21 of 21 NCSC Jobs in the South West

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

Looking For: Proven experience within Cyber Security Governance, Risk & Compliance (GRC) environments. Strong knowledge of NIST CSF, NIST 800-53, ISO 27001, and NCSC CAF . Experience conducting risk assessments and security control reviews. Ability to interpret regulatory or contractual requirements and translate them into actionable security controls. Excellent stakeholder ...

mitigation strategies across programmes Provide authoritative guidance on risk trade-offs and security posture Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC) Ensure architectural traceability from requirements through to controls and implementation Develop and lead the security architecture practice Mentor, coach, and upskill security architects and consultants Define ...

Understanding of the engineering lifecycle and key gate review activities. Knowledge of current Crypto technologies, Key Management Systems & practical COMSEC implementations and MOD/NCSC standards. Knowledge or experience of ARP4754A/ARP4761 and its interrelationship with security. This is not an exhaustive list, and we are keen to hear ...

Chartered Institute of Information Security (CIISec) - highly desirable. · Chartered or Principal status via the UK Cyber Security Council for Secure Systems Architecture. · NCSC Certified Cyber Professional in Security Architecture. · IEng or CEng registered with UK Engineering body. · Chartership through the British Computer Society. · SABSA Chartered Security Architect Other Information Market ...

programs, such as AWS APN and Azure Partners Experience with well-architected frameworks Knowledge of UK public sector technology guidance and frameworks, such as NCSC's Cyber Assessment Framework (CAF) and the Technology Code of Practice (TCoP) Familiarity with Python, Bash and JavaScript Agile practices such as Scrum ...

Legacy Windows technologies - Win32, WPF, MFC/ATL, COM, MSI packaging. Geospatial data formats - GeoJSON, MBTiles, GML. Familiarity with MOD Secure by Design and NCSC software security standards. Experience working in UK public sector or government digital services. Python geospatial tooling or data pipeline experience. Tech Stack: Backend: .NET Core ...

including advising on suitable product or platform lockdown and configurations. Knowledge of current Crypto technologies, Key Management Systems & practical COMSEC implementations and MOD/NCSC standards. Knowledge or experience of ARP4754A/ARP4761 and its interrelationship with security. Security Clearance This role is subject to pre-employment screening in line ...

across technical, operational and executive audiences. Coaching, mentoring and developing cyber security professionals. Experience in one or more of the following would be advantageous: NCSC guidance, UK Cyber Security Council frameworks and CIISec professional standards. Defence, Government, Critical National Infrastructure or other highly regulated sectors. Security governance, risk and compliance ...

Auditor or equivalent qualification At least 3 years' experience in auditing, compliance, or risk management in the Public Sector, particularly Defence. Strong understanding of NCSC CAF V3.2/V4.0. Strong analytical and problem-solving skills. Excellent communication and interpersonal skills. Ability to work independently and in a team environment. Strong ...

Auditor or equivalent qualification At least 3 years' experience in auditing, compliance, or risk management in the Public Sector, particularly Defence. Strong understanding of NCSC CAF V3.2/V4.0. Strong analytical and problem-solving skills. Excellent communication and interpersonal skills. Ability to work independently and in a team environment. Strong ...

equivalent) firewalls and Zero Trust architecture Proven experience defining WAN strategy, SD-WAN and resilient network design Deep understanding of security frameworks (e.g. NIST, NCSC, IEC 62443) Excellent communication skills with the ability to engage senior stakeholders Degree-level qualification (or equivalent) with relevant industry certifications (e.g. CCIE or CCNP ...

security requirements management and pragmatic risk treatment in fast-moving projects You have experience working with security control standards and frameworks e.g. ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others You have demonstrable continuous personal development, supported by relevant certifications and accreditations You have good interpersonal skills ...

access management requirements for shipboard systems. Support the definition and validation of secure architecture patterns across onboard and supporting environments. Apply relevant MOD, NCSC, defence, and maritime security frameworks to support assurance, accreditation, and compliance activities. Maintain and support security risk registers, ensuring risks are clearly articulated, owned, treated, tracked … Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer/Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF-related experience or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding, naval, critical national infrastructure or operationally critical environments would ...

shared engineering responsibility rather than a specialist handover at the end of a sprint. Navigate UK government security standards with confidence. Apply the NCSC Cyber Assessment Framework, GovAssure, Cyber Essentials, HMG Security Policy Framework, and relevant legislation (UK GDPR, NIS Regulations) proportionately across engagements — framing standards as guardrails that enable … expect every candidate to bring all of these. Certifications Certified in Risk and Information Systems Control (CRISC) Certified Information Security Manager (CISM) NCSC Certified Cyber Professional (CCP) Capabilities and experience Experience establishing and operating vulnerability management programmes at organisational scale — including risk-based prioritisation using EPSS, KEV, and asset criticality ...

shared engineering responsibility rather than a specialist handover at the end of a sprint. Navigate UK government security standards with confidence. Apply the NCSC Cyber Assessment Framework, GovAssure, Cyber Essentials, HMG Security Policy Framework, and relevant legislation (UK GDPR, NIS Regulations) proportionately across engagements - framing standards as guardrails that enable … expect every candidate to bring all of these. Certifications Certified in Risk and Information Systems Control (CRISC) Certified Information Security Manager (CISM) NCSC Certified Cyber Professional (CCP) Capabilities and experience Experience establishing and operating vulnerability management programmes at organisational scale - including risk-based prioritisation using EPSS, KEV, and asset criticality ...

principles, ensuring collaboration on shared tooling, intelligence and incident coordination. - Represent the Trust and ICS on regional and national cyber forums, ensuring alignment with NCSC, NHS England Cyber Operations Centre (CSOC) and DHSC guidance. Operational Management - Lead and develop the Cyber Security Team to deliver proactive monitoring, detection, response … including vulnerability management, penetration-testing remediation, phishing simulations and user awareness campaigns. - Maintain robust incident-response plans compliant with Data Security Protection Toolkit and NCSC guidance, ensuring all major incidents are logged, triaged and reported within mandated timescales. - Coordinate technical response during cyber events, acting as joint Incident Manager ...

clearly framed around risk and remediation rather than just compliance status. Drive continuous compliance monitoring against applicable standards and regulations - Cyber Essentials, the NCSC Cyber Assessment Framework, GovAssure, UK GDPR, and NIS Regulations - feeding posture data into governance and risk reporting rather than treating it as a point-in-time … Information Systems Control (CRISC). Certified Information Systems Security Professional (CISSP). Experience advising clients on UK government security frameworks including GovAssure, the NCSC Cyber Assessment Framework, Cyber Essentials Plus, and the HMG Security Policy Framework and how they interact in practice. Experience leading risk assessments using structured methodologies ...

security assurance across large, complex transformation programmes involving multiple suppliers and stakeholders. Strong knowledge of government security policies and frameworks, including Secure by Design, NCSC guidance and related standards. Experience conducting security assessments, audits and assurance reviews. Experience reviewing technical security architectures and providing constructive challenge to delivery teams. Strong … Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within highly regulated public sector or government environments. What's on Offer ...

security assurance across large, complex transformation programmes involving multiple suppliers and stakeholders. Strong knowledge of government security policies and frameworks, including Secure by Design, NCSC guidance and related standards. Experience conducting security assessments, audits and assurance reviews. Experience reviewing technical security architectures and providing constructive challenge to delivery teams. Strong … Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within highly regulated public sector or government environments. What's on Offer ...

what the SOC is seeing into the language that informs decisions. The UK public sector context matters here. You'll align your work to NCSC guidance, the Cyber Assessment Framework, and OFFICIAL handling requirements - not because compliance is the goal, but because those frameworks reflect the real risk environment your … train L1/L2 analysts to write and tune detections themselves. Own the threat-landscape narrative for your engagement - turn intelligence from NCSC advisories, sector feeds, and threat actor reporting into hunt themes, coverage gap analysis, and detection priorities that the SOC and client stakeholders can act on. ...