276 to 300 of 642 NIST Jobs in the UK

internal and external assessmentsSupport the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc. Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning the security risk management process to include ...

experience managing risk registers, control frameworks, remediation plans and executive reporting. Working knowledge and experience supporting or managing SOC 2, ISO 27001/27002, NIST CSF or similar certification processes. Practical understanding and experience of global data protection and supplier risk requirements. Experience translating and documenting technical controls and regulatory ...

and other regional laws in those fields; it helps if you understand related frameworks and standards, such as ISO 27001, 27701, 23894 and 42001, NIST Privacy and AI Risk Management frameworks, SOC 2, and Privacy by Design (PbD) principles. On the last bullet: we are interested in your practical abilities ...

record of delivering digital transformation and technology change programmes ** Strong understanding of information and cyber security, ideally including Cyber Essentials Plus, ISO 27001 or NIST ** Strong Microsoft technology experience across Azure, Microsoft 365 and wider IT infrastructure ** Experience overseeing servers, networks, end-user technology, communications, backup/recovery and ...

will be looking for in you:ð In-depth, practical experience obtaining and maintaining ISO 27001 certification, with solid knowledge of frameworks such as NIST — typically 3–5 years in an information security compliance role, though other experience levels will be considered.ð Proven ability to develop and maintain security policies ...

security tooling (SIEM, EDR, IDS/IPS, NDR, SOAR) and experience extending or building on it. You are proficient in applying Incident Response frameworks (NIST IR Lifecycle, Cyber Kill Chain, MITRE ATT&CK) to real-world scenarios, and you collaborate effectively with engineering colleagues, leveraging extensive expertise across infrastructure and ...

digital banking security, and third-party/vendor risk management. Advise financial institutions on regulatory compliance (e.g., FCA/PRA, - relevant regulations, , ISO 27001, NIST, CSF, Data Privacy regulation). Act as a thought leader, contributing to industry forums, white papers, and public discussions on digital security, cyber risks, and ...

fraud detection, digital banking security, and third-party/vendor risk management. Advise financial institutionsonregulatory compliance(e.g., FCA/PRA, - relevant regulations, , ISO 27001, NIST,CSF, Data Privacy regulation). Act as a thought leader, contributing to industry forums, white papers, and public discussions ondigital security, cyber risks, and operational ...

lifecycle Essential Experience Experience within cyber security, vulnerability management, risk assessment, audit or compliance functions Strong understanding of cyber security frameworks and standards, including NIST and ISO 27001 Knowledge of the MITRE ATT&CK framework Experience applying Secure by Design principles Ability to communicate effectively with technical and non-technical ...

growth is intentional and grounded in real delivery. We support training and development aligned to the frameworks and standards our clients actually use, including: NIST (e.g. Cyber Security Framework and risk management models)UK National Cyber Security Centre guidance, including the Cyber Assessment Framework (CAF)UK public sector security, resilience ...

equivalent qualification in risk, IT or information security. Strong technical experience in IT, information security, technology risk and resilience, including frameworks such as NIST and ISO 27001. Proven second line experience in risk oversight, assessment, control evaluation and embedding enterprise risk frameworks and risk appetite. Demonstrated leadership and delivery capability ...

and influence outcomes in support of enterprise projects. You will be confident working across the major information security frameworks and standards, including ISO 27001, NIST and SOC 2, and able to shape risk, compliance and control decisions in a way that keeps both us and our clients secure without slowing ...

Splunk, Log Rhythm, Qualys Implementing security technology controls, secure config and implementation of security projects Information security risks management, controls and frameworks (NIST, CIS, PCI-DSS) IT Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM ...

weaknesses, non-compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility of: Security risks, Compliance status ...

Splunk, Log Rhythm, Qualys Implementing security technology controls, secure config and implementation of security projects Information security risks management, controls and frameworks (NIST, CIS, PCI-DSS) IT Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM ...

qualification in cyber security, IT or a related field, or equivalent demonstrable experience. Strong working knowledge of industry frameworks and standards such as NIST, CAF and ISO27001. Strong interpersonal skills and a proven desire for continued personal development. Due to the nature of the work we can only represent sole ...

appropriately recorded and accepted. Ensure penetration testing and remediation activities align with relevant security standards, regulatory requirements and industry best practice, including OWASP, NIST, ISO 27001, PCI-DSS, GDPR and CAF. Ensure appropriate governance, documentation and evidence is maintained throughout the testing lifecycle. Provide assurance over the quality and effectiveness ...

appropriately recorded and accepted. Ensure penetration testing and remediation activities align with relevant security standards, regulatory requirements and industry best practice, including OWASP, NIST, ISO 27001, PCI-DSS, GDPR and CAF. Ensure appropriate governance, documentation and evidence is maintained throughout the testing lifecycle. Provide assurance over the quality and effectiveness ...

appropriately recorded and accepted. Ensure penetration testing and remediation activities align with relevant security standards, regulatory requirements and industry best practice, including OWASP, NIST, ISO 27001, PCI-DSS, GDPR and CAF. Ensure appropriate governance, documentation and evidence is maintained throughout the testing lifecycle. Provide assurance over the quality and effectiveness ...

risk assessment methodologiesFamiliarity with MOD security requirements, Classification Guides and security policyKnowledge of ITAR regulations and export control requirementsUnderstanding of security standards (ISO 27001, NIST CSF, etc.)Practical knowledge of common IT architectures and technologiesPersonal AttributesStrong analytical and problem-solving skillsExcellent leadership skillsExcellent written and verbal communication skillsAttention to detail ...

Familiarity with MOD security requirements, Classification Guides and security policy. Knowledge of ITAR regulations and export control requirements. Understanding of security standards (ISO 27001, NIST CSF, etc.). Practical knowledge of common IT architectures and technologies. Personal Attributes Strong analytical and problem-solving skills. Excellent leadership skills. Excellent written and ...

recovery and business continuity Data platforms and integration architectures Familiarity with one or more of the following technology frameworks and best practices: ITIL COBIT NIST ISO 27001 Well-Architected Frameworks Cloud Adoption Frameworks Experience evaluating technology risks, technical debt and technology investment requirements. Solid understanding of core cybersecurity principles and … transformation programmes. Exposure to cybersecurity risk assessments, cloud security reviews, security architecture, or technology control frameworks. Familiarity with cybersecurity frameworks and standards such as NIST CSF, CIS Critical Security Controls or ISO 2701. Industry-recognised certifications, such as: ITIL TOGAF COBIT CISSP CISM CCSP CRISC Experience working with private equity ...

and exploitation methods and controls to mitigate. Scripting experience (PowerShell, Python, etc.) Understanding of Full Stack Java development. Understanding security standards and compliance requirements (NIST, ISO, PCI, HIPPA, Sox, etc.). Experience leading global teams Supervisory Responsibilities: This job has supervisory duties Posting date: Sunday 16th August 2026 [11.59pm] #LI ...

substantial training leading to nationally recognised certifications, such as chartered or principal status with the UK Cyber Security Council, or certifications such as CompTIA, NIST, PCiIAA, CISMP, CISSP, CREST, ISO27001 Lead Implementer/Auditor, SABSA, and TOGAF. A Mentor will be on hand to provide support and guidance throughout your ...

experience within Cyber Security, Information Security, Technology Risk, IT Audit, or Operational Risk. Knowledge of cyber security frameworks including: ISO 27001/27002/NIST Cybersecurity Framework/COBIT/CIS Controls Experience supporting clients through compliance assessments, control testing, remediation planning and governance reporting activities. Experience managing small teams ...