1 to 25 of 29 Remote/Hybrid NCSC Jobs in the UK

Must hold, or be eligible to obtain and maintain, UK Security Check (SC) Clearance . Strong knowledge of: Security architecture principles Threat modelling methodologies NCSC Cyber Assessment Framework (CAF) Secure-by-design principles NIS Regulations ISO 27001 NIST Frameworks Desirable CISSP, SABSA, TOGAF, CCSP or equivalent professional certification. Experience within ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

improvement. Working knowledge of AWS and Microsoft Azure architecture and operating models. Knowledge of Government Digital Service standards, the Technology Code of Practice and NCSC cloud security principles. Understanding of ITIL 4, SIAM principles, ISO/IEC 27001, ISO/IEC 20000-1 and OWASP practices. Strong stakeholder management ...

architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure security controls. Familiarity with government and defence security standards such as: HMG/NCSC IA Policies and Guidelines JSP440 and other MoD IA standards Cyber Essentials NIST, NIS-D You will ideally hold CISM/CISSP or similar higher ...

procedures. Strong stakeholder engagement skills and the ability to work across multiple technical teams. Essential Knowledge Security engineering principles and best practices. Knowledge of NCSC Cyber Assessment Framework (CAF), NIS Regulations, ISO 27001 and NIST frameworks. Understanding of identity and access management, network security, endpoint security, logging and monitoring, vulnerability ...

limited to: Ensure security architecture aligns with wider Gov security policies and frameworks, legal frameworks, industry regulations and best practise (e.g ISO 27001, NCSC Standards, GDPR, PCI DSS, GovAssure, Secure by Design) Support the secure by design champion in building awareness and understanding of secure by design framework across DDaT. ...

GCIH, CompTIA Security+, or equivalent. Experience within Government, Defence, National Security, or Critical National Infrastructure sectors. Knowledge of NIST, ISO 27001, Cyber Essentials, and NCSC guidance. Experience working within Security Operations Centres (SOC). If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup ...

premise/private cloud deployments, including AWS or Azure. Knowledge of Pega GenAI, Process Fabric or Pega Customer Decision Hub. Awareness of NCSC security principles and government cloud security standards. Benefits & Perks The opportunity offers the chance to: Work on a significant government technology programme. Take ownership of technical architecture ...

common vulnerabilities. Knowledge of infrastructure, cloud, network and identity security concepts. Familiarity with: OWASP Testing Guide OWASP Top 10 MITRE ATT&CK Framework NCSC Cyber Security Guidance NIST Cybersecurity Framework Cyber Kill Chain Ability to analyse complex risks and communicate findings clearly. Eligible to obtain and maintain UK SC Clearance. ...

Implement the guardrails the Architect designs - bias mitigation checks, evaluation harnesses, human-in-the-loop review points - so that Responsible AI principles (ATRS alignment, NCSC "Secure by Design, " meaningful human control) are enforced in the running system, not just on paper. Reliability, Security & Observability Build AI services to be secure ...

Implement the guardrails the Architect designs - bias mitigation checks, evaluation harnesses, human-in-the-loop review points - so that Responsible AI principles (ATRS alignment, NCSC "Secure by Design, " meaningful human control) are enforced in the running system, not just on paper. Reliability, Security & Observability Build AI services to be secure ...

regulatory experience including - EU NIS Directive, ISA/IEC 62443 Series/ISO 27000 Series, MITRE ATT&CK, NIST Cyber Security Framework (CSF), NCSC CAF, Office for Nuclear Regulation (ONR) Security Assessment Principles, Technical Assessment Guides, and supplementary guidance. Our Culture: Our values stand on a foundation of safety, integrity ...

navigating UK central government architectural governance and Technical Design Authority (approval processes. Understanding of Data Protection Impact Assessments (DPIAs), cyber security assurance, and relevant NCSC standards. Familiarity with Secure by Design, Cloud Security Principles, GDS guidance, and Government Functional Standards. Desirable Experience Previous experience working within central government, defence ...

Trust Architectures. Deep technical knowledge of Microsoft Azure, Building Cloud Platforms, Migrating Applications to Cloud Platforms. Agile Delivery using standard DevSecOps toolchains Knowledge of NCSC, GDS, and UK government security frameworks, including Secure by Design, Cloud Security Principles, Government Functional Standards, and the Technology Code of Practice. Working in Secure ...

designing scalable microservices, modular architectures, APIs and vendor-neutral integration solutions. Government Governance: Understanding of Technical Design Authority (TDA), DPIAs, cyber security assurance and NCSC security standards. Technical Leadership: Ability to make strategic architecture decisions, influence senior stakeholders and lead technical teams. ...

scripting experience, comfortable in at least one of: Python, Golang, JavaScript, or Bash. Awareness of secure system design and best practice frameworks such as NCSC Cloud Security Principles or equivalent. Able to apply engineering thinking to improve reliability, security, and maintainability. Desirable (not essential) Practical understanding of compute, networking, storage ...

support organisations operating in highly security-conscious environments where resilience, assurance and risk-informed decision making are paramount. As a National Cyber Security Centre (NCSC) Assured Cyber Security Consultancy, we work on programmes that contribute directly to the UK's defence and security outcomes. Location: Southwest England - Three Counties Region ...

Azure or FinOps certifications would be advantageous, as would an understanding of security and compliance frameworks such as Cyber Essentials, ISO 27001 and NCSC guidance. What You Will Get in Return : This role offers a high six-figure base salary , plus performance-based incentives and an annual bonus, directly rewarding ...

senior stakeholders, with opportunities to contribute to bids and business development. Key responsibilities: Lead cyber security audits and assessments against recognised frameworks, including the NCSC Cyber Assessment Framework (CAF). Evaluate security controls, organisational resilience and compliance throughout the system lifecycle. Identify vulnerabilities, risks and areas for improvement, producing clear … Support bid development and pre-sales activities where required. Essential Experience Proven experience leading cyber security audits and assurance engagements. Strong knowledge of the NCSC CAF, ISO 27000-series standards, NIST frameworks and associated risk management practices. Understanding of legacy information assurance standards and NCSC guidance. Familiarity with MOD security ...

CREST-accredited providers and incorporating red and purple team activity into the wider assurance programme. Supporting security assurance against frameworks and standards including the NCSC Cyber Assessment Framework, ISO 27001, NIST CSF 2.0 and Cyber Essentials Plus. Communicating technical risk and control weaknesses clearly to senior stakeholders, balancing security improvement … controls, including defining security standards and configuration baselines, monitoring control effectiveness and drift, managing exceptions and driving remediation of identified weaknesses. Knowledge of the NCSC CAF and at least one of ISO 27001 or NIST CSF 2.0. Experience of zero trust and identity architecture, including conditional access and adaptive authentication. ...

CREST-accredited providers and incorporating red and purple team activity into the wider assurance programme. Supporting security assurance against frameworks and standards including the NCSC Cyber Assessment Framework, ISO 27001, NIST CSF 2.0 and Cyber Essentials Plus. Communicating technical risk and control weaknesses clearly to senior stakeholders, balancing security improvement … controls, including defining security standards and configuration baselines, monitoring control effectiveness and drift, managing exceptions and driving remediation of identified weaknesses. Knowledge of the NCSC CAF and at least one of ISO 27001 or NIST CSF 2.0. Experience of zero trust and identity architecture, including conditional access and adaptive authentication. ...

environments Building improvement roadmaps and security programmes to move clients from low maturity to a secure, resilient state Applying standards such as IEC 62443, NCSC CAF, NIST SP 800-82 and HSE OG86 to real industrial environments Working with the sales team on follow-on opportunities and proposals Getting involved … writing and close attention to detail Nice to have IEC 62443 experience or certifications (fully funded training is provided if not) CISSP, CySA+ or NCSC Chartered status The package £70,000 to £90,000 depending on experience 5% of salary towards training and certifications each year Salary reviews every ...

Helping organisations prioritise cyber investment. Supporting senior stakeholders with cyber risk decision-making. Working with recognised frameworks and standards including NIST CSF, ISO 27001, NCSC CAF and NIS2. Cyber Transformation Turning cyber strategies and assessments into practical transformation programmes. Defining programme scope, priorities, governance and outcomes. Supporting the delivery … consulting. An understanding of how cyber risk connects to wider technology and business priorities. Exposure to recognised frameworks such as NIST CSF, ISO 27001, NCSC CAF or NIS2. Strong analytical and problem-solving skills, with the ability to turn findings into clear recommendations. Strong client-facing experience and the confidence ...