26 to 50 of 256 NCSC Jobs in the UK

standards. Typical Qualifications/Experience Professional Experience: 7+ years’ experience in cybersecurity, secure systems architecture, and technical security leadership, including experience engaging MOD accreditors, NCSC guidelines, and cryptographic risk frameworks. Education & Foundational Benchmark: Cyber or IT NVQ Level 4 or equivalent higher education/degree in Information Security or Computer ...

data protection and national security standards. What you'll bring Experience in cybersecurity, secure systems architecture, and technical security leadership, including experience engaging accreditors, NCSC guidelines, and cryptographic risk frameworks. Education & Foundational Benchmark Cyber or IT NVQ Level 4 or equivalent higher education/degree in Information Security or Computer ...

scripting or workflow improvement. You’ll also be comfortable working with recognised security frameworks such as NIST CSF, ISO 27001, CIS Controls or the NCSC Cyber Assessment Framework. About you Has significant experience within cyber security, information security or security operations. Enjoys leading investigations and solving complex technical challenges. ...

skills across government and multi-agency security. Experience with Lead Accreditation and Security Case Development. Demonstrable knowledge of cybersecurity frameworks and standards, including the NCSC Cyber Assessment Framework, NIST, ISO 27001, CIS, CAF, HMG GovS 007, and NPSA. Preferred Qualifications: Industry certifications such as CompTIA Security+, CISSP, CISM ...

cyber security good practice. In-depth knowledge and practical experience of relevant standards and regulatory frameworks, including ISO 27001, NIST Cybersecurity Framework, IEC 62443, NCSC CAF, UK GDPR, the UK NIS Regulations and applicable energy-sector regulatory requirements. Someone who enjoys a varied environment, sharing their knowledge and experience ...

background. Qualifications Desirable — one or more of the following: CISSP, CISM or CISA ISO 27001 Lead Implementer or Lead Auditor CompTIA Security+ or CySA+ NCSC Certified Cyber Professional (CCP) IASME Cyber Assurance or Cyber Essentials assessor qualification Degree in cyber security, computer science or a related discipline Equivalent demonstrable experience ...

controls and monitoring measures, rather than relying solely on templates or standard security checklists. Familiarity with at least one recognised security framework – e.g. NIST, NCSC, MITRE, CyberEssentials, DCC. General attributes required: Strong analytical and problem‐solving skills, with the ability to make informed security recommendations based on technical evidence. Ability ...

operations. Experience supporting government, defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors. Familiarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards. Experience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations ...

Understanding of the engineering lifecycle and key gate review activities. Knowledge of current Crypto technologies,Key ManagementSystems & practicalCOMSECimplementations and MOD/NCSC standards. Knowledge or experience of ARP4754A/ARP4761 and its interrelationship with security. This is not an exhaustive list, and we are keen to hear from you even ...

understanding of the engineering lifecycle and key gate review activities. Knowledge of current Crypto technologies, Key Management Systems & practical COMSEC implementations and MOD/NCSC standards. Knowledge or experience of ARP4754A/ARP4761 and its interrelationship with security. Security Clearance This role is subject to pre-employment screening in line ...

assessments and risk treatment plans, ensuring risks and controls align with business risk appetite. Provide assurance across cloud and SaaS environments, including compliance against NCSC Cloud Security Principles . Support and promote Secure by Design practices across digital delivery. Provide security architectural advice and support technical and business decision-making. ...

role Essential: Experience designing and assuring secure solutions across Azure, on-premise and hybrid environments. Strong knowledge of industry frameworks such as NCSC guidance, NIST CSF/800-53, ISO 27001/2 or SABSA. Understanding of identity & access management, network security, encryption, API security and secrets management. Experience with ...

equivalent. Any AI certification would be a bonus. Knowledge of the NIST framework, AI Security Governance, PCI DSS, GDPR and NIS as well as NCSC cyber guidance. Experience working in an agile delivery environment would be highly advantageous. Specific cyber knowledge and demonstrable experience in at least ...

position A security professional qualification such as CISSP, CISM, CCSP, CISA, ISO27001 Lead Implementor/Auditor, CEH or equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards ...

sprint. Navigate UK government security standards with confidence — as an engineer, not a paperwork exercise. Design systems and controls that satisfy the NCSC Cyber Assessment Framework, GovAssure, Cyber Essentials, and HMG Security Policy Framework, applying them proportionately across engagements as guardrails that enable safe delivery, not barriers to it. Engage ...

such as PowerShell or Python. Experience gained within a legal, financial services or similarly regulated organisation. Awareness of security frameworks and best practice including NCSC guidance, OWASP, NIST CSF, CIS Controls, ISO 27001, ISMS principles and GDPR. Experience with automation, security testing, forensic investigation activities, DLP monitoring, privileged access ...

issues in existing system designs or products, including recommending sensible mitigations that balance cost, risk and usability. • Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR).• Deep architectural xxperience in one of the following specialisms: AI/ML Security/Cloud/M365/DevSecOps ...

zones, organisation policies, Shared VPC and service perimeter controls. Experience with service reliability engineering (SRE), SLI, SLOs and error budgets. Familiarity with ISO 27001, NCSC guidance and relevant UK Government security requirements. Competitive Salary Bonus Scheme Private Healthcare Insurance 25 Days Annual Leave + Bank Holidays Up to 10 days ...

Working knowledge of Jira, Confluence, and IT Service Management platforms. Good understanding of hybrid environments incorporating on-premise and cloud-hosted services. Familiarity with NCSC security guidance, Secure by Design principles, Zero Trust architectures, and UK Government security frameworks. Desirable Experience supporting products from vendors such as Everfox (Deep Secure ...

CK. Experience managing and developing technical teams in a threat analysis context. Knowledge of regulatory frameworks (e.g., GDPR, NIS Directive) and security standards (e.g., NCSC CAF). Excellent analytical, problem-solving, and decision-making skills. Strong communication and stakeholder engagement abilities. Experience in automating threat analysis and hunting processes. Ability ...

vulnerability management Kubernetes/EKS/ECS Leading and mentoring engineers Experience within government, financial services or regulated environments Desirable: Government security standards/NCSC principles ForgeRock, Okta, Auth0, Ping Identity or wider IAM experience AWS landing zones Security architecture and assurance Existing government security clearance Azure exposure Salary: Circa ...

Enterprise Architects. Strong knowledge of UK public sector digital services, GDS standards, Technology Code of Practice, and government assurance processes. Expertise in security architecture, NCSC guidance, UK GDPR, and non-functional requirements including performance, resilience, availability, and accessibility. Excellent stakeholder management, communication, and presentation skills. Desirable TOGAF or equivalent Enterprise ...

common vulnerabilities. Knowledge of infrastructure, cloud, network and identity security concepts. Familiarity with: OWASP Testing Guide OWASP Top 10 MITRE ATT&CK Framework NCSC Cyber Security Guidance NIST Cybersecurity Framework Cyber Kill Chain Ability to analyse complex risks and communicate findings clearly. Eligible to obtain and maintain UK SC Clearance. ...

documentation, including HLDs, LLDs, and controls catalogues. Knowledge of relevant legislation and regulatory requirements, including: GDPR PCI DSS ICO requirements Familiarity with HMG and NCSC security policies, standards, and guidance. Excellent analytical, investigative, and problem-solving skills. Strong stakeholder engagement and communication capabilities. Ability to produce clear, concise, and actionable ...

security, together with a sound understanding of recognised frameworks and guidance such as ISO 27001, the NIST Cybersecurity Framework, the Cyber Assessment Framework and NCSC guidance. You will be able to develop technical roadmaps, standards and architectural patterns, assess complex technical risks and recommend pragmatic, proportionate solutions. Strong communication, influencing ...