27001, NIST and CBEST frameworks. Review new infrastructure and cloud-based services, ensuring they meet security standards. Conduct vulnerability management activities and coordinate external penetration testing. Work … TACACS, IPS and endpoint protection. Security monitoring and incident response within SIEM environments. Vulnerability management and penetration testing. Security governance aligned to ISO 27001, NIST and risk management frameworks. Developing security policies, conducting audits and managing security incidents. Desirable skills: Exposure to tools such as Rapid7, LogRhythm SIEM, Trellix and ...

guidance to ensure security risks are understood, managed and remediated in line with organisational risk appetite and recognised best practice frameworks (e.g. ISO 27001, NIST, CIS Controls). Key Responsibilities Deliver security risk identification, assessment, analysis and logging activities, ensuring risks are clearly articulated, consistently scored and recorded in approved … and non-technical audiences. Experience working collaboratively with multidisciplinary teams across business and technology functions. Familiarity with recognised security frameworks and standards (ISO 27001, NIST, CIS Controls). Candidates must hold government security vetting at SC level and be able to meet UK residency requirements. What ...

Existing and emerging AI regulatory frameworks Legal sector obligations and professional standards Working knowledge of relevant security and AI governance frameworks, including ISO 27001, NIST, ISO 42001 or the NIST AI RMF. Proven ability to partner with senior technology stakeholders. Excellent judgment with a commercial and pragmatic approach to risk. … experience advising senior leadership. Desirable Experience working directly with AI tools, automation programs, or legal tech platforms. Knowledge of frameworks such as ISO 27001, NIST, or similar. Experience in third-party/vendor risk management. Legal or regulatory background (e.g. lawyer, compliance officer) is advantageous. Company Description ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

Design and implement AI governance frameworks, operating models, policies, and controls. Support clients in navigating emerging AI regulations and standards, including theEU AI Act, NIST AI RMF, and ISO 42001. Conduct AI risk assessments, model governance reviews, and responsible AI evaluations. Facilitate governance workshops and engage with senior stakeholders across … Model Governance projects within a consulting environment. Strong understanding of AI governance frameworks and regulatory requirements. Experience with standards such as: EU AI Act NIST AI Risk Management Framework ISO/IEC 42001 ISO/IEC 23894 OECD AI Principles Experience conducting AI risk or algorithmic impact assessments. Knowledge of ...

Identify control weaknesses and risks, providing practical, tailored recommendations. Support clients in developing and improving security controls aligned with frameworks including Cyber Essentials, ISO27001, NIST CSF, and CIS Controls. Maintain knowledge of emerging threats, regulations and industry best practice. Produce clear, high-quality reports, risk assessments and advisory documentation. Build … auditing, or risk advisory. Experience delivering cyber risk assessments or advisory engagements. Knowledge of security frameworks and standards such as Cyber Essentials, ISO27001, and NIST Strong written and verbal communication skills, with the ability to explain technical concepts to non-technical audiences. Experience managing engagements independently and collaboratively, delivering high ...