701 to 725 of 917 NIST Jobs in the UK

ResponsibilitiesHybrid Architecture & Governance: Design and implement security controls across Azure, on-prem servers, and SaaS applications while maintaining hardening standards based on CIS and NIST benchmarks. Identity & Access Security: Define standards for Entra ID and Active Directory, overseeing requirements for Conditional Access, MFA, SSO, and PIM.Threat Detection & Incident Response … tools, and vulnerability management platforms. Security Principles: Practical understanding of Zero Trust architecture and secure-by-design methodologies. Compliance Knowledge: Familiarity with PCI DSS, NIST, and ISO 27001 frameworks. Desirable Skills: Awareness of AWS security fundamentals (Guard Duty, KMS, IAM Identity Center).Experience with Infrastructure as Code (IaC) security (Terraform ...

Secure by Design framework; Supporting the development of the necessary Information Assurance artefacts and outcomes which support compliance against the MoD assurance process (NIST 800-37/53); Support Information Assurance based engagements with Partners/suppliers and Authority representatives; Support and contribute towards Security Working Groups and forums with … environments and technology (e.g. AWS, Azure, Google); Knowledge of the Software Development Lifecycle for applications and services; Working knowledge of Gov Standard 007: Security, NIST standards (800-30/37/53/161), MITRE ATT&CK, CIS Controls, ISO 27001/5, Def-Stan 05-138, and Industry Security ...

stakeholders and technical teams to deliver pragmatic, risk-led outcomes. Key Responsibilities Provide expert advice on cyber risk management frameworks including ISO 27005 and NIST RMF Lead risk identification, assessment and treatment across applications, infrastructure and digital services Facilitate structured risk workshops and threat modelling sessions Assess solution architectures … and sound judgement Any candidates must have an active SC level of security clearance to be considered. Technical Knowledge Security frameworks including ISO 27001, NIST CSF, CIS and NCSC guidance Regulatory landscape including GDPR and PCI DSS Familiarity with HMG and NCSC standards Modern technology environments: Cloud platforms such ...

stakeholders and technical teams to deliver pragmatic, risk-led outcomes. Key Responsibilities Provide expert advice on cyber risk management frameworks including ISO 27005 and NIST RMF Lead risk identification, assessment and treatment across applications, infrastructure and digital services Facilitate structured risk workshops and threat modelling sessions Assess solution architectures … and sound judgement Any candidates must have an active SC level of security clearance to be considered. Technical Knowledge Security frameworks including ISO 27001, NIST CSF, CIS and NCSC guidance Regulatory landscape including GDPR and PCI DSS Familiarity with HMG and NCSC standards Modern technology environments: Cloud platforms such ...

programme definition, or security governance.Works well in ambiguous situations and can bring structure to a client problem that has none.Familiar with the major frameworks (NIST CSF, ISO 27001, SABSA, MITRE ATT&CK, NIS2) and able to apply them selectively rather than wholesale.Cloud platform experience across at least two of Azure … some combination of: security governance and policy; cyber risk assessment; enterprise security programme design; and secure SDLC.Working knowledge of at least two cybersecurity frameworks: NIST CSF, NIST SP 800-53, ISO/IEC 27000 series, C2M2, or Cloud Security Alliance CCM.Familiarity with AI platform security, cloud and data security risks ...

security governance. Works well in ambiguous situations and can bring structure to a client problem that has none. Familiar with the major frameworks (NIST CSF, ISO 27001, SABSA, MITRE ATT&CK, NIS2) and able to apply them selectively rather than wholesale. Cloud platform experience across at least two of Azure … combination of: security governance and policy; cyber risk assessment; enterprise security programme design; and secure SDLC. Working knowledge of at least two cybersecurity frameworks: NIST CSF, NIST SP 800-53, ISO/IEC 27000 series, C2M2, or Cloud Security Alliance CCM. Familiarity with AI platform security, cloud and data security ...

record of delivering security solutions for large-scale infrastructure, transformation or integration programmesPractical knowledge and understanding of industry security frameworks and guidance such as NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelinesIn-depth knowledge of modern security concepts, common attack vectors, malware, security analytics and threat intelligence.Minimum ...

patternsHybrid classical/PQC key exchangeCryptographic agility frameworksSecure key management and HSM integrationDevelop defensible design patterns, for high-assurance systems, ensuring alignment with NCSC, NIST, ETSI and sector specific standards.Provide technical leadership to engineering teams, guiding implementation, testing, and assurance.Engage with senior stakeholders, translating complex trust and crypto concepts into ...

patternsHybrid classical/PQC key exchangeCryptographic agility frameworksSecure key management and HSM integrationDevelop defensible design patterns, for high-assurance systems, ensuring alignment with NCSC, NIST, ETSI and sector specific standards.Provide technical leadership to engineering teams, guiding implementation, testing, and assurance.Engage with senior stakeholders, translating complex trust and crypto concepts into ...

patternsHybrid classical/PQC key exchangeCryptographic agility frameworksSecure key management and HSM integrationDevelop defensible design patterns, for high-assurance systems, ensuring alignment with NCSC, NIST, ETSI and sector specific standards.Provide technical leadership to engineering teams, guiding implementation, testing, and assurance.Engage with senior stakeholders, translating complex trust and crypto concepts into ...

patternsHybrid classical/PQC key exchangeCryptographic agility frameworksSecure key management and HSM integrationDevelop defensible design patterns, for high-assurance systems, ensuring alignment with NCSC, NIST, ETSI and sector specific standards.Provide technical leadership to engineering teams, guiding implementation, testing, and assurance.Engage with senior stakeholders, translating complex trust and crypto concepts into ...

patternsHybrid classical/PQC key exchangeCryptographic agility frameworksSecure key management and HSM integrationDevelop defensible design patterns, for high-assurance systems, ensuring alignment with NCSC, NIST, ETSI and sector specific standards.Provide technical leadership to engineering teams, guiding implementation, testing, and assurance.Engage with senior stakeholders, translating complex trust and crypto concepts into ...

patternsHybrid classical/PQC key exchangeCryptographic agility frameworksSecure key management and HSM integrationDevelop defensible design patterns, for high-assurance systems, ensuring alignment with NCSC, NIST, ETSI and sector specific standards.Provide technical leadership to engineering teams, guiding implementation, testing, and assurance.Engage with senior stakeholders, translating complex trust and crypto concepts into ...

patternsHybrid classical/PQC key exchangeCryptographic agility frameworksSecure key management and HSM integrationDevelop defensible design patterns, for high-assurance systems, ensuring alignment with NCSC, NIST, ETSI and sector specific standards.Provide technical leadership to engineering teams, guiding implementation, testing, and assurance.Engage with senior stakeholders, translating complex trust and crypto concepts into ...

exchange Cryptographic agility frameworks Secure key management and HSM integration Develop defensible design patterns, for high-assurance systems, ensuring alignment with NCSC, NIST, ETSI and sector specific standards. Provide technical leadership to engineering teams, guiding implementation, testing, and assurance. Engage with senior stakeholders, translating complex trust and crypto concepts into ...

patternsHybrid classical/PQC key exchangeCryptographic agility frameworksSecure key management and HSM integrationDevelop defensible design patterns, for high-assurance systems, ensuring alignment with NCSC, NIST, ETSI and sector specific standards. Provide technical leadership to engineering teams, guiding implementation, testing, and assurance. Engage with senior stakeholders, translating complex trust and crypto ...

including disaster risk and disaster recovery plans- Ability to implement IT policies and standards - Understanding of international security standards such as ISO 27001 and NIST 800-53- Ability to manage multiple projects in a global environmentThis is a fantastic opportunity for someone who wants to take the next step ...

governance and operational documentation (e.g. operating models, runbooks, DR plans)Desirable Skills:Certifications in IAM/IGA platformsFamiliarity with security frameworks (e.g. ISO 27001, NIST, COBIT)Exposure to identity infrastructure (e.g. Active Directory), reporting tools (e.g. Power BI), or cloud integrationsExperience onboarding applications or cloud platforms into IAM/ ...

/discovery, prioritisation and transition planning Able to translate a highly technical subject into a board-level narrative and plan Awareness of emerging standards (NIST PQC, CNSA 2.0) and vendor tooling in this space Relevant cryptography/security certification or academic background preferred; NCSC or industry quantum-readiness experience ...

Experience in designing or uplifting a TPRM framework, not just operating one Working knowledge of relevant standards and regulation (e.g. DORA third-party requirements, NIST/ISO 27036, SIG/VSA questionnaires) Confident engaging both procurement/legal stakeholders and technical vendor contacts CISSP, CISM or equivalent preferred; TPRM-specific ...

across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance activities. - Facilitate governance forums, stakeholder workshops and senior executive briefings to embed decision rights and reporting ...

across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance activities. - Facilitate governance forums, stakeholder workshops and senior executive briefings to embed decision rights and reporting ...

across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance activities. - Facilitate governance forums, stakeholder workshops and senior executive briefings to embed decision rights and reporting ...

across enterprise programmes. - Conduct AI risk assessments, model governance reviews and algorithmic impact assessments for complex systems. - Translate regulation and standards (EU AI Act, NIST AI RMF, ISO) into pragmatic control sets and assurance activities. - Facilitate governance forums, stakeholder workshops and senior executive briefings to embed decision rights and reporting ...

diagrams and construction documentation. Experience working with ISPs and managing circuit delivery (fiber, MPLS, broadband, LTE/5G). Experience with compliance frameworks (e.g., NIST, CMMC, SOC 2) and secure design practices. Relevant certifications (e.g., CCNP/CCIE, JNCIS/JNCIP, AWS/Azure Networking Specialty, CWNA). Experience supporting ...