14 of 14 Remote/Hybrid NIST Jobs in the South West

Desirable Degree in Information Security or significant programme security experience Certifications: CISSP, CISM, CRISC, CGRC (any) Knowledge of Government Standard 007, ISO 27001 and NIST Strong written/oral/presentation skills Supply chain security management experience/knowledge Experience supporting security awareness/education programmes Problem management and/ ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

accreditation and secure by design processes (ISN2023/09), and associated policies and practices across the lifecycle. \nIn the application of standards including NIST Special Publications (e.g. SP 800-30, 37 & 53), and/or RTCA-DO-326A/B, 355A & 356A.In the application of Defence security standards, such ...

strong understanding of security operations, threat detection and incident response You have a good knowledge of security standards and regulatory compliance requirements (ISO, NIST) You have experience with 3rd party risk management and supplier assurance You're familiar with penetration testing processes and remediation tracking You have a good understanding ...

Skills & Experience 2-3+ years' experience in cyber security, with a focus on vulnerability management, risk assessment, audit, and compliance. Strong understanding of NIST Cyber Security Framework and ISO 27001, with practical experience applying these standards. Knowledge of the MITRE ATT&CK framework. Experience working within Secure by Design ...

equivalent\n Knowledge/Experience: \n \n Substantive experience in product security \nHands-on experience with risk management frameworks and best practice like NIST SP800-37, ISO27001, and Secure by Design (ISN 2023/09)\n This is not an exhaustive list, and we are keen to hear from ...

will develop a deep understanding of relevant security requirements, apply design principles to security architectures and ensure alignment to relevant standards (eg. ISO27001, NIST, MoD standards). Requirements This programme requires an innovative security professional, passionate about improving security standards with experience of driving success in MoD (or government) environments. ...

command), from detection through containment and remediation. Working knowledge of MITRE ATT&CK and at least one recognised control framework (ISO 27001, CIS or NIST). Risk-based prioritisation of remediation using threat intelligence. Operated endpoint security and endpoint detection and response (EDR) tooling (e.g. CrowdStrike or equivalent ...

depth, proven experience in security operations, and the ability to translate complex risks into clear business impact. A background in frameworks such as ISO27001, NIST or similar, alongside relevant certifications, will be highly beneficial. Excellent benefits, flexible hybrid working, and the chance to make a genuine impact in a forward ...

Analytics, PRTG, SCCM, or similar) Centralised backup platforms (Azure Backup, Commvault, or similar) Experience supporting governance/compliance frameworks (ISO 27001, Cyber Essentials, NIST, or similar) Experience working in environments with multiple regions/tenants/business units Evidence of the following qualifications or equivalent on-the-job experience would ...

Security Assurance Coordinators in support of security Accreditation.\n What you'll bring: \n \n Practical experience of ISO27001/27004/27005 and NIST Risk Management Framework (RMF). \nExperience of owning a security risk management system for highly regulated products based on recognised frameworks such as aerospace, nuclear ...

Security Governance, Risk and Compliance Consultant to support an internal consultancy initiative aimed at aligning contractual security requirements with recognised industry frameworks such as NIST, ISO 27001, and Secure by Design principles. This role plays a key part in ensuring that both client-facing engagements and internal services meet contractual … practical, actionable solutions. Your role Security Requirements Alignment: Translate contractual and regulatory security requirements into actionable controls aligned with industry frameworks (e.g., ISO 27001, NIST, CIS). Risk Assessment & Gap Analysis: Evaluate existing security controls, identify gaps or weaknesses, and assess risks associated with non-compliance or control failure. Mitigation ...

risk reporting rather than treating it as a point-in-time exercise. \n Lead risk assessments and threat-modelling sessions, selecting methodologies (ISO 27005, NIST RMF, STRIDE, MITRE ATT&CK) that are proportionate to system criticality, and ensuring findings feed into programme governance decisions rather than sitting in security documentation … Essentials Plus, and the HMG Security Policy Framework — and how they interact in practice. \n Experience leading risk assessments using structured methodologies (ISO 27005, NIST RMF, or FAIR) and embedding risk outputs into programme governance rather than treating them as standalone deliverables. \n Demonstrated ability to design security controls and ...

within a commercial environment. What You'll Do Contribute to security assessment and improvement programmes aligned to frameworks such as ISO/IEC 27001, NIST CSF, Cyber Essentials, CAF, CSA CCM and comparable standards Perform structured gap analyses that consider business risk, regulatory drivers, and client priorities Support the execution … of cyber and information risk assessments using recognised approaches (e.g. ISO 27005, NIST RMF, FAIR or similar methodologies) Develop, review, and maintain security documentation including policies, standards, procedures, and supporting guidance Assist with the design and implementation of administrative, technical, and physical security controls mapped to relevant frameworks (including ...