51 to 75 of 76 NIST Jobs in the North of England

Head of IT Security, Head of Cyber Security, ISO27001, NIST, CISM, CISO, Leeds Head of IT Security required to work for an exciting Law Firm based in Leeds, West Yorkshire. This will be a hybrid role where you will be expected to be in the office circa 2 days ...

practical knowledge of NCSC CAPS Evaluation processes and practices with awareness of generic Secure by Design Principles as presented by NCSC, UK MOD and NIST* Practical experience of following DevSecOps lifecycles for embedded software/firmware* Experience in safety-critical engineering and/or developing embedded software/firmware ...

assurance experience, in-house or in practice CISA qualified or working towards it Strong grounding in ITGCs, cyber security controls and cloud Familiarity with NIST, and ideally ISO 27001 or COBIT Someone who can challenge technical people constructively and land findings without friction Comfortable working autonomously and owning their ...

will partner with engineering and product teams to embed security-by-design and advance Zero Trust, IAM and compliance with PCI, ISO, CIS, NIST and GDPR. You will guide architecture decisions, evaluate emerging technologies, and drive incident readiness and resilience initiatives to protect a global mobility platform. #J-18808-Ljbffr ...

Threat hunting; monitoring for emerging security threats Ensure compliance with Vitality’s ISMS, Regulatory requirements and Information Security best practice frameworks (e.g. ISO27001, GDPR, NIST, Cyber Essentials, ITIL) to ensure the Confidentiality, Integrity and Availability of Vitality Information Systems Deliver key Information Security initiatives/projects, in line with InfoSec … configuring security tools Demonstrable experience of designing, implementing and managing information security initiatives Sound understanding of security frameworks (e.g. ISO27001/2, PCI DSS, NIST), Data Protection and regulatory compliance (e.g. FCA, ICO, PRA, GDPR) So, what’s in it for you? Bonus Schemes - A bonus that regularly rewards ...

networks and integration across complex environments Experience of delivering automation and integrating systems at scale Good understanding of security and resilience frameworks such as NIST and Zero Trust, as well as future trends and emerging technologies Ability to work across technical and business teams, influencing and building strong relationships Clear ...

identity, authorisation, supply‐chain integrity, and the need for guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. ...

based approaches are applied, produce management summaries, and support governance reporting. The role requires 5+ years in information security and strong knowledge of ISO27001, NIST CSF, and PCI-DSS. #J-18808-Ljbffr ...

cyber governance across the Group. You will own the cyber risk register, embed security policies and governance processes, and drive real-world application of NIST CSF and CIS Controls across multiple #J-18808-Ljbffr ...

audits. Strong knowledge of ISO 27002 and experience delivering against its requirements. Strong knowledge of Cyber Essentials/Cyber Essentials Plus. Experience working with NIST security frameworks. Knowledge of CAF/Cyber Assessment Framework and its application to organisational security. Understanding of NIS2, GDPR and the Data Protection Act. Strong … landscape and assess their impact on the organisation. Ensure compliance with relevant legislation, regulations, frameworks and security standards, including GDPR, Data Protection Act, NIS2, NIST, Cyber Essentials and ISO 27002. Lead and coordinate information security metrics, reporting and management information. Support and oversee offensive security activities, vulnerability management and security ...

access, and privileged access management strategies. Implementing security controls aligned with security standards, industry best practices and regulatory requirements such as PCI, ISO, CIS, NIST, CSA, NIS, GDPR etc. Evaluating emerging technologies, identifying security risks early, and influencing strategic technology decisions across the organisation. Guiding incident readiness and resilience initiatives … modern DevSecOps practices. You’re comfortable translating technical complexity into clear decisions, and confident working with stakeholders at all levels. You understand frameworks like NIST, ISO 27001, CIS, OWASP etc., and ideally have experience designing or supporting PCI compliant environments. You’re hands‐on with tools such as SIEM ...

use. Understanding of governance and assurance frameworks such as ISO/IEC 27701, ISO/IEC 27001, ISO/IEC 42001, and the NIST Privacy Framework. Collaborative team player with the ability to support, mentor and develop junior consultants. Self‐motivated with a proactive approach to personal development, industry awareness … infrastructure environments. Knowledge of international privacy frameworks and cross‐border data transfer mechanisms. Familiarity with governance and assurance frameworks including ISO/IEC 27001, NIST Privacy Framework, and Cyber Essentials. Experience of operating within consultancy or professional services organisations. Additional industry certifications relating to privacy, governance, information security ...

cyber security, audit, risk management, or assurance within a regulated or technical environment Understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Strong attention to detail and ability to follow structured assurance processes Good communication and documentation skills Degree or equivalent in cyber security ...

and development teams. Conduct risk assessments and threat modeling, proactively identifying vulnerabilities and mitigation strategies. Develop and maintain security policies and frameworks aligned with NIST, ISO 27001, and CIS Controls. Lead PCI‐DSS architecture and compliance, ensuring both front‐ and back‐office systems meet standards. Guide and mentor teams … security architecture or design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/ ...

and technical teams to implement secure configurations Support and maintain security policies, procedures and controls Ensure alignment with recognised frameworks including ISO 27001 and NIST Deliver user awareness initiatives such as phishing simulations and training Stay up to date with emerging threats and recommend improvements to strengthen security posture Support … platforms, vulnerability management tools and detection response technologies such as EDR, XDR or MDR Knowledge of cyber security frameworks such as ISO 27001 or NIST Understanding of data protection legislation including GDPR Ability to investigate incidents, analyse findings and communicate clearly with stakeholders Strong analytical and problem-solving skills Ability ...

Security Architect Start Date: ASAP 12-Month Fixed-Term Contract | Up to £90,000 Location: Watford We’re partnering with a high-profile, regulated consumer organisation to appoint an experienced Security Architect on a 12 ...

risk. Human Factors Policy & Governance Develop, maintain, and continuously improve policies related to human factors in cybersecurity, aligned to recognised good practice (including the NIST Cybersecurity Framework). Ensure policies are comprehensive, current, and effectively communicated across the organisation. Partner with Legal and Compliance to ensure policy content meets relevant … demonstrable equivalent knowledge. Proven experience in cybersecurity, with a focus on human factors, behaviour analysis, or organizational psychology. In-depth knowledge of the NIST Cybersecurity Framework and other relevant industry standards. Strong understanding of human behaviour, cognition, and decision‐making processes in the context of cybersecurity. Experience developing and implementing ...

and third-party risk assessments. Advising projects and stakeholders on cyber security and compliance requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology … Security or Cyber Security. Security Assurance or Risk Management. Infrastructure, Cloud or Security Operations environments. Compliance frameworks such as ISO 27001, CAF, PCI DSS, NIST and CIS Benchmarks. Working with auditors, suppliers and senior stakeholders. Experience of AI governance, ISO 42001 or modern Microsoft security technologies would be advantageous. ...

frameworks into practical improvements. Key Responsibilities Own and develop the Group cyber risk register. Develop and embed security policies, standards and governance processes. Apply NIST CSF and CIS Controls in a real-world environment — practical implementation experience is essential. Support alignment with NIST CSF, CIS Controls and ISO 27001 . … third-party security assurance and supplier risk management. About You You’ll have proven experience in Cyber GRC , with demonstrable hands-on experience using NIST CSF and CIS Controls to assess, improve or implement security controls. We’re looking for someone who is: Practical and commercially minded, rather than purely ...

frameworks into practical improvements. Key Responsibilities Own and develop the Group cyber risk register. Develop and embed security policies, standards and governance processes. Apply NIST CSF and CIS Controls in a real-world environment - practical implementation experience is essential. Support alignment with NIST CSF, CIS Controls and ISO 27001 . … third-party security assurance and supplier risk management. About You You’ll have proven experience in Cyber GRC , with demonstrable hands-on experience using NIST CSF and CIS Controls to assess, improve or implement security controls. We’re looking for someone who is: Practical and commercially minded, rather than purely ...

Information Security Risk Framework. Assess the effectiveness of information security controls and identify opportunities for improvement. Apply recognised security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, PCI-DSS, and other relevant best practices in a proportionate and risk-based manner. Liaise with Cyber Security, IT, Business Continuity … Management principles and methodologies. Experience conducting risk assessments, control reviews, audits, or assurance activities. Technical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS, and related security practices. Strong communicator with positive influencing and interpersonal skills. Ability to synthesise complex technical and ...

right way. What you'll do Lead our application and data security architecture, setting standards, principles, and best practices as per Industry Frameworks (NIST, CIS and Zero Trust) Make sure secure-by-design approaches are embedded into applications, platforms, APIs, cloud solutions, and data services using the Shift left methodology … architecture, including API integration, microservices, Kubernetes, and secure software development across Azure and/or AWS Good knowledge of security frameworks and standards, including NIST CSF, MITRE ATT&CK, OWASP, and how to apply security controls in DevOps platforms and processes Experience working across enterprise and solution architecture, with strong ...

Why Is This Role Different? This isn't a pure cloud role. We're looking for someone who understands how modern AWS platforms integrate into a broader enterprise ecosystem. You'll be designing solutions that ...

and perform cyber security audits Experience in producing Zones and Conduits Partitioning Diagrams, Cyber Security Requirements definition and cyber security Assurance ISO 27005/NIST 800-82/NIST 800-53 Knowledge Desirable requirements for the role include NIS/NIS2 knowledge Railway industry experience and TS 50701 Knowledge Understanding ...

and mitigation practices. Comprehensive understanding of operating within a digital technology environment, with a strong emphasis on cybersecurity. Knowledge of the NIST (National Institute of Standards and Technology) cybersecurity framework. Some other highly valued skills may include: Strong relationship management skills with both internal and external stakeholders. Experience in developing ...