651 to 675 of 773 NIST Jobs in the UK

their risk over the life of the relationship.* **Assess controls.** Review the design and operation of security controls against recognised frameworks (e.g. ISO 27001, NIST CSF), identify gaps, and track remediation through to closure.* **Maintain the Information Security Risk Register.** Identify, assess and record security risks across our systems, data … tracking remediation.* **Good technical understanding across core technology domains** such as infrastructure, networks, cloud, identity and applications.* **Working knowledge of security frameworks** (ISO 27001, NIST CSF or similar) and experience applying regulatory requirements such as FCA, DORA and GDPR.* **Relevant certifications** (e.g. CISM, CRISC, CISSP, ISO 27001 Lead Implementer/ ...

e.g., Docker, Kubernetes) and their security implications. Experience with infrastructure‐as‐code and repeatable deployment patterns. Knowledge of relevant standards and frameworks such as: NIST Cybersecurity Framework/NIST 800‐53 ISO/IEC 27001 UK NCSC guidance and Cloud Security Principles Zero Trust Architecture (NIST SP 800‐207) Experience ...

and development teams. Conduct risk assessments and threat modeling, proactively identifying vulnerabilities and mitigation strategies. Develop and maintain security policies and frameworks aligned with NIST, ISO 27001, and CIS Controls. Lead PCI‐DSS architecture and compliance, ensuring both front‐ and back‐office systems meet standards. Guide and mentor teams … security architecture or design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/ ...

will operate at both strategic and technical levels, supporting board-level decision‐making while driving operational security improvements aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director/Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time … . Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA, NIST CSF, COBIT, SANS, and related frameworks. Develop security policies, SOPs, and governance documentation. Conduct IT resilience and cloud security audits. Technical & Transformation Advisory Advise ...

CASB) Manage identities and roles effectively across cloud and hybrid environments Monitor and remediate infrastructure to comply with regulations and best practices (e.g., PCI, NIST CSF, GDPR, HIPAA) Design and implement secure container standards and automation that enable frictionless developer workflows Maintain Kubernetes security aligned with current best practices Collaborate … and cloud-to-cloud security Knowledge of CI/CD best practices and tools Familiarity with regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS, NIST CSF) Strong proficiency with Python, Terraform, and configuration management (e.g., Puppet) Hands-on experience building GitHub Actions and workflows Experience with observability and security operations ...

security management systems (ISMS), infrastructure and web applications. Support ISO 27001 implementation and maintain information security policies, standards and procedures aligned with ISO 27001, NIST and CIS frameworks. Apply the Secure Software Assurance Maturity Model to assess client compliance requirements for new products and architecture changes. Manage vulnerability assessments using … Skills and Experience Experience in cybersecurity, information security, IT risk management or security governance and compliance. Knowledge of ISO 27001, ISO 27002, PCI DSS, NIST and CIS frameworks. Experience conducting risk assessments, IT security audits and remediation tracking. Hands-on experience with vulnerability management and application security testing tools, including ...

About the Role We are seeking an experienced Security Architect to provide critical security architecture expertise across our diverse portfolio of customer engagements. In this role, you will ensure that secure-by-design principles, proactive ...

risk and governance. Design and implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review … prompt injection, data leakage and excessive agency. Strong understanding of relevant AI regulation and frameworks, particularly EU AI Act, UK GDPR/ICO, DPIAs, NIST AI RMF and ISO 42001. Experience working with regulated organisations. The ability to communicate equally well with senior executives and technical teams. Nice to have ...

risk and governance. Design and implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review … prompt injection, data leakage and excessive agency. Strong understanding of relevant AI regulation and frameworks, particularly EU AI Act, UK GDPR/ICO, DPIAs, NIST AI RMF and ISO 42001. Experience working with regulated organisations. The ability to communicate equally well with senior executives and technical teams. Nice to have ...

risk and governance. Design and implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review … prompt injection, data leakage and excessive agency. Strong understanding of relevant AI regulation and frameworks, particularly EU AI Act, UK GDPR/ICO, DPIAs, NIST AI RMF and ISO 42001. Experience working with regulated organisations. The ability to communicate equally well with senior executives and technical teams. Nice to have ...

cyber security, audit, risk management, or assurance within a regulated or technical environment Understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Strong attention to detail and ability to follow structured assurance processes Good communication and documentation skills Degree or equivalent in cyber security ...

workflows. Experience supporting regulated environments or environments with strict customer, contractual, or compliance obligations. Familiarity with AI security frameworks and guidance such as the NIST AI Risk Management Framework, NIST Generative AI Profile, OWASP Top 10 for LLM Applications, or Cloud Security Alliance AI security guidance. Experience with RAG architecture ...

and critical infrastructure within the Mission Technologies team. You’ll develop information assurance strategies, manage risk using frameworks like ISO/IEC 27000 and NIST SP-800, create security documentation, and collaborate with multidisciplinary engineers #J-18808-Ljbffr ...

about security and governance. You’ll prototype connectors, define posture checks, and map findings to MITRE ATLAS, OWASP Top 10 for LLM Apps, and NIST RMF. This role offers rapid growth, equity, and a hybrid London/remote work option. #J-18808-Ljbffr ...

The Student Loans Company is seeking a Security Risk Analyst in Glasgow to support change initiatives by assessing risks and defining security requirements across projects from concept to delivery. Responsibilities include creating security reports and ...

and delivery effort. Generate, iterate and maintain threat models and cyber risk assessments throughout the project lifecycle, using appropriate frameworks and methods such as NIST RMF. Identify and define proportionate risk treatments by applying suitable security baselines, including NIST RMF and IEC 62443, where appropriate. Generate, manage and track security … bids. Practical experience producing threat models and cyber risk assessments across the full project lifecycle. Knowledge of risk management approaches and frameworks such as NIST RMF. Knowledge of security baselines and control frameworks such as NIST, IEC 62443 or equivalent. Ability to define, manage and track cybersecurity requirements. Understanding of ...

support risk-based decision making, and work with customers, suppliers, and delivery teams to embed security throughout the lifecycle. You will drive maturity of NIST-aligned risk assessment methods, assurance processes, tooling, and reporting to improve consistency and visibility across projects. #J-18808-Ljbffr ...

controls for regulated customers. You will collaborate with data scientists and security engineers to prepare training datasets, and support compliance reporting against AI Act, NIST RMF, and ISO standards. #J-18808-Ljbffr ...

role in delivering high-quality client cyber risk engagements. You'll support the implementation of risk management methodologies aligned to recognised frameworks such as NIST CSF, ISO 27001, CIS Benchmarks, Cyber Essentials and NCSC guidance. You'll manage, develop and mentor your team and be focused the continued growth of … experience within Cyber Security, Information Security, Technology Risk, IT Audit, or Operational Risk. Knowledge of cyber security frameworks including: ISO 27001/27002/NIST Cybersecurity Framework/Cyber Essentials/CIS Controls Previous consulting, advisory or professional services experience. Experience managing small teams and working collaboratively with Senior Managers ...

business, security, infrastructure, and compliance teams to develop security roadmaps, assess risks, integrate modern security technologies, and ensure alignment with industry frameworks such as NIST 800-207. The role requires extensive experience in security architecture, cloud security, identity management, and enterprise risk management, combined with strong stakeholder engagement and … architecture, or related disciplines, with experience delivering security solutions within Defence or highly regulated environments.Proven experience designing and implementing Zero Trust Architectures, aligned to NIST SP 800-207 principles.Strong knowledge of Identity and Access Management (IAM), network security, endpoint security, cloud security, and security monitoring capabilities.Experience developing and integrating security ...

broad range of services including penetration testing, Cyber Essentials Plus assessments, technical information security reviews and security assessments aligned to recognised frameworks such as NIST, ISO 27001 and PCI-DSS. As a senior member of the team, you will provide technical leadership, assure the quality of assessment outputs, contribute … Experience with cloud security assessments across Microsoft Azure and Microsoft 365 environments. Exposure to SIEM, EDR and security monitoring platforms. Understanding of frameworks including NIST CSF, ISO 27001, PCI-DSS and CIS Controls. Experience leading teams or mentoring junior consultants. Belong @ Sumer At Sumer, we know everyone’s journey ...

with active SC clearance. I am keen to speak with candidates who have Strong information risk management experience, including use of methodologies such as NIST 800-30/37 and ISO 31000. CISSP, CISM or CRISC qualification Experience working with system, operational and strategic levels of risk and performing threat … Proven experience using multiple cyber threat intelligence feeds and turning them into actionable reports. Experience providing advice, guidance and assurance against standards such as NIST, ISO 27001, CIS, CAF, HMG GovS 007 and NPSA. Experience managing internal and external cyber security risks to IT systems, services and data storage, particularly ...

which your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat … modeling, security testing) and determining residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle ...

management within a high-threat government environment. Skills and Experience: Proven expertise in risk management, particularly in information security, utilizing recognized methodologies such as NIST 800-30/37 and ISO 31000. Experienced in managing both internal and external cybersecurity risks related to IT systems, services, and data storage, especially … within digital cloud services. Demonstrated ability to provide advice, guidance, and assurance documentation in line with security standards, including NIST, ISO 27001, CIS, CAF, HMG GovS 007, and NPSA. Knowledgeable and hands-on experience with security architecture and Security Information and Event Management (SIEM) tools. Solid track record in risk ...

Information Security Analyst (6 month FTC) Full-time Permanent/Regular or Fixed Term Contract/Temporary: Fixed Term Contract (UK and ROW)/Temporary (US) L&G Business Unit: Legal & General Retirements Institutional L ...