26 to 39 of 39 NIST Jobs in Manchester

identity, authorisation, supply‐chain integrity, and the need for guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. ...

will partner with engineering and product teams to embed security-by-design and advance Zero Trust, IAM and compliance with PCI, ISO, CIS, NIST and GDPR. You will guide architecture decisions, evaluate emerging technologies, and drive incident readiness and resilience initiatives to protect a global mobility platform. #J-18808-Ljbffr ...

access, and privileged access management strategies. Implementing security controls aligned with security standards, industry best practices and regulatory requirements such as PCI, ISO, CIS, NIST, CSA, NIS, GDPR etc. Evaluating emerging technologies, identifying security risks early, and influencing strategic technology decisions across the organisation. Guiding incident readiness and resilience initiatives … modern DevSecOps practices. You’re comfortable translating technical complexity into clear decisions, and confident working with stakeholders at all levels. You understand frameworks like NIST, ISO 27001, CIS, OWASP etc., and ideally have experience designing or supporting PCI compliant environments. You’re hands‐on with tools such as SIEM ...

cyber assurance, audit, risk management, or control testing within a regulated environment In-depth understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Domain-specific knowledge in at least one of: OT, technical architecture, or supply chain security Strong analytical, reporting, and stakeholder engagement ...

and access management (IAM).Strong engineering background with expertise in Windows Server, endpoint platforms, macOS, and Linux. Strong knowledge of information security frameworks, including NIST and relevant NIST 800-series publications. Hands-on experience with SIEM technologies, including data ingestion, monitoring, alerting, and integration with security operations processes. Proficiency ...

and development teams. Conduct risk assessments and threat modeling, proactively identifying vulnerabilities and mitigation strategies. Develop and maintain security policies and frameworks aligned with NIST, ISO 27001, and CIS Controls. Lead PCI‐DSS architecture and compliance, ensuring both front‐ and back‐office systems meet standards. Guide and mentor teams … security architecture or design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/ ...

cyber security, audit, risk management, or assurance within a regulated or technical environment Understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Strong attention to detail and ability to follow structured assurance processes Good communication and documentation skills Degree or equivalent in cyber security ...

and third-party risk assessments. Advising projects and stakeholders on cyber security and compliance requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology … Security or Cyber Security. Security Assurance or Risk Management. Infrastructure, Cloud or Security Operations environments. Compliance frameworks such as ISO 27001, CAF, PCI DSS, NIST and CIS Benchmarks. Working with auditors, suppliers and senior stakeholders. Experience of AI governance, ISO 42001 or modern Microsoft security technologies would be advantageous. ...

outset. Conducting security architecture reviews, risk assessments and threat modelling to identify vulnerabilities and recommend appropriate mitigations. Applying recognised security frameworks and standards, including NIST and ISO 27001, to inform security designs and strengthen security controls. Designing and reviewing secure solutions across cloud, network or infrastructure environments. Assessing existing architectures … Experience applying Secure by Design principles, conducting threat modelling and carrying out security risk assessments. Knowledge of recognised security frameworks and standards, such as NIST and ISO 27001. Experience supporting large-scale infrastructure, integration or technology transformation projects. Relevant certifications such as CISSP, CISM, IISP/CCP, TOGAF or SABSA. ...

Information Security Risk Framework. Assess the effectiveness of information security controls and identify opportunities for improvement. Apply recognised security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, PCI-DSS, and other relevant best practices in a proportionate and risk-based manner. Liaise with Cyber Security, IT, Business Continuity … Management principles and methodologies. Experience conducting risk assessments, control reviews, audits, or assurance activities. Technical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS, and related security practices. Strong communicator with positive influencing and interpersonal skills. Ability to synthesise complex technical and ...

risk. Human Factors Policy & Governance Develop, maintain, and continuously improve policies related to human factors in cybersecurity, aligned to recognised good practice (including the NIST Cybersecurity Framework). Ensure policies are comprehensive, current, and effectively communicated across the organisation. Partner with Legal and Compliance to ensure policy content meets relevant … demonstrable equivalent knowledge. Proven experience in cybersecurity, with a focus on human factors, behaviour analysis, or organizational psychology. In-depth knowledge of the NIST Cybersecurity Framework and other relevant industry standards. Strong understanding of human behaviour, cognition, and decision‐making processes in the context of cybersecurity. Experience developing and implementing ...

right way. What you'll do Lead our application and data security architecture, setting standards, principles, and best practices as per Industry Frameworks (NIST, CIS and Zero Trust) Make sure secure-by-design approaches are embedded into applications, platforms, APIs, cloud solutions, and data services using the Shift left methodology … architecture, including API integration, microservices, Kubernetes, and secure software development across Azure and/or AWS Good knowledge of security frameworks and standards, including NIST CSF, MITRE ATT&CK, OWASP, and how to apply security controls in DevOps platforms and processes Experience working across enterprise and solution architecture, with strong ...

Our client is a UK airports group. Why Is This Role Different? This isn't a pure cloud role. We're looking for someone who understands how modern AWS platforms integrate into a broader enterprise ...

Access mentoring, knowledge sharing and professional development opportunities to support your career growth Expand your understanding of industry standards and frameworks including IEC 62443, NIST CSF and NIS/NIS2 Progress through clearly defined technical and professional development pathways as your experience grows Benefits A global network of expertise and … both IT and OT networks (e.g., endpoint protection tools, firewalls, intrusion detection systems). Familiarity with key standards, frameworks, and regulations, including IEC 62443, NIST CSF, the ISO 27000 series, MITRE ATT&CK, and NIS/NIS2. Excellent stakeholder engagement and communication skills, with the ability to articulate threat-based ...