601 to 625 of 778 NIST Jobs in the UK

shape secure-by-design practices across development teams. You will lead tooling, drive automation, and mentor engineers while aligning with ISO 27001/NIST/GDPR standards. The role combines strategy and hands-on security leadership within a hybrid work model, spanning multiple locations including London, Staines and Salford Quays. ...

leakage, model access control and agentic tool-use risk Familiarity with regulatory frameworks relevant to the sector, including DORA, UK GDPR, ISO 27001 and NIST CSF Experience running structured risk assessments and translating them into actionable controls Strong stakeholder management, with the confidence to engage both technical teams and senior … generative AI architectures, including agentic and tool-use/connector risk AI governance concepts and frameworks, such as ISO/IEC 42001 and the NIST AI Risk Management Framework DORA, ISO 27001, NIST CSF and UK/EU GDPR requirements Vendor and third-party risk assessment methodology Secure software development ...

leakage, model access control and agentic tool-use risk Familiarity with regulatory frameworks relevant to the sector, including DORA, UK GDPR, ISO 27001 and NIST CSF Experience running structured risk assessments and translating them into actionable controls Strong stakeholder management, with the confidence to engage both technical teams and senior … generative AI architectures, including agentic and tool-use/connector risk AI governance concepts and frameworks, such as ISO/IEC 42001 and the NIST AI Risk Management Framework DORA, ISO 27001, NIST CSF and UK/EU GDPR requirements Vendor and third-party risk assessment methodology Secure software development ...

and control effectiveness assessment. Experience assessing technical controls across cloud, infrastructure, identity, networks and applications. Strong working knowledge of frameworks such as: ISO 27001 NIST Cybersecurity Framework NIST 800-53 CIS Controls MITRE ATT&CK Experience producing board-level reporting and translating technical findings into business risk. Excellent stakeholder management ...

access management (IAM). Strong engineering background with expertise in Windows Server, endpoint platforms, macOS, and Linux. Strong knowledge of information security frameworks, including NIST and relevant NIST 800- series publications. Hands‐on experience with SIEM technologies, including data ingestion, monitoring, alerting, and integration with security operations processes. Proficiency ...

systems, including ... Security architecture approaches including segmentation, zoning, secure remote access, monitoring, logging and telemetry. Recognised frameworks and standards such as IEC 62443, NIST CSF, NCSC CAF, ISO 27001, NIS/NIS2 and related regulatory requirements. OT security tooling and monitoring platforms such as Nozomi, Claroty, Dragos, Microsoft Defender … networks and the operational constraints that shape cyber security decisions in safety‐critical environments. Experience applying recognised frameworks and standards such as IEC 62443, NIST CSF, NCSC CAF, ISO 27001, NIS/NIS2 or related regulatory requirements. Proven ability to translate cyber risk into practical architecture decisions, control designs, implementation ...

and Key Security Risk Indicators. Supporting the development of the necessary Information Assurance artefacts and outcomes which support compliance against the MoD assurance process (NIST 800-30/37/53). Support Information Assurance based engagements with Partners/suppliers and Authority representatives. Support and contribute towards Security Working … environments and technology (e.g. AWS, Azure, Google) Knowledge of the Software Development Lifecycle for applications and services Working knowledge of Gov Standard 007: Security, NIST standards (800-30/37/53/161), MITRE ATT&CK, CIS Controls, ISO 27001/5, Def-Stan 05-138, JSP 892, and ...

Principal Accountabilities Information Security Develop, implement, and maintain information and cyber security policies, standards, and procedures Ensure alignment with recognized frameworks (ISO 27001, NIST CSF, CIS Controls) Conduct risk assessments across IT, cloud, and Operational Technology (OT) environments Support incident response planning and continuous improvement of security controls Embed secure … implementing data governance frameworks Strong understanding of international data protection and cybersecurity regulations JOB DESCRIPTION Experience working within regulated environments Familiarity with ISO 27001, NIST, or equivalent frameworks Experience supporting audit and compliance processes Desired Experience in the energy, utilities, or critical infrastructure sector Exposure to Operational Technology (OT) environments ...

access, and privileged access management strategies. Implementing security controls aligned with security standards, industry best practices and regulatory requirements such as PCI, ISO, CIS, NIST, CSA, NIS, GDPR etc. Evaluating emerging technologies, identifying security risks early, and influencing strategic technology decisions across the organisation. Guiding incident readiness and resilience initiatives … modern DevSecOps practices. You’re comfortable translating technical complexity into clear decisions, and confident working with stakeholders at all levels. You understand frameworks like NIST, ISO 27001, CIS, OWASP etc., and ideally have experience designing or supporting PCI compliant environments. You’re hands‐on with tools such as SIEM ...

effective risk management and assurance practices across the business. Support the ongoing development of the Technology Risk Management Framework aligned with recognised standards including NIST Cybersecurity Framework, ISO 27001 and industry best practice. Drive continuous improvement of governance, risk and compliance (GRC) processes, reporting, automation and assurance activities. Support regulatory … retail organisation. Professional certifications such as CRISC, CISA, CISM, CISSP or equivalent. Experience working within large retail, e-commerce or multinational organisations. Knowledge of NIST Cybersecurity Framework, ISO 27001, COBIT and ITIL. Experience with data analytics, continuous controls monitoring or assurance automation. Familiarity with PCI DSS, SOX or other regulatory ...

cyber security specialist within client delivery teams. Support secure‐by‐design activity across projects, products and technology change. Turn frameworks such as NCSC CAF, NIST CSF, ISO 27001 and IEC 62443 into clear, practical requirements. Support security assurance, risk assessment and control implementation across client programmes. Enable compliance with applicable … work well with senior security leaders, technical teams and third parties. Experience with threat and risk assessments, practical controls and recognised frameworks such as NIST CSF, ISO 27001, IEC 62443, NCSC CAF, GDPR, PCI DSS or NIS. Knowledge in one or more areas such as cloud security, OT/ ...

adversarial attacks, data poisoning, model theft, and supply chain vulnerabilities Support clients in navigating the evolving AI regulatory landscape — including the EU AI Act, NIST AI RMF, and ISO/IEC 42001 — and maturing their AI governance and control frameworks Develop compelling proposals, architectures, and business cases that articulate … machine/non-human identity governance Familiarity with SIEM platforms (e.g. Microsoft Sentinel, Splunk) and SOAR tooling Awareness of AI governance frameworks and standards (NIST AI RMF, ISO/IEC 42001, EU AI Act) Strong commercial acumen with experience supporting bids, proposals, or client-facing opportunity development Excellent communication and ...

based security and zero-trust platforms (e.g., Zscaler ZIA, ZPA, ZDX) Creating enterprise-wide security blueprints and reference architectures aligned with Zero Trust principles (NIST 800-207, CISA). Designing scalable identity-centric security controls using SSO, MFA, device posture, and least-privilege access models. Collaborating with networking teams … with: Zscaler ZIA, ZPA, ZDX or similar Zscaler Client Connector App Connectors, Cloud Firewall, Cloud Sandbox, DLP, CASB Deep understanding of: Zero Trust frameworks (NIST 800-207, SASE, SSE) Identity and access management (Azure AD, Okta, Ping) Modern network design (SD-WAN, DNS security, routing fundamentals) Endpoint security (EDR/ ...

Salary Up to £40,000 per annum We are looking for a talented and motivated Information Security Analyst to join Stagecoach and play a vital role in protecting our network infrastructure, computer systems and data ...

vulnerability scanners, and OT‐specific platforms, such as Claroty, Dragos, Nozomi, or similar platforms Familiarity with relevant security frameworks and standards, like IEC 62443, NIST SP 800‐82, NIST SP 800‐207, NIST CS, NERC CIP, and MITRE ATT&CK (Enterprise and IC) Proficiency in scripting and automation (Python, PowerShell ...

patch coordination, configuration remediation, exception tracking, and risk‐based prioritisation. Implement and maintain security controls in line with recognised frameworks such as IEC 62443, NIST Cybersecurity Framework, NIST SP 800‐82, CIS Benchmarks, and NCSC guidance. Work with OT engineers to ensure security changes do not adversely affect system availability … engage technical and non‐technical stakeholders. Eligibility to obtain and maintain BPSS clearance. Desirable skills and experience Active SC clearance. Experience with IEC 62443, NIST SP 800‐82, NIST CSF, CIS Controls, or NCSC OT security guidance. Familiarity with OT‐specific technologies, protocols, or vendors. Experience with SIEM ...

patch coordination, configuration remediation, exception tracking, and risk‐based prioritisation. Implement and maintain security controls in line with recognised frameworks such as IEC 62443, NIST Cybersecurity Framework, NIST SP 800‐82, CIS Benchmarks, and NCSC guidance. Work with OT engineers to ensure security changes do not adversely affect system availability … engage technical and non‐technical stakeholders. Eligibility to obtain and maintain BPSS clearance. Desirable skills and experience Active SC clearance. Experience with IEC 62443, NIST SP 800‐82, NIST CSF, CIS Controls, or NCSC OT security guidance. Familiarity with OT‐specific technologies, protocols, or vendors. Experience with SIEM ...

cyber assurance, audit, risk management, or control testing within a regulated environment In-depth understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Domain-specific knowledge in at least one of: OT, technical architecture, or supply chain security Strong analytical, reporting, and stakeholder engagement ...

cyber assurance, audit, risk management, or control testing within a regulated environment In-depth understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Domain-specific knowledge in at least one of: OT, technical architecture, or supply chain security Strong analytical, reporting, and stakeholder engagement ...

cyber assurance, audit, risk management, or control testing within a regulated environment In-depth understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Domain-specific knowledge in at least one of: OT, technical architecture, or supply chain security Strong analytical, reporting, and stakeholder engagement ...

business stakeholders to ensure controls are practical and aligned to business needs. The role requires extensive experience in tech assurance and governance, knowledge of NIST/COBIT/ISO 27001/ITIL, and operation within a Three Lines of Defence model; you will design, implement and report on control #J ...

and the application of OT cyber security good practice. In-depth knowledge and practical experience of relevant standards and regulatory frameworks, including ISO 27001, NIST Cybersecurity Framework, IEC 62443, NCSC CAF, UK GDPR, the UK NIS Regulations and applicable energy-sector regulatory requirements. Someone who enjoys a varied environment, sharing … CISM UK Cyber Security Council - Chartered Cyber Security Professional (ChCSP) IEC ISA 62443 expert cyber security certificate. Experience with the Cyber Assessment Framework, NIST CSF, ISO27001, NIST SP 800-82, IEC ISA 99/62443 and CIS Controls. Strong understanding of IT and OT security risks. Knowledge of the threat ...

critical infrastructure e.g. Power, Utilities, Transportation etc. Previous security consultancy experience ideal Familiarity with ICS security standards such as ISA/IEC 62443, NIST 800-82, NERC-CIP Are you a candidate looking for a new role? #J-18808-Ljbffr ...

turning security requirements into practical controls and actionable reporting for technology teams and leadership. Ideal candidates will bring hands-on experience across ISO 27001, NIST CSF and security dashboards, with stakeholder collaboration across infrastructure and cloud #J-18808-Ljbffr ...

Global Engineering Digital & Automation Team. You will support CAPEX projects, act as OT SME, coach teams, and ensure compliance with ISA99/IEC-62443, NIST CSF, ISO 27001 standards. You will coordinate internal and external resources and manage risk across major projects valued at hundreds of millions of dollars. #J ...