1 to 25 of 39 NIST Jobs in the Thames Valley

Hybrid Identity.Strong client-facing consultancy experience with executive stakeholder engagement.DesirableManaged Services, SOC integration, AI security, DevSecOps, and multi-cloud security experience.Knowledge of ISO 27001, NIST, NIS2, Cyber Essentials, GDPR, DORA, and FCA/PRA frameworks.Relevant certifications such as CISSP, CCSP, CISM ...

Microsoft Azure, identity, governance, security, and cloud architecture. Experience working with outsourced service providers and technology partners. Understanding of cyber security frameworks such as NIST and ISO27001. Knowledge of networking, infrastructure, security operations, and vulnerability management. The confidence to challenge, influence, and drive decisions at all levels. A pragmatic, hands ...

firewalls, VPNs and secure connectivity. Experience reviewing applications, infrastructure, cloud and network architectures. Strong stakeholder management and communication skills. Knowledge of security frameworks including NIST, ISO 27001 and CIS Controls. Desirable Experience Telecommunications experience. Exposure to 4G/5G environments, telecoms infrastructure or network security. Zero Trust architecture. Hybrid and ...

strong interest in information security alongside privacy. Working knowledge of key privacy regulations (e.g. EU GDPR, UK DPA) and key industry frameworks (e.g. ISO, NIST). Deep hands‐on proficiency in privacy management and governance, risk and compliance software tools (e.g. OneTrust Assessment Automation, Risk Register, Data Mapping). Demonstrated ...

and hybrid infrastructure security, with strong knowledge of networking, operating systems and attacker techniques. Practical understanding of MITRE ATT&CK, Cyber Kill Chain, NIST and SANS incident response frameworks. Experience working within regulated and audited environments, including ISO 27001 and Cyber Essentials. Excellent communication, stakeholder management and documentation skills, with ...

project lifecycle from bid through delivery and into service. Desirable Experience Post-Quantum Cryptography (PQC) planning and migration. Cryptographic standards and frameworks including NCSC, NIST, ETSI, ISO and IEC standards. Scripting and automation using PowerShell, Python, or Bash. Identity & Access Management (IAM) integration. Critical National Infrastructure (CNI) or Operational Technology ...

security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled connectivity. Applied knowledge of cybersecurity frameworks and standards, including NIST, ISO 27001, IEC 62443 and the NCSC Cyber Assessment Framework (CAF).Strong understanding of Networking, Ethernet-based industrial networks, switching technologies, high-availability and network ...

stakeholder for the successful assessment and delivery of security related change control processes.Experience in application of Security Frameworks: E.G. Cyber Essentials Plus, ISO27000 series, NIST-800 (including SP800-37 and SP800-53) and associated assurance activities.ExperienceEssential:Demonstrable understanding of cloud/Infrastructure as Code technologies;Demonstrable understanding of application of ...

successful assessment and delivery of security related change control processes. Experience in application of Security Frameworks: E.G. Cyber Essentials Plus, ISO27000 series, NIST-800 (including SP800-37 and SP800-53) and associated assurance activities. ExperienceEssential: Demonstrable understanding of cloud/Infrastructure as Code technologies;Demonstrable understanding of application of security ...

resolving challenges. Support the continuous improvement of the control testing programme through automation and innovation. Stay informed on relevant frameworks and best practices, including NIST CSF and CIS Controls, to enhance automation and monitoring capabilities. Base location - Hybrid - Clearwater Court, Reading. Working pattern - 36 hours Monday to Friday. What ...

and assurance artefacts. Desirable Skills & Experience Experience within Defence, Government, or highly regulated environments. Knowledge of security accreditation and assurance processes. Familiarity with the NIST Risk Management Framework (RMF). Experience with vulnerability management and security tooling. Exposure to security architecture, secure design reviews, or threat modelling. Understanding of ...

across the full project lifecycle from bid through delivery and into service.Desirable ExperiencePost-Quantum Cryptography (PQC) planning and migration.Cryptographic standards and frameworks including NCSC, NIST, ETSI, ISO and IEC standards.Scripting and automation using PowerShell, Python, or Bash.Identity & Access Management (IAM) integration.Critical National Infrastructure (CNI) or Operational Technology (OT) environments.Application and ...

across the full project lifecycle from bid through delivery and into service.Desirable ExperiencePost-Quantum Cryptography (PQC) planning and migration.Cryptographic standards and frameworks including NCSC, NIST, ETSI, ISO and IEC standards.Scripting and automation using PowerShell, Python, or Bash.Identity & Access Management (IAM) integration.Critical National Infrastructure (CNI) or Operational Technology (OT) environments.Application and ...

full project lifecycle from bid through delivery and into service. Desirable ExperiencePost-Quantum Cryptography (PQC) planning and migration. Cryptographic standards and frameworks including NCSC, NIST, ETSI, ISO and IEC standards. Scripting and automation using PowerShell, Python, or Bash. Identity & Access Management (IAM) integration. Critical National Infrastructure (CNI) or Operational Technology ...

systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth understanding ...

reporting requirements Knowledge of risk management methodologies and risk analysis Understanding of security policy frameworks, security standards, methodologies and control implementation e.g. ISO 27001, NIST Marketing/Business/Psychology/Information Security/IT degree or equivalent An Information Security qualification or equivalent desirable (ITIL/CISMP/SSAP ...

security architecture outcomes, governance decisions, and organisational change initiatives. Strong understanding of security architecture, risk management, and relevant regulatory and industry frameworks (for example NIST, ISO/IEC 62443, NCSC CAF, and Cyber Essentials). Strong stakeholder engagement skills, with the ability to influence decision-making, build consensus, and communicate ...

Management and Data Protection. Understanding of recognised cyber frameworks and standards such as NIS Regulations, CAF (Cyber Assessment Framework), CIS Controls, ISO 27001 and NIST Cybersecurity Framework. Experience managing cyber transformation initiatives involving multiple technology and business stakeholders. Ability to oversee programmes with significant regulatory, compliance and operational resilience requirements. ...

delivering security architecture outcomes, governance decisions, and organisational change initiatives.Strong understanding of security architecture, risk management, and relevant regulatory and industry frameworks (for example NIST, ISO/IEC 62443, NCSC CAF, and Cyber Essentials).Strong stakeholder engagement skills, with the ability to influence decision-making, build consensus, and communicate effectively ...

Management and Data Protection. Understanding of recognised cyber frameworks and standards such as NIS Regulations, CAF (Cyber Assessment Framework), CIS Controls, ISO 27001 and NIST Cybersecurity Framework. Experience managing cyber transformation initiatives involving multiple technology and business stakeholders. Ability to oversee programmes with significant regulatory, compliance and operational resilience requirements. ...

internal and external assessmentsSupport the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning the security risk management process to include ...

Management and Data Protection. Understanding of recognised cyber frameworks and standards such as NIS Regulations, CAF (Cyber Assessment Framework), CIS Controls, ISO 27001 and NIST Cybersecurity Framework. Experience managing cyber transformation initiatives involving multiple technology and business stakeholders. Ability to oversee programmes with significant regulatory, compliance and operational resilience requirements. ...

Professional (CISSP). Standards, frameworks, and regulatory experience including – EU NIS Directive, ISA/IEC 62443 Series/ISO 27000 Series, MITRE ATT&CK, NIST Cyber Security Framework (CSF), NCSC CAF, Office for Nuclear Regulation (ONR) Security Assessment Principles, Technical Assessment Guides, and supplementary guidance. Our Culture: Our values stand ...

premises Kubernetes deployment experience. Prometheus or comparable observability platforms. AWS Karpenter. AWS Compute Optimizer. Experience operating highly distributed systems. Familiarity with ISO 27001, NIST SSDF, OWASP SAMM or similar security frameworks. Understanding of GDPR fundamentals. Experience working within defence, national security, critical infrastructure or other regulated environments. Security Clearance ...

Microsoft Azure security Endpoint Protection Identity & Access Management Email Security Vulnerability Management Security monitoring and logging Secure technical change Security frameworks including ISO 27001, NIST or OWASP Experience with Microsoft Defender, Purview, Intune, cloud automation or DevSecOps would be advantageous but isn't essential. What's in this ...