701 to 725 of 775 NIST Jobs in the UK

Job Description Your impact Leonardo is seeking an experienced Red Team Consultant to join our growing Offensive Security capability. This role is open to both Senior and Principal level Consultants. Working within a defence-focused ...

Job Description Your impact Leonardo is seeking an experienced Red Team Consultant to join our growing Offensive Security capability. This role is open to both Senior and Principal level Consultants. Working within a defence-focused ...

and technical teams to implement secure configurations Support and maintain security policies, procedures and controls Ensure alignment with recognised frameworks including ISO 27001 and NIST Deliver user awareness initiatives such as phishing simulations and training Stay up to date with emerging threats and recommend improvements to strengthen security posture Support … platforms, vulnerability management tools and detection response technologies such as EDR, XDR or MDR Knowledge of cyber security frameworks such as ISO 27001 or NIST Understanding of data protection legislation including GDPR Ability to investigate incidents, analyse findings and communicate clearly with stakeholders Strong analytical and problem-solving skills Ability ...

technologies, including Zscaler, while working with cross-functional security, networking and infrastructure teams. Key Responsibilities Design and implement enterprise Zero Trust architectures aligned to NIST 800-207 and CISA principles. Develop secure access models using Zscaler ZIA, ZPA, ZDX and Client Connector . Design identity-centric controls covering … Client Connector or similar Zero Trust technologies. Experience with App Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASB . Strong understanding of Zero Trust, NIST 800-207, SASE and SSE . Knowledge of IAM, Entra ID/Azure AD, Okta or Ping . Understanding of SD-WAN, DNS security, routing ...

Taxonomy Leadership Design, implement, and continuously enhance risk management frameworks and taxonomies, ensuring clarity, consistency, and alignment with regulatory, legal, and industry standards (e.g., NIST, ISO 27000, COBIT). Controls Uplift & Transformation Lead and execute cross-functional initiatives to uplift and transform technology controls, ensuring they are robust, effective, and … continuous improvement in risk management practices Preferred Qualifications, Capabilities, and Skills Experience in designing, implementing, and operating industry-standard frameworks such as COBIT, ITIL, NIST Experience working in 1LoD Technology Risk and Control function. We welcome candidates with experience from medium-size firms who can demonstrate Deep understanding ...

current SMR technology, security controls and capabilities. Develop a comprehensive target-state Cyber Security Architecture. Map current and future-state capabilities against the NIST Cybersecurity Framework (NIST CSF). Identify gaps in security controls, implementation, adoption and utilisation. Develop recommendations and a clear roadmap to address identified gaps. Work closely … background in Cyber Security Architecture or Security Engineering. Experience assessing complex enterprise security environments. Strong understanding of Security Monitoring, Detection & Response. Good knowledge of NIST CSF and security control frameworks. Experience conducting security gap analysis and developing transformation roadmaps. Strong stakeholder management and communication skills. Experience working within financial services ...

technologies, architectures, protocols, threats and controls Proven experience building a security capability, service or function from the ground up Strong knowledge of IEC 62443, NIST CSF and NIST SP 800-82 Practical experience applying the Purdue model within manufacturing/engineering organisations Working knowledge of project management principles Willingness ...

Head of Information Security Network Security/Microsoft 365/Azure/Identity and Access/NIST CSF London (Hybrid -2 Days Onsite, 3 Days WFH per week) Up to £125,000 depending on skills and experience + Benefits + Bonus Are you a hands-on security professional ready … Good knowledge of cloud security, ideally within Microsoft 365 and Azure A strong understanding of identity, authentication, privileged access and access control Experience applying NIST CSF, CIS Controls or ISO 27001 as practical tools, with a record of improving security standards and policies Desirable: Google Enterprise knowledge, a recognised security ...

Extensive experience with the NIST RMF and independently leading security control assessments from start to finish using the NIST Framework. Experience in several of the following areas is required: understanding of IT security practices and procedures; knowledge of current security tools available; different communication protocols; encryption techniques/tools; secure ...

with business, security, infrastructure and compliance teams to develop security roadmaps, assess risk, integrate modern security technologies and ensure alignment with frameworks such as NIST SP 800-207. Key Responsibilities Architect solutions and technically lead their implementation, including on-prem secure cloud and Zero Trust architecture, in line with … security, security architecture or related disciplines, including delivery within Defence or highly regulated environments Proven experience designing and implementing Zero Trust Architectures aligned to NIST SP 800-207 Strong knowledge of IAM, network security, endpoint security, cloud security and security monitoring Experience integrating security architectures into wider enterprise, cloud and ...

and assurance of Backend Platform and endpoint protection and vulnerability management capabilities within secure, offline (air-gapped) environments . The Architect must apply the NIST Cybersecurity Framework and MoD security policies to the backend platform, while supporting the Security and Infrastructure teams in designing and implementing security controls across … security controls. Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer. Ensure compliance with MOD, NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. Collaborate with infrastructure ...

and implement comprehensive Information Assurance Strategies to meet complex customer security requirements. Lead risk management activities that align with an industry standard such as NIST SP 800-37 or the ISO/IEC 27000 series. Create and maintain security documentation including system security plans, policies, procedures, and compliance evidence. Interface … Engineer - Product Security The ability to interpret and implement industry security standards and frameworks such as the ISO/IEC 27000 series or NIST SP-800 series. Experience in information assurance, security engineering, cyber security, or a similar field. Deep understanding of security risk management and assurance methodologies & processes. Experience ...

support application security platforms, providing expert troubleshooting and incident support. Make sure security controls align with industry standards and regulatory requirements including ISO 27001, NIST and GDPR. Develop performance metrics and reporting that help measure and improve application security outcomes. Work with technology, compliance and business teams to strengthen security … Terraform, PowerShell, Python and REST APIs. Experience leading technical teams and developing high-performing engineers. Knowledge of security frameworks and regulations including ISO 27001, NIST and GDPR. Excellent communication skills, with the ability to explain technical concepts clearly to different audiences. Degree-level qualification in Cyber Security, Information Technology ...

and contribute to the delivery and continuous improvement of the Information Security Management System (ISMS), ensuring alignment with regulatory requirements and recognised frameworks (e.g. NIST CSF, NYDFS, ISO 27001). Translate strategic direction into operational assurance activities, ensuring effective tracking, governance and reporting of security activities, control performance and … assessment and assurance delivery. Demonstrable experience in technical security assurance across infrastructure, applications and cloud environments. Strong working knowledge of recognised frameworks such as NIST CSF and ISO 27001. Experience supporting regulatory compliance obligations (e.g. FCA, PRA, NYDFS or equivalent). Experience supporting audit activities and remediation tracking. Experience ...

relevant frameworks (e.g., GovAssure, JSP 604) and supporting the client in securing Authority to Operate (ATO) status. Implement and manage security risk processes (e.g., NIST RMF), producing assurance and risk artefacts, and embedding a culture of continuous risk management. Collaborate with clients to understand their security needs, provide solution advice … trusted advisor, and shape solutions that embed Secure by Design (SbD) principles from inception. Lead security maturity assessments (e.g., against ISO 27001, NIST CSF, DevSecOps practices) and deliver remediation roadmaps to uplift client cyber resilience and support external audit requirements. We are always listening to our growing teams and evolving ...

Information Security Risk Framework. Assess the effectiveness of information security controls and identify opportunities for improvement. Apply recognised security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, PCI-DSS, and other relevant best practices in a proportionate and risk-based manner. Liaise with Cyber Security, IT, Business Continuity … Management principles and methodologies. Experience conducting risk assessments, control reviews, audits, or assurance activities. Technical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS, and related security practices. Strong communicator with positive influencing and interpersonal skills. Ability to synthesise complex technical and ...

and network environments and play a central role in maturing our compliance programme through ISO 27001 renewal, Cyber Essentials certification and alignment with the NIST and CMMC frameworks. This is a senior, hands-on role for someone who thrives taking on a task, shaping the plan, bringing the right people … lead the response alongside our external Security Operations Centre (SOC). You’ll drive our compliance and accreditation work for ISO 27001, Cyber Essentials, NIST and CMMC, using Vanta to manage control coverage and evidence collection. You’ll also contribute to the ongoing development of our Information Security Management System ...

development Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering organization … communication with peers, stakeholders, auditors, and customers Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance A degree ...

development Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering organization … communication with peers, stakeholders, auditors, and customers Understanding of industry-recognised security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance A degree ...

tooling developmentDevelop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us)Develop systems, automations, and methods of security observability to push the GRC engineering organization … require communication with peers, stakeholders, auditors, and customersUnderstanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidanceA degree ...

exposure to prompt injection) Map findings to frameworks: link the issues we find to MITRE ATLAS, OWASP Top 10 for LLM Applications, and NIST AI RMF so customers understand the risk behind what we show them Write up findings: write clear technical notes on what each platform shares, which checks … of: Microsoft Copilot Studio, Azure AI Foundry, AWS Bedrock, Anthropic Claude, OpenAI Assistants Exposure to security frameworks: OWASP, MITRE ATT&CK/ATLAS, NIST Any experience with Python or .NET, even from coursework or personal projects Experience with cloud platforms (Azure, AWS) at any level Signs that you enjoy technical ...

Privacy Manager/Senior Manager - Cyber Strategy & Transformation Overview Data privacy is a critical business priority and a key enabler for organisations seeking to grow in increasingly data-driven environments. This role focuses on shaping ...

systems and programmes. Support security reviews, risk assessments and assurance activities using relevant frameworks such as NCSC CAF, IEC 62443, ISO 27001 and NIST CSF. Support accreditation, regulatory and compliance activities where required. Produce clear, client-ready deliverables, including assessments, reports, roadmaps, requirements and proposals. Contribute to account growth, bids … considerations. Practical knowledge of cyber risk and threat assessment approaches. Familiarity with relevant standards and frameworks, such as IEC 62443, NCSC CAF, ISO 27001, NIST CSF and the NIS Regulations. Awareness of common OT and IT security technologies, networks, architectures and protocols. The ability to work with limited supervision, make ...

banking or investment management environment; Exp in leading the team of DFIR analysts. Experience working with Cyber Security and Incident Response frameworks such as NIST, Kill Chain, Attack life Cycle, & MITRE). Relevant experience with MITRE Att&Ck alignment with security monitoring use cases. Relevant experience with cloud security assessments … of information security principles and best practices; In-depth understanding of legislation affecting security, privacy and systems assurance; experiencing working to recognised standards – e.g. NIST, COBIT. GCIA, GCIH, GCFA or equivalent. What Mizuho Can Offer You Here at Mizuho, there are fantastic progression opportunities and clear paths to promotion. ...

Partner London | Hybrid 2 days office | Up to £100,000 + Bonus + Benefits Technology Risk | IT Risk | Cyber Risk | Technology Controls | Risk & Controls | NIST Auricoe is searching for an experienced Technology Risk professional to join a leading UK financial services organisation in London. This is a Technology Risk Business … Technology risks and controls are managed within the business. Formal second-line experience is advantageous but isn't essential. Knowledge of frameworks such as NIST and broader Technology/Cyber risk and maturity frameworks is useful. CRISC, CISA, CISM or CISSP would be advantageous but aren't essential. This could ...