26 to 50 of 51 NIST Jobs in the North West

evidence you could pick this up quickly. • Working knowledge of at least one information security or privacy framework, such as ISO 27001, SOC 2, NIST, or GDPR. • Ability to translate how a product works in security requirements and risks. • Strong written and verbal communication skills, with the ability to explain ...

working in manufacturing, industrial environments or factory IT/OT architecture. Knowledge of industrial network segmentation and security frameworks, including IEC 62443 and relevant NIST guidance. Experience with edge infrastructure platforms such as Azure Local, Dell NativeEdge or Kubernetes-based environments. Familiarity with ServiceNow, SIAM and enterprise service transition ...

business systems. Strong understanding of hybrid/cloud convergence and securing legacy or brownfield enterprise landscapes. Knowledge of recognised enterprise security standards such as NIST CSF, ISO 27001, and zero-trust principles. Experience designing secure segmentation models (zero-trust, micro-segmentation), next-gen firewalls, and secure remote access solutions. Familiarity ...

with those who have demonstrated expertise and experience in one of the following domains:* **Security Assurance –** Delivering robust security frameworks such as ISO 27001, NIST, and Cyber Essentials to clients, ensuring their systems and processes meet industry standards and are resilient to threats and tailoring it to our client … applications through the assessment, design or implementation of effective and secure architectural patterns that align with industry standards (e.g. CIS L1/2, NIST, ISO27001, COBIT, etc.).## **Key expectations from this role include:**##As part of your role, you will also have the opportunity to contribute to the business ...

of technology risk, controls, cyber security, infrastructure, cloud services and enterprise applications. Proven understanding and application of recognised industry frameworks, including COBIT, ITIL and NIST CSF. About us. Here at National Highways, we manage and improve England\'s motorways and major A roads, helping our customers have safer, smoother and ...

of IT/OT convergence and securing legacy or brownfield industrial estates. Knowledge of recognised OT security standards such as IEC 62443 (ISA-99), NIST SP 800-82 , and application of the Purdue Model . Experience designing secure segmentation models (zones and conduits), industrial firewalls, and secure remote access solutions. ...

security threats,actorsand their techniques. Experience defining security strategy or leading transformation initiatives Knowledge of relevant security & AI governance frameworks andregulations, such asMitreATT&CK, NIST, TSA. Any relevantstudy or certifications, either formal or self-learning. A 50-50 joint venture between Tesco and VMO2 that was established back ...

assurance experience, in-house or in practice CISA qualified or working towards it Strong grounding in ITGCs, cyber security controls and cloud Familiarity with NIST, and ideally ISO 27001 or COBIT Someone who can challenge technical people constructively and land findings without friction Comfortable working autonomously and owning their ...

based approaches are applied, produce management summaries, and support governance reporting. The role requires 5+ years in information security and strong knowledge of ISO27001, NIST CSF, and PCI-DSS. #J-18808-Ljbffr ...

expertise across VMware Cloud Foundation, NSX-T, Palo Alto, data centre networking, Linux and Windows platforms, alongside a solid understanding of security frameworks including NIST 800-53, CIS and STIGs. Experience within Government, Defence or other highly secure environments is highly desirable. Key Skills: VMware VCF, NSX-T, VxRail/ ...

networks and integration across complex environments Experience of delivering automation and integrating systems at scale Good understanding of security and resilience frameworks such as NIST and Zero Trust, as well as future trends and emerging technologies Ability to work across technical and business teams, influencing and building strong relationships Clear ...

identity, authorisation, supply‐chain integrity, and the need for guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. ...

will partner with engineering and product teams to embed security-by-design and advance Zero Trust, IAM and compliance with PCI, ISO, CIS, NIST and GDPR. You will guide architecture decisions, evaluate emerging technologies, and drive incident readiness and resilience initiatives to protect a global mobility platform. #J-18808-Ljbffr ...

access, and privileged access management strategies. Implementing security controls aligned with security standards, industry best practices and regulatory requirements such as PCI, ISO, CIS, NIST, CSA, NIS, GDPR etc. Evaluating emerging technologies, identifying security risks early, and influencing strategic technology decisions across the organisation. Guiding incident readiness and resilience initiatives … modern DevSecOps practices. You’re comfortable translating technical complexity into clear decisions, and confident working with stakeholders at all levels. You understand frameworks like NIST, ISO 27001, CIS, OWASP etc., and ideally have experience designing or supporting PCI compliant environments. You’re hands‐on with tools such as SIEM ...

cyber assurance, audit, risk management, or control testing within a regulated environment In-depth understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Domain-specific knowledge in at least one of: OT, technical architecture, or supply chain security Strong analytical, reporting, and stakeholder engagement ...

and access management (IAM).Strong engineering background with expertise in Windows Server, endpoint platforms, macOS, and Linux. Strong knowledge of information security frameworks, including NIST and relevant NIST 800-series publications. Hands-on experience with SIEM technologies, including data ingestion, monitoring, alerting, and integration with security operations processes. Proficiency ...

and development teams. Conduct risk assessments and threat modeling, proactively identifying vulnerabilities and mitigation strategies. Develop and maintain security policies and frameworks aligned with NIST, ISO 27001, and CIS Controls. Lead PCI‐DSS architecture and compliance, ensuring both front‐ and back‐office systems meet standards. Guide and mentor teams … security architecture or design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/ ...

cyber security, audit, risk management, or assurance within a regulated or technical environment Understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Strong attention to detail and ability to follow structured assurance processes Good communication and documentation skills Degree or equivalent in cyber security ...

and third-party risk assessments. Advising projects and stakeholders on cyber security and compliance requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology … Security or Cyber Security. Security Assurance or Risk Management. Infrastructure, Cloud or Security Operations environments. Compliance frameworks such as ISO 27001, CAF, PCI DSS, NIST and CIS Benchmarks. Working with auditors, suppliers and senior stakeholders. Experience of AI governance, ISO 42001 or modern Microsoft security technologies would be advantageous. ...

outset. Conducting security architecture reviews, risk assessments and threat modelling to identify vulnerabilities and recommend appropriate mitigations. Applying recognised security frameworks and standards, including NIST and ISO 27001, to inform security designs and strengthen security controls. Designing and reviewing secure solutions across cloud, network or infrastructure environments. Assessing existing architectures … Experience applying Secure by Design principles, conducting threat modelling and carrying out security risk assessments. Knowledge of recognised security frameworks and standards, such as NIST and ISO 27001. Experience supporting large-scale infrastructure, integration or technology transformation projects. Relevant certifications such as CISSP, CISM, IISP/CCP, TOGAF or SABSA. ...

Information Security Risk Framework. Assess the effectiveness of information security controls and identify opportunities for improvement. Apply recognised security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, PCI-DSS, and other relevant best practices in a proportionate and risk-based manner. Liaise with Cyber Security, IT, Business Continuity … Management principles and methodologies. Experience conducting risk assessments, control reviews, audits, or assurance activities. Technical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS, and related security practices. Strong communicator with positive influencing and interpersonal skills. Ability to synthesise complex technical and ...

risk. Human Factors Policy & Governance Develop, maintain, and continuously improve policies related to human factors in cybersecurity, aligned to recognised good practice (including the NIST Cybersecurity Framework). Ensure policies are comprehensive, current, and effectively communicated across the organisation. Partner with Legal and Compliance to ensure policy content meets relevant … demonstrable equivalent knowledge. Proven experience in cybersecurity, with a focus on human factors, behaviour analysis, or organizational psychology. In-depth knowledge of the NIST Cybersecurity Framework and other relevant industry standards. Strong understanding of human behaviour, cognition, and decision‐making processes in the context of cybersecurity. Experience developing and implementing ...

right way. What you'll do Lead our application and data security architecture, setting standards, principles, and best practices as per Industry Frameworks (NIST, CIS and Zero Trust) Make sure secure-by-design approaches are embedded into applications, platforms, APIs, cloud solutions, and data services using the Shift left methodology … architecture, including API integration, microservices, Kubernetes, and secure software development across Azure and/or AWS Good knowledge of security frameworks and standards, including NIST CSF, MITRE ATT&CK, OWASP, and how to apply security controls in DevOps platforms and processes Experience working across enterprise and solution architecture, with strong ...

Our client is a UK airports group. Why Is This Role Different? This isn't a pure cloud role. We're looking for someone who understands how modern AWS platforms integrate into a broader enterprise ...

security operations, identity, risk, governance and assurance, alongside experience leading teams and major security suppliers. Skills, Knowledge & Expertise Knowledge of frameworks including ISO 27001, NIST CSF, NIS2, CAF and Cyber Essentials Plus is important, as is the ability to translate technical risk into clear business and Board-level decisions. Leading … 24x7 SOC, MDR or other major security suppliers Major incident response and executive/client/regulator communications ISO 27001, ISO 27701, ISO 22301, NIST CSF, NIS2, CAF and Cyber Essentials Plus Translating technical risk into clear business and Board-level decisions Operating across multiple countries, cultures and business functions ...