26 to 50 of 288 NIST Jobs in the UK

and hybrid architectures, threat modelling, identity and access management, networking and cryptography. Risk and compliance: Experience applying governance, risk and compliance frameworks (ISO 27001, NIST, NCSC) and translating the CIA triad into practical controls. Communication and leadership: Able to articulate complex security concepts to stakeholders and influence decisions; collaborate across ...

cloud and hybrid architectures, threat modelling, identity and access management, networking and cryptography. Risk and compliance: Experience applying governance, risk and compliance frameworks (ISO27001, NIST, NCSC) and translating the CIA triad into practical controls. Communication and leadership: Able to articulate complex security concepts to stakeholders and influence decisions; collaborate across ...

threat modeling, secure design reviews, and engineering‐focused risk assessments Familiarity with industry standards and frameworks such as ISO 27001, SOC 2, OWASP, and NIST CSF Experience supporting digital product teams or client‐facing technology delivery units; knowledge of privacy and data protection regulations (e.g., GDPR, CCPA); and relevant professional ...

Security 8. Continuous Improvement & Awareness Experience: Holder of relevant CyberSecurity Certifications e.g. CISM, CCSP or CISSP Strong knowledge of security frameworks (e.g., ISO 27001, NIST, CIS Controls) Understanding of cloud security principles (Azure, AWS, or GCP) Familiarity with the concepts, standards and tools involved in controlling identity and access management ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

experience securing Microsoft 365 services (e.g. SharePoint, Teams, Copilot). Evidenced knowledge and understanding of security frameworks, standards and best practices (CAF, Cyber Essentials, NIST, ISO27001). Proven familiarity with modern network, cloud and identity security concepts such as authentication, firewalls, endpoint protection, email security, vulnerability management, logging, monitoring and ...

Desirable Degree in Information Security or significant programme security experience Certifications: CISSP, CISM, CRISC, CGRC (any) Knowledge of Government Standard 007, ISO 27001 and NIST Strong written/oral/presentation skills Supply chain security management experience/knowledge Experience supporting security awareness/education programmes Problem management and/ ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

Qualifications & Certifications CISSP, CISM, GIAC, GCIH, GCIA, or equivalent security certifications. Experience within regulated or critical service environments. Knowledge of security frameworks such as NIST CSF, ISO 27001, CIS Controls, or MITRE ATT&CK. Experience managing third-party SOC or security service providers. ...

organisational culture, with an emphasis on balancing security needs with useability and reducing user friction. Technical Mastery: Knowledge of security frameworks (e.g. ISO 27001, NIST, and/or NCSC guidance), security risk management, security architecture, and best practices for safeguarding sensitive assets. Regulatory Compliance: Familiarity with UK legislation, standards, and ...

of AWS and GCP IAM security models. In-depth knowledge of cloud infrastructure including VPC, EC2, S3, Cloud Storage and Compute Engine. Familiarity with NIST, ISO 27001 and CSA STAR compliance frameworks. Experience engaging with Information Security, Risk, Control & Compliance, Architecture and Project teams. Demonstrated expertise in Threat Modelling methodologies ...

complex and highly regulated environments. Excellent stakeholder management skills, with the ability to influence at executive level. Knowledge of frameworks such as ISO 27001 , NIST , Cyber Essentials and recognised security best practice. Professional certifications such as CISSP , CISM or equivalent are desirable. Contract Details Duration: 12 months Location: East Kilbride ...

and architecture across on-premises and cloud environments. Develop security policies, standards, and procedures in alignment with business and compliance requirements (e.g., ISO 27001, NIST, SOC 2, GDPR). Lead threat modeling, vulnerability assessments, and penetration testing to identify and mitigate risks. Collaborate with IT, DevOps, and application development teams ...

security, SIEM, DLP) You'll Bring 10+ years enterprise security architecture (IAM, cloud security, GDPR) Deep frameworks knowledge (TOGAF, SABSA, CISSP/CISM, ISO27001, NIST) Proven stakeholder influence with senior business/technology leaders Cloud expertise (Azure/AWS/GCP) + network, encryption, incident response Package Competitive salary + ...

Python, PowerShell or Bash Desirable Experience Defence, aerospace or other highly regulated environments Kubernetes and container security SIEM/SOAR platforms Zero Trust Architecture NIST, ISO 27001, NCSC or NIS2 frameworks CISSP, CCSP, Security+, CEH or equivalent certifications Cloud security certifications Security Clearance Due to the nature of this programme ...

Microsoft security technologies (Azure, Entra ID, Conditional Access, PIM, Defender, Microsoft 365 security stack) Strong understanding of security governance, risk, and compliance frameworks including NIST and FAIR Experience delivering security architecture within multi-year transformation programmes Strong stakeholder management and executive communication skills If you're looking to join ...

background in threat analysis and risk assessment, you'll have a solid working knowledge of security frameworks and standards such as Cyber Essentials, NIST or ISO 27001, alongside an understanding of UK GDPR and data protection requirements. Our values Our values are important to us and we're looking ...

and infrastructure security Zero Trust principles Identity and Access Management (IAM) Secrets management Workload isolation and micro segmentation Knowledge of security standards and frameworks: NIST, ISO 27001, CIS Benchmarks NCSC Cloud Security Principles Government Security Classifications Policy Desirable Skills Experience with OpenShift or enterprise Kubernetes distributions. Hands on security tooling ...

guidance and training on governance, risk and compliance matters. Comprehensive knowledge of recognised Technology GRC frameworks, standards and methodologies, including COBIT, ITIL, ISO 27001, NIST and GDPR. Highly developed influencing, negotiation and stakeholder management skills, with the ability to build credibility, drive engagement and inspire positive change. Excellent analytical, problem ...

Cyber Security Governance. Experience conducting cyber risk assessments and developing risk treatment plans. Strong understanding of security frameworks and standards, including ISO 27001, NIST and industry best practices. Experience delivering security assurance reviews, audits and control effectiveness assessments. Knowledge of cloud security principles with exposure to Azure and/ ...

Relevant professional qualifications (e.g., CISA, CISM, CISSP or other) and/or relevant graduate degree. Working knowledge of cyber security frameworks or standards (e.g., NIST, CIS, ISO). Financial services industry knowledge (highly valued). Understanding of Cyber Kill Chain, MITRE ATT&CK framework, and threat modelling concepts. Programme/ ...

Security DevSecOps Security Architecture Experience in application architecture, software engineering, or infrastructure architecture Knowledge of security standards and frameworks including NCSC, ISO 27001, SOC, NIST, PCI DSS, GDPR Experience with security testing tools and techniques Experience implementing Continuous Security, CI/CD, and DevSecOps practices Strong understanding of: Network security ...

more of the following: Cyber Governance, Risk & Compliance (GRC) Delivering security consulting engagements Implementing or assessing controls against recognised frameworks including: ISO 27001 NIST NIS NCSC Cyber Assessment Framework (CAF) DORA TISAX IEC 62443 Conducting cyber risk assessments and governance reviews Developing security policies, standards and procedures Building business cases ...

Cyber Essentials Plus, IASME Governance, GDPR and relevant information security standards or best practice frameworks Knowledge of additional frameworks such as CAF, NIS-2, NIST Cybersecurity Framework, CIS Controls, SOC 2, ISO 22301, ISO 27701 or PCI DSS. ExperienceusingGRC,auditmanagement,riskregisterorreporting tools. HoldSC/DVclearanceorwillingnesstoundertakesecurity vetting. MemberofCiSPoranotherrelevantprofessional community. Willingnesstostudyforandattainfurtherrelated qualifications. ...