19 of 19 Remote/Hybrid NIST Jobs in Scotland

cyber risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber.Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2 or equivalent.Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage ...

dispersed enterprise.Hands‐on experience with ISO/IEC 27001 (ISMS lifecycle, Annex A controls, risk assessment and treatment) and related security control frameworks (e.g., NIST CSF, ISO 27000, TISAX, etc.).Demonstrated experience with Integration Risk Management (project/solution risk assessments) and Third‐Party Risk Management (vendor due diligence, ongoing ...

architecting cyber security solutions by:Creating high-level and low-level designs that align with business objectives and comply with industry cybersecurity standards (e.g., NIST). Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM ...

of work history such as:Information Security qualification (or equivalent) e.g. CISSP.In-depth knowledge of security frameworks, standards, and best practices (e.g., ISO 27001, NIST, CIS).Experience as a Security Architect or in a similar role, with a strong track record of designing and implementing security controls and/ ...

of work history such as:Information Security qualification (or equivalent) e.g. CISSP.In-depth knowledge of security frameworks, standards, and best practices (e.g., ISO 27001, NIST, CIS).Experience as a Security Architect or in a similar role, with a strong track record of designing and implementing security controls and/ ...

of work history such as:Information Security qualification (or equivalent) e.g. CISSP.In-depth knowledge of security frameworks, standards, and best practices (e.g., ISO 27001, NIST, CIS).Experience as a Security Architect or in a similar role, with a strong track record of designing and implementing security controls and/ ...

environments, including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems.Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent.GenAI security: experience assessing and mitigating risks ...

equivalent experienceRelevant qualifications, for example ITIL, CISSP, CIPP/E, COMPTIA SECURITY+, SANS401, 501 etc. Familiarity with information security frameworks such as ISO27001, NIST etc; Willingness to operate as part of an ‘on-call roster’, travelling to assist our UK and EMEA clients when required in an incident management capacity ...

with equivalent security platforms.Understanding of cloud security, network/system security fundamentals, and scripting for automation.Familiarity with compliance and security standards (GDPR, HIPAA and NIST).Willingness to be assessed against the requirements for SC clearance.We welcome the unique contribution diverse applicants bring and do not discriminate based on culture, ethnicity ...

and understanding of AI technologies, including machine learning concepts and generative AI use cases.Familiarity with security frameworks and regulations such as ISO 27001, NIST, or UK GDPR, and how these apply to AI systems.Experience supporting technical implementation, validation, and testing of security controls within applications or platforms.Strong analytical and organisational ...

enhance analysis and decision support.Desirable criteria: Knowledge of IAM, PAM, SIEM/SOC, network segmentation, vulnerability management, data protection, operational resilience, FCA, DORA, ISO27001, NIST, Microsoft 365, Azure, Entra ID, Active Directory, ServiceNow and Microsoft Sentinel.We are proud to be a Disability Confident Committed employer. If you have a disability ...

development and mentoring of junior team members. Confident understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005. Varied Experience of assessing risk and building or evolving risk management framework components such as measurement criteria. Good ...

design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR, and PCI-DSS Working closely with engineers, architects, and stakeholders to embed security by design Contributing to Agile delivery teams and supporting continuous improvement About ...

of AI technologies including machine learning concepts, common model architectures, and emerging generative AI capabilities.Experience with security frameworks and regulations, such as ISO 27001, NIST and UK GDPR. (5+ years exp)Demonstrated experience in conducting risk assessments, threat modelling, and security audits. (5+ years exp)Good communication, project management, and ...

with a pragmatic mindset and the confidence to operate across both technical and business environments. Familiarity with frameworks such as NIS CAF, ISO or NIST, and an understanding of modern threat landscapes, will set you up for success.In return, you’ll gain exposure across critical infrastructure, renewable energy systems, and ...

ensuring that security controls, processes, and governance frameworks are effective, auditable, and aligned to industry standards including ISO 27001, Cyber Essentials Plus, GDPR, NIST, and contractual security obligations. The Analyst provides security oversight, assurance, and risk-based guidance across projects, operational services, and technology changes while supporting secure-by-design … audit, or risk management activities. Familiarity with security standards, certifications, and compliance frameworks, including: o ISO 27001 o Cyber Essentials Plus o GDPR o NIST Cyber Security Framework o ITIL Experience maintaining security risk registers, control frameworks, policies, standards, and compliance documentation. Understanding of vulnerability management processes, remediation tracking, and ...

across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance activities. - Facilitate governance forums, stakeholder workshops and senior executive briefings to embed decision rights and reporting ...

rules.Conduct post-incident analysis and lessons learned to refine response strategies.Monitor emerging threats to proactively integrate new protections and ensure compliance with standards (OWASP, NIST).Basic RequirementsBasic Requirements & QualificationsExperience & Education: 7+ years in Security/Application Engineering; Bachelor’s degree in Computer Science, Information Security, or a related field.Leadership: Proven … integrating security tooling (SCA, SAST, DAST) into CI/CD pipelines.Software Engineering: Hands-on development experience, specifically in Go and C#.Standards & Frameworks: Knowledge of NIST, ISO 27001, CIS, and OWASP (ASVS/Testing Guides).Desirable QualificationsAdvanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/ ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...