22 of 22 NIST Jobs in Scotland

Controls Experience assessing control design and operating effectiveness across technology and security processes. Good understanding of industry standards and frameworks such as ISO 27001, NIST Cybersecurity Framework, CIS Controls and COBIT. Strong report writing, communication and stakeholder management skills. Proven ability to communicate highly technical matters in a simple, risk ...

of infrastructure and application security requirements, demonstrated through understanding of recognised information security management and governance frameworks such as, ISF Standards of Good Practice, NIST 800-53 or CIS 7.1. An understanding of the regulations and legislation that apply to a pension and investment organisation would be advantageous. Skills: Strong ...

great fit if you have: Experience in cyber security, risk, compliance or consulting Knowledge of security frameworks such as ISO 27001, NIST or CAF Strong analytical and problem-solving skills Excellent communication and report-writing abilities Confidence working with both technical and non-technical stakeholders A passion for helping organisations ...

complex and highly regulated environments. Excellent stakeholder management skills, with the ability to influence at executive level. Knowledge of frameworks such as ISO 27001 , NIST , Cyber Essentials and recognised security best practice. Professional certifications such as CISSP , CISM or equivalent are desirable. Contract Details Duration: 12 months Location: East Kilbride ...

organisational culture, with an emphasis on balancing security needs with useability and reducing user friction. Technical Mastery: Knowledge of security frameworks (e.g. ISO 27001, NIST, and/or NCSC guidance), security risk management, security architecture, and best practices for safeguarding sensitive assets. Regulatory Compliance: Familiarity with UK legislation, standards, and ...

programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve challenging security problems through research ...

Intelligence analysis, SOC Tools administration & Security Forensics, Security Engineering You have good understanding and experience of Cyber Security Frameworks and standards (NCSC security principles, NIST Framework, ISO 27001, ISO27005, IEC62443 etc) You have great attention to detail, a confident communicator across various business levels and decision-maker when required Having ...

Security, or IT Security roles Proven expertise in security risk management, governance, compliance, and audit activities Good knowledge of frameworks such as ISO 27001, NIST, HIPAA, and HITRUST Experience across cloud, network, infrastructure, and data security environments Ability to manage security incidents, risk assessments, and regulatory requirements Excellent communication skills ...

record of delivering digital transformation and technology change programmes ** Strong understanding of information and cyber security, ideally including Cyber Essentials Plus, ISO 27001 or NIST ** Strong Microsoft technology experience across Azure, Microsoft 365 and wider IT infrastructure ** Experience overseeing servers, networks, end-user technology, communications, backup/recovery and ...

and business‐critical reporting data. Experience in AI governance, responsible AI, AI risk management, or AI data access controls; familiarity with frameworks such as NIST AI Risk Management, ISO AI Management standards, or equivalent. Practical implementation of international data standardisation frameworks for harmonising definitions, taxonomies, and formats across regions. Experience ...

Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005, IEC62443 etc. Experience and knowledge of Industrial Control Systems is advantageous, but you will be provided with the opportunity to learn ...

Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005, IEC62443 etc. Experience and knowledge of Industrial Control Systems is advantageous, but you will be provided with the opportunity to learn ...

Identity & Access Management (IAM) tools and platforms within a regulated environment. Access Management Governance Proficiency e.g. Control/Process design – knowledge of standards (NIST etc) Solid understanding of access certification and governance, Role-Based Access Control (RBAC), Segregation of Duties (SoD), and least privilege principles Relevant Information Security certification such ...

design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR, and PCI-DSS Working closely with engineers, architects, and stakeholders to embed security by design Contributing to Agile delivery teams and supporting continuous improvement About ...

REST and SOAP APIs. Good understanding of identity lifecycle management, access controls and least privilege principles. Experience working within security frameworks such as ISO27001, NIST or CIS. Excellent communication skills with the ability to engage technical and non-technical stakeholders. What's in it for me? Salary ...

across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance activities. - Facilitate governance forums, stakeholder workshops and senior executive briefings to embed decision rights and reporting ...

LLDs, SOPs) and Penetration Testing scopes. Ensure full compliance with UK security policies (including JSP 440, JSP 604, JSP 453), NCSC guidance, and the NIST framework. Requirements Clearance: Must hold active, full transferable DV (Developed Vetting) Clearance . Sector Experience: Proven track record as a Security Architect or SME within ...

Principal Accountabilities Information Security Develop, implement, and maintain information and cyber security policies, standards, and procedures Ensure alignment with recognized frameworks (ISO 27001, NIST CSF, CIS Controls) Conduct risk assessments across IT, cloud, and Operational Technology (OT) environments Support incident response planning and continuous improvement of security controls Embed secure … implementing data governance frameworks Strong understanding of international data protection and cybersecurity regulations JOB DESCRIPTION Experience working within regulated environments Familiarity with ISO 27001, NIST, or equivalent frameworks Experience supporting audit and compliance processes Desired Experience in the energy, utilities, or critical infrastructure sector Exposure to Operational Technology (OT) environments ...

security outcomes. Engage with clients to understand their threat landscape and business context, conducting risk and compliance assessments against recognised frameworks (e.g. ISO 27001, NIST, SOC 2). Design, review and advise on the implementation and adoption of information security policies, standards, procedures and frameworks. Lead cyber and third‐party … leading GRC and security assurance initiatives. You possess strong knowledge of recognised cyber security frameworks and standards, including ISO/IEC 27001, NIS Directives, NIST, and UK Government Functional Standards, with demonstrable experience aligning security controls to MOD requirements such as DEFSTAN 05-138, JSP 440, JSP 604 and Defence ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

standards and embed best practice. You will have the opportunity to influence PAM strategy, deliver complex security projects and work with industry frameworks including NIST, NCSC, ISO27001 and CIS. Privileged Access Management (PAM) Security Engineer Responsibilities Design, implement and manage Privileged Access Management solutions, ensuring secure access to critical systems … compliance requirements. Work with internal teams and stakeholders to improve identity security baselines across the organisation. Develop security recommendations aligned to industry standards including NIST, NCSC and ISO27001. Support threat modelling, vulnerability assessments and continuous improvement initiatives. Provide technical guidance and mentoring to wider cyber security teams. Privileged Access Management ...

FSP Retail Team is looking for a Senior Security Consultant to join their Governance, Risk and Assurance team in the UK. This role offers the opportunity to utilize extensive cybersecurity expertise, advising clients, leading technical ...