151 to 175 of 292 NIST Jobs in the UK

cloud and security solutions, supporting vulnerability management and secure-by-design principles. Champion recognised security frameworks including ISO 27001, Cyber Essentials Plus, CAF and NIST while helping mature the organisation's overall cyber capability. ...

and stakeholder environments Strong understanding of secure design principles and risk management Desirable Skills & Knowledge Familiarity with frameworks and standards such as ISO 42001, NIST AI RMF , and relevant AI regulations (e.g. EU AI Act) Experience working in highly collaborative, global environments Background in engineering or hands-on technical delivery ...

and control processes (e.g. RCSA, Interim RCSA, Issue Management, Key Indicators) and their practical application. Good knowledge of cyber security frameworks and standards (e.g. NIST, ISO 27001) and their implementation in enterprise environments. Proven ability to assess cyber control effectiveness, identify root causes and drive sustainable remediation of control weaknesses. ...

executing triage processes. Ensuring regulatory compliance across the service desk, adhering to OFGEM licence conditions, SEC/REC requirements and cybersecurity standards (ISO 27001, NIST-aligned controls), and preparing for and managing audits, including Independent Compliance Officer (ICO) reviews. Collaborating on cross-functional projects, such as integrating L&D with ...

and client engagement skills Experience with automation and scripting (PowerShell, Python, etc.) Desirable: Experience with vulnerability and exposure management tools Knowledge of security frameworks (NIST, ISO 27001, CIS) Relevant security certifications (e.g. CISSP ...

practice. This is a hands-on, client-facing role covering: OT/ICS security assessments SCADA and control system environment reviews IEC 62443, NIST SP 800-82 and NCSC CAF aligned work IT/OT convergence, segmentation and remote access reviews OT-aware vulnerability assessments using non-disruptive approaches Reporting ...

control frameworks and advising stakeholders accordingly. * Knowledge of TSA (Telecoms Security Act) is highly desirable. * Experience working with frameworks such as ISO 27001, SOX, NIST or similar governance and compliance standards. * Excellent analytical and impact assessment skills. * The ability to translate technical or regulatory requirements into clear business outcomes. * Strong ...

and automation * REST APIs and JSON * Microsoft technologies including Intune, Entra ID, Active Directory, Defender and Azure * Vulnerability and compliance frameworks such as CIS, NIST and DISA STIG * Operational Technology (OT) and highly regulated environments Why Apply? * Work on large-scale endpoint security and resilience programmes * Deliver solutions across enterprise ...

RMADS or SbD documentation Strong communication skills with the ability to work autonomously and adapt to changing project demands Nice to Have Experience with NIST 800 series, CESG Good Practice Guides, or NCSC risk assessment methodology Familiarity with Defence Security Standards (Def Stan 05-138, Def Stan 05-139, JSP440 ...

Exceptional: Provide additional assistance to the Supportability Function What you’ll need Key Must Have skills: Experience in Project Security planning and implementation e.g. NIST 800 series. Experience in delivering project documentation using SbD principles. Experience in Security/Information Assurance e.g. CESG Good Practice Guides. Experience in Security risk ...

Trade advantageous. A solid general understanding of IT systems, architecture and data management highly desired. Familiarity with IT security standards such as ISO27001/NIST 2 etc. advantageous. Experience in leading complex privacy assessments, comfortable completing PIA’s, TIA’s, DPA/DSA’s, TOM’s evaluations, RoPA’s etc. ...

runtime security. Experience within highly regulated or enterprise-scale environments. Exposure to cloud-native security platforms and zero-trust architectures. Understanding of SOC2, ISO27001, NIST or Cyber Essentials frameworks. What Success Looks Like Security becomes embedded within the engineering lifecycle rather than acting as a gatekeeper. Automated controls reduce risk ...

runtime security. Experience within highly regulated or enterprise-scale environments. Exposure to cloud-native security platforms and zero-trust architectures. Understanding of SOC2, ISO27001, NIST or Cyber Essentials frameworks. What Success Looks Like Security becomes embedded within the engineering life cycle rather than acting as a gatekeeper. Automated controls reduce ...

and programmes, and applying strong security risk methodologies and engineering practices. Governance, frameworks and certifications: Strong working knowledge of ISO/IEC 27001 and NIST, supported by a relevant degree (or equivalent experience) and one or more professional certifications (e.g., CISSP/CISM/CISA/CRISC) or progress towards ...

variety of infrastructures, including cloud environments. We are looking for someone who has experience: performing risk assessments using MOD methodologies (such as NIST 800-53), supporting development in a secure by design methodology, and working at a technical level with teams. You will need knowledge of JSP 604/ ...

architectures and solution designs, such as Privilege Access Management, SSO, IDAM, Network security and encryption. Advise clients on regulatory compliance (e.g., ISO 27001, NIST, GDPR, PCI-DSS) Identify security vulnerabilities in system architectures and articulate these via risk terminology Due to the nature of the role Government Security Clearance ...

Skills & Experience Essential Experience in cyber risk management, ideally within a regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk ...

Skills & Experience Essential Experience in cyber risk management, ideally within a regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk ...

with Microsoft Sentinel , Defender suite , and KQL Strong scripting/automation skills ( PowerShell, Python, Logic Apps ) Solid understanding of MITRE ATT&CK , NCSC CAF , NIST CSF Stakeholder management able to translate technical complexity to non-technical audiences Degree in Computer Science, Cyber Security, or equivalent Desirable: SC-200/ ...

with Microsoft Sentinel , Defender suite , and KQL Strong scripting/automation skills ( PowerShell, Python, Logic Apps ) Solid understanding of MITRE ATT&CK , NCSC CAF , NIST CSF Stakeholder management able to translate technical complexity to non-technical audiences Degree in Computer Science, Cyber Security, or equivalent Desirable: SC-200/ ...

Owning and delivering Moneybox’s information security strategy, roadmap and operating model. Leading the ongoing development of Moneybox’s Information Security Programme, using NIST CSF as the practical risk‐management framework while aligning with ISO 27001 for governance, control maturity and assurance. Reducing real security risk across Moneybox’s technology … model. Experience & Skills Proven experience leading or significantly contributing to an information security function. Strong working knowledge of risk‐based security management and the NIST Cyber Security Framework. Experience developing and delivering information security strategy, roadmaps, policies and controls. Practical knowledge of security technologies and business systems, including identity and ...

risk registers, ensuring clear visibility, prioritisation, and mitigation progress. Ensure alignment with key standards and regulatory frameworks including: NCSC guidance and CAF ISO 27001 NIST CSF Cyber Essentials Plus Secure by Design principles Work with procurement to ensure cyber requirements are appropriately flowed down to suppliers, partners, and third-party … SIEM platforms and log analytics Firewalls, boundary protection, and secure networking Endpoint security and system hardening Hands-on implementation experience of frameworks such as: NIST CSF ISO 27001 CIS Controls Cyber Essentials (Plus) Secure by Design/Security by Design Proven ability to balance strategic thinking with tactical execution. Experience ...

high-performing technology risk team. Requirements Senior leadership in technology risk within regulated financial services. Ownership of control frameworks aligned to recognised standards (NIST, ISO, COBIT). Strong track record in risk governance and remediation of systemic issues. Operational resilience and incident management expertise. Experience engaging with regulators and executive ...

Security standards relating to the sector, including: NCSC NIS Guidance and CAF ISO 27001 and ISO 27005 NERC CIP ISA‐99/IEC 62443 NIST CSF Benefits Health and lifestyle perks accompanying private healthcare for you and your family 25 days annual leave (plus a bonus half day on Christmas ...

Desirable Skills Experience with modern identity and security approaches (e.g. Zero Trust, adaptive authentication, API security) Familiarity with frameworks and standards (e.g. ISO 27001, NIST, COBIT) Experience integrating CIAM platforms into wider enterprise environments Exposure to cloud platforms, APIs, or directory services (e.g. Active Directory) Strong stakeholder management skills and ...