26 to 49 of 49 NIST Jobs in the South West

and on-premise environments. A security-first mindset and confidence working with both technical and non-technical stakeholders. Knowledge of frameworks such as NIST, ISO 27001, CIS, GDPR would be preferred. A proactive, accountable approach- you like owning outcomes. Why This Role Stands Out This isn't just another security ...

Directory/LDAP, SIEM, and ITSM tools. Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO 27001). Stakeholder Engagement: Engage directly with stakeholders, including visiting secure customer sites to build trusted relationships and ensure successful delivery. Required Skills & Experience ...

and privileged access management. Experience with threat modelling methodologies such as STRIDE, PASTA, or equivalent. Knowledge of security frameworks and standards including: - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - CIS Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including ...

energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum 2 days onsite/client site). Annual performance bonus. ...

energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum 2 days onsite/client site). Annual performance bonus. ...

Design recognised approaches. Experience/knowledge of the GOV ASSURE scheme would be advantageous. Experience/knowledge and practical application of ISO27000/NIST family is highly desirable. Experience/knowledge and practical application of Secure by Design recognised approaches. Experience in defence, MOD or nuclear programmes. Familiarity with classified ...

utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within Agile delivery environments. What's on Offer Hybrid working (minimum ...

utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001/27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within Agile delivery environments. What's on Offer Hybrid working (minimum ...

Secure by Design framework; Supporting the development of the necessary Information Assurance artefacts and outcomes which support compliance against the MoD assurance process (NIST 800-37/53); Support Information Assurance based engagements with Partners/suppliers and Authority representatives; Support and contribute towards Security Working Groups and forums with … environments and technology (e.g. AWS, Azure, Google); Knowledge of the Software Development Lifecycle for applications and services; Working knowledge of Gov Standard 007: Security, NIST standards (800-30/37/53/161), MITRE ATT&CK, CIS Controls, ISO 27001/5, Def-Stan 05-138, and Industry Security ...

across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance activities. - Facilitate governance forums, stakeholder workshops and senior executive briefings to embed decision rights and reporting ...

across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance activities. - Facilitate governance forums, stakeholder workshops and senior executive briefings to embed decision rights and reporting ...

and risk reporting rather than treating it as a point-in-time exercise. Lead risk assessments and threat-modelling sessions , selecting methodologies (ISO 27005, NIST RMF, STRIDE, MITRE ATT&CK) that are proportionate to system criticality, and ensuring findings feed into programme governance decisions rather than sitting in security documentation … Cyber Essentials Plus, and the HMG Security Policy Framework - and how they interact in practice. Experience leading risk assessments using structured methodologies (ISO 27005, NIST RMF, or FAIR) and embedding risk outputs into programme governance rather than treating them as standalone deliverables. Demonstrated ability to design security controls and governance ...

coordinating third-party security providers such as managed SOC or security service partners. Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF or similar. Experience in an engineering or manufacturing business delivering long-lived systems would be helpful. Experience in high-trust, regulated or mission-critical ...

penetration tests and supplier assurance activity, then advise on remediation and risk acceptance. Help clients align with relevant frameworks and standards, including ISO 27001, NIST, CAF, GovAssure, Secure by Design and HMG/MOD assurance expectations. Strong background in Security Architecture, Cyber Security Consultancy, Security Assurance or Secure Design. Experience … stakeholder management skills, including the ability to advise technical teams and brief non-technical decision makers. Knowledge of security frameworks such as ISO 27001, NIST, CAF, Secure by Design, GovAssure or HMG/MOD security standards. Comfortable working 5 days per week on site at MOD Corsham. Current SC clearance ...

understanding of networking, systems and application security Experience with risk assessments and security controls Knowledge of security frameworks and standards, including ISO 27001 and NIST Understanding of vulnerability management Experience using security tools and technologies Strong analytical, problem-solving and communication skills Degree in Cyber Security, Information Technology … vacancy only. KEY SKILLS Cyber Security Engineer, Security Engineering, Cyber Security, Risk Assessment, Security Controls, Vulnerability Management, Security Management Plans, Security Case, ISO 27001, NIST, CISSP, CISM, CEH, Security Clearance ...

infrastructure when required. Role responsibilities: Information Security (90%) Lead the organisation’s information security strategy and technical security operations. Drive compliance with ISO 27001, NIST and CBEST frameworks. Review new infrastructure and cloud‐based services, ensuring they meet security standards. Conduct vulnerability management activities and coordinate external penetration testing. Work … TACACS, IPS and endpoint protection. Security monitoring and incident response within SIEM environments. Vulnerability management and penetration testing. Security governance aligned to ISO 27001, NIST and risk management frameworks. Developing security policies, conducting audits and managing security incidents. Desirable skills: Exposure to tools such as Rapid7, LogRhythm SIEM, Trellix and ...

supporting security accreditation and operational assurance activities. Key Responsibilities Lead the architecture and design of enterprise security solutions. Design platform security controls aligned to NIST Cybersecurity Framework and MOD security policies. Deliver enterprise Anti-Virus, Endpoint Protection and Endpoint Detection & Response (EDR) capabilities. Design vulnerability management frameworks, scanning strategies and … security architecture documents. Excellent stakeholder management and communication skills. Security & Compliance Knowledge Experience working with one or more of the following is highly desirable: NIST Cybersecurity Framework NCSC Cyber Security Design Principles Secure by Design JSP 440 JSP 604 JSP 453 Security Accreditation & Assurance Risk Management & Compliance ...

happy to discuss flexible working! Top 3 skills needed for this role: Information Security Governance & Risk Leadership Regulatory & Framework Expertise (ISO27001, GDPR, NIST) Stakeholder Communication & Security Culture Influence What this role is all about: As our Senior Information Security Officer, you'll drive a business-wide security agenda, shaping … Information Risk management in alignment with the Enterprise Risk Framework Act as a trusted advisor on regulatory requirements and best-practice frameworks (ISO27001, GDPR, NIST, ITIL), protecting the confidentiality, integrity and availability of systems Lead security governance forums and manage the Information Security Governance team, including the Information Risk function ...

hackajob is partnering directly with Leonardo to hire for this role. Job Description: Your impact Leonardo is seeking an experienced Red Team Consultant to join our growing Offensive Security capability. This role is open to ...

and assurance of Backend Platform and endpoint protection and vulnerability management capabilities within secure, offline (air-gapped) environments . The Architect must apply the NIST Cybersecurity Framework and MoD security policies to the backend platform, while supporting the Security and Infrastructure teams in designing and implementing security controls across … security controls. Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer. Ensure compliance with MOD, NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. Collaborate with infrastructure ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

scheme Broad familiarity with UK Government physical and personnel security such as NPSA and UKSV Risk assessment using recognised standards such as IS1 and NIST SP800-30 Able to express yourself effectively, with a high degree of clarity, in English, especially when justifying and explaining required security measures Able … prioritise and manage your time to achieve multiple different tasks (Desirable) Familiarity with broader international security standards such as ISO27001, CMMC, and the NIST Cyber Security Framework (especially SP800-30 and SP800-53) (Desirable) Familiarity with UK nuclear regulations such as the ONR SyAPs Competent with Microsoft Word, Excel and ...

position is 90% information security and 10% network engineering, and offers hybrid working with three days onsite in Bristol. A strong background in ISO27001, NIST and SOC coordination is essential. #J-18808-Ljbffr ...