76 to 98 of 98 NCSC Jobs in the UK

shared engineering responsibility rather than a specialist handover at the end of a sprint. Navigate UK government security standards with confidence. Apply the NCSC Cyber Assessment Framework, GovAssure, Cyber Essentials, HMG Security Policy Framework, and relevant legislation (UK GDPR, NIS Regulations) proportionately across engagements - framing standards as guardrails that enable … expect every candidate to bring all of these. Certifications Certified in Risk and Information Systems Control (CRISC) Certified Information Security Manager (CISM) NCSC Certified Cyber Professional (CCP) Capabilities and experience Experience establishing and operating vulnerability management programmes at organisational scale - including risk-based prioritisation using EPSS, KEV, and asset criticality ...

security assurance across large, complex transformation programmes involving multiple suppliers and stakeholders. Strong knowledge of government security policies and frameworks, including Secure by Design, NCSC guidance and related standards. Experience conducting security assessments, audits and assurance reviews. Experience reviewing technical security architectures and providing constructive challenge to delivery teams. Strong … Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within highly regulated public sector or government environments. What's on Offer ...

security assurance across large, complex transformation programmes involving multiple suppliers and stakeholders. Strong knowledge of government security policies and frameworks, including Secure by Design, NCSC guidance and related standards. Experience conducting security assessments, audits and assurance reviews. Experience reviewing technical security architectures and providing constructive challenge to delivery teams. Strong … Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within highly regulated public sector or government environments. What's on Offer ...

clearly framed around risk and remediation rather than just compliance status. Drive continuous compliance monitoring against applicable standards and regulations - Cyber Essentials, the NCSC Cyber Assessment Framework, GovAssure, UK GDPR, and NIS Regulations - feeding posture data into governance and risk reporting rather than treating it as a point-in-time … Information Systems Control (CRISC). Certified Information Systems Security Professional (CISSP). Experience advising clients on UK government security frameworks - including GovAssure, the NCSC Cyber Assessment Framework, Cyber Essentials Plus, and the HMG Security Policy Framework - and how they interact in practice. Experience leading risk assessments using structured methodologies ...

clearly framed around risk and remediation rather than just compliance status. Drive continuous compliance monitoring against applicable standards and regulations - Cyber Essentials, the NCSC Cyber Assessment Framework, GovAssure, UK GDPR, and NIS Regulations - feeding posture data into governance and risk reporting rather than treating it as a point-in-time … Information Systems Control (CRISC). Certified Information Systems Security Professional (CISSP). Experience advising clients on UK government security frameworks - including GovAssure, the NCSC Cyber Assessment Framework, Cyber Essentials Plus, and the HMG Security Policy Framework - and how they interact in practice. Experience leading risk assessments using structured methodologies ...

lifecycle. Liaise with internal and external security assurance authorities to demonstrate compliance with relevant security frameworks. Work collaboratively with external security authorities, including the NCSC , where required to support security assurance. Manage security activities across development, testing and manufacturing environments. Advise engineering teams on platform lockdown, secure configuration and security … postgraduate qualification in Engineering, Computer Science, Cyber Security or a related scientific/technical discipline , or equivalent professional experience. Professional membership of an NCSC-recognised security organisation such as CIISec, ISC2 or ISACA . ...

join a growing team delivering high-impact assurance services across UK Government and Defence programmes. This role is suited to auditors already operating within NCSC-aligned frameworks , with the ability to lead and deliver audits across nationally significant cyber assurance schemes. Essential Requirements (Must Have) ISO27001 Lead Auditor qualification … equivalent) Chartered Auditor and Assessor accreditation Active presence on the NCSC Assured Service Provider/Auditor register Proven experience delivering NCSC-aligned audits The Role You will lead the delivery of cyber security audits across frameworks such as CAF, DCC, and GovAssure , supporting government-led cyber resilience initiatives. Key responsibilities ...

management, and platform security controls. Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer. Ensure compliance with MOD, NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. … endpoint security, EDR, vulnerability management, and platform hardening. Experience designing secure solutions for offline/air-gapped networks. Excellent understanding of MOD security policies, NCSC guidance, JSP 440/604, Secure by Design, and the NIST Cybersecurity Framework. Experience supporting security assurance, risk management, and accreditation activities. Strong stakeholder engagement ...

network environments. Working alongside infrastructure, network and systems engineering teams, you will ensure solutions are secure by design and compliant with MOD and NCSC security standards. You'll play a key role in security assurance, risk management and accreditation activities throughout the project lifecycle. Responsibilities Design and develop security architectures … Support security assurance, accreditation and governance activities. Work closely with infrastructure, network and engineering teams to embed security throughout delivery. Ensure compliance with MOD, NCSC and industry security standards. Provide technical guidance on secure infrastructure, identity, cryptography and boundary protection technologies. Essential Skills & Experience Proven experience as a Security Architect ...

resulting actions. Manage meetings with security stakeholders and represent the security position to senior client stakeholders and independent technical governance. Apply relevant MOD, NCSC, defence and maritime security frameworks to support assurance, accreditation and compliance activities, and reconcile the security position with the platform safety case. Generate a detailed scope … Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer/Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF-related experience or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding, naval, critical national infrastructure or operationally critical environments would ...

delivering penetration testing, Cyber Essentials certification, consultancy, training and managed cyber security services to organisations across both the public and private sectors. As an NCSC CHECK provider and CREST member company , we're continuing to grow our penetration testing team and are looking for a talented Security Consultant to join … consultancy where technical excellence, innovation and professional development go hand in hand. When you join us you'll benefit from: Working for an NCSC CHECK provider and CREST member A varied mix of commercial, defence and public sector projects Funded training and industry certifications Clear progression towards CHECK Team Member ...

Design end-to-end solutions spanning network, cloud, identity, endpoint, security, safeguarding, backup, compliance and operational monitoring Apply Dataspire reference architectures and relevant DfE, NCSC and KCSIE guidance to solution design Lead the technical contribution to strategic bids, tenders, framework opportunities and high-value projects Produce high-quality solution documentation … Storage Spaces Direct and Redstor Remote access and communications: RDS, VPN, 3CX and Microsoft Teams Security, filtering, safeguarding and compliance technology aligned with DfE, NCSC, Cyber Essentials and KCSIE expectations WHAT WERE LOOKING FOR Significant consulting, pre-sales or architecture experience across infrastructure, cloud, network, security or education technology Strong ...

Cyber Security Model, Secure By Design, Industry Security Notices Strong familiarity with UK Government security standards such as 007/SPF, NCSC Cloud Security Principles, NCSC Principles for Using Software as a Service (SaaS) securely, Cyber Essentials, and the CHECK penetration testing scheme Broad familiarity with UK Government physical ...

activities where required. Key Responsibilities Deliver technical governance and provide assurance for all audits undertaken by Logiq. Conduct comprehensive cyber security audits aligned to NCSC CAF and other recognised standards (including ISO 19011 and ISO 27007). Assess organisational security posture across the full system lifecycle, ensuring compliance and identifying … security risks. Essential Experience Ability to lead audits, engage stakeholders, and communicate findings effectively. Proven expertise in Cyber Security Auditing, with strong knowledge of: NCSC Cyber Assessment Framework (CAF). ISO 27000 series, NIST Cyber Security & Risk Management Frameworks. Legacy IA standards and NCSC guidance. Technical understanding of: Defensive Cyber ...

what the SOC is seeing into the language that informs decisions. The UK public sector context matters here. You'll align your work to NCSC guidance, the Cyber Assessment Framework, and OFFICIAL handling requirements - not because compliance is the goal, but because those frameworks reflect the real risk environment your … train L1/L2 analysts to write and tune detections themselves. Own the threat-landscape narrative for your engagement - turn intelligence from NCSC advisories, sector feeds, and threat actor reporting into hunt themes, coverage gap analysis, and detection priorities that the SOC and client stakeholders can act on. ...

what the SOC is seeing into the language that informs decisions. The UK public sector context matters here. You'll align your work to NCSC guidance, the Cyber Assessment Framework, and OFFICIAL handling requirements - not because compliance is the goal, but because those frameworks reflect the real risk environment your … train L1/L2 analysts to write and tune detections themselves. Own the threat-landscape narrative for your engagement - turn intelligence from NCSC advisories, sector feeds, and threat actor reporting into hunt themes, coverage gap analysis, and detection priorities that the SOC and client stakeholders can act on. ...

cyber resilience programme. The organisation is currently undertaking a programme focused on compliance with the Data Security and Protection Toolkit (DSPT) and the NCSC Cyber Assessment Framework (CAF) . The programme is developing proposals, controls and actions to address identified gaps. The requirement now is for an experienced assurance professional … assessing organisational maturity against security or data protection frameworks. Practical experience working with the Data Security and Protection Toolkit (DSPT) and working with the NCSC Cyber Assessment Framework (CAF). Experience undertaking assurance, audit, assessment or independent review activity within NHS, healthcare, Government or another highly regulated environment, reviewing evidence ...

Audit Consultant role over time. Responsibilities: Plan and conduct audits of customer processes and systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssure. Support and, over time, help lead audit activity, ensuring findings are properly documented and reported. Communicate audit findings … risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills/Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience of cyber report writing. Relevant ISO certification (for example ISO 27001 Lead Auditor ...

Risk Profile (CRP) audit work. Responsibilities: Plan and conduct audits of customer processes and systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssure. Support and, over time, help lead audit activity, ensuring findings are properly documented and reported. Communicate audit findings … risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills/Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience of cyber report writing. Relevant ISO certification (for example ISO 27001 Lead Auditor ...

drive and expand our Cyber Security services across public and private sector clients. 4C already provides Cyber Security advisory services and is currently an NCSC Assured Service Provider ( Cyber Advisor ) , with ambitions to become an NCSC Cyber Resilience A udit (CRA) provider . This role will play a key part … cyber strategy, roadmap and business plan Define and manage routes to market and framework bids and responses Ensure services align with NCSC guidance and market expectations Act as the senior authority for cyber matters within 4C Support progression towards NCSC Cyber Resilience A udit (CRA) provider status Client Advisory & Delivery ...

includes the management of the Cyber Security Operations Centre (CSOC) and processes in accordance with the threat posture and government direction. Knowledge of National Cyber Security Centre incident response and information security processes and policies. Typical Skills: Experience in the management of Security Event Monitoring and operational response by means … host IDS/IPS monitoring and logging; Knowledge of Cyber security regulations and industry framework e.g. GDPR, Network and Information Systems (NIS) regulations, NCSC; Knowledge of ITIL; Knowledge of Mitre ATT&CK etc; Threat monitoring and intelligence gathering and assessment; processes to scan for vulnerabilities and implementing fixes and mitigations ...

external security assurance authorities to desmontrate product compliance against recognised UK and wider frameworks. Driving collaborative working with external security authorities such as the NCSC to provide underwriting of security solutions. Understanding and management of security activities within development, testing and manufacturing environments. Advising development teams on suitable platform lockdown … systems. Graduate degree in relevant engineering, computing or related scientific discipline, and/or evidence of further professional study. Full membership of an NCSC recognised professional security body organisation (i.e. CIISec, ISC2 or ISACA). Recent experience and demonstratable knowledge of live and legacy UK/EU/NATO information ...

Microsoft Teams AV and classroom technology: Promethean, Clevertouch, Prowise, Viewsonic and SMART Security, filtering, safeguarding and compliance technology aligned with DfE, NCSC, Cyber Essentials and KCSIE expectations WHAT WE'RE LOOKING FOR Strong hands-on delivery experience across networking and server infrastructure in an MSP, education or multi-site environment … than one SSSTS, ECS card or other relevant site safety qualifications Experience working with schools, colleges or multi-academy trusts Knowledge of DfE standards, NCSC guidance, KCSIE, Cyber Essentials or education safeguarding requirements Experience working on live construction or building site environments Experience mentoring, coaching or peer reviewing other engineers ...