76 to 100 of 780 NIST Jobs in the UK

with ISO27001 principles and broader operational standards such as ISO9001. Implement and maintain security controls aligned with recognised frameworks (e.g. ISO27001, Cyber Essentials Plus, NIST). Lead vulnerability management, patching, endpoint protection, SIEM, and threat monitoring activities. Manage identity and access controls, MFA, privileged access, and conditional access policies. Lead ...

against unauthorised access, data breaches, and other cyber threats Provide guidance and recommendations on best practices, compliance requirements, and industry standards (e.g., ISO 27001, NIST, GDPR) Assist clients in incident response and remediation efforts in the event of a security breach or cyber attack Collaborate with clients’ IT teams and ...

validation. Understanding of DevOps, CI/CD and secure delivery practices in an Agile, value-stream environment. Understanding of security frameworks, such as ISO27001, NIST and PCI-DSS. Skills and Qualifications Relevant technical security qualification or equivalent experience, for example AZ-500, SC-200, SC-300, SC-100, CISSP ...

tools such as Python, PowerShell, Logic Apps, Azure Functions, APIs, infrastructure as code or equivalent platforms. Working knowledge of ISO 27001, Cyber Essentials Plus, NIST CSF and recognised AI security or governance frameworks. The ability to explain complex technical risk clearly to senior stakeholders and influence delivery teams without relying ...

Azure DevOps or GitHub CI/CD pipelines. Knowledge of the Microsoft Cloud Security Benchmark, CIS Azure benchmarks, the NCSC CAF, ISO 27001 or NIST guidance. Experience securing hybrid environments or familiarity with AWS or GCP security controls. Exposure to security design or architecture activities, or a demonstrable interest ...

Terraform, Ansible, Python, or Bash. Familiarity with containers and orchestration platforms such as Docker and Kubernetes. Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, or SOC 2. Ability to conduct threat modelling, infrastructure risk assessments, and architecture reviews. Strong troubleshooting, documentation, and cross-functional communication ...

understanding of security principles, design patterns, and defense-in-depth strategies. Knowledge of Standards: Strong knowledge of relevant security standards and frameworks such as NIST, ISO 27001, MITRE ATT&CK, SOC2 and OWASP. Communication Skills: Ability to articulate technical risks and architectural decisions to both technical and non-technical audiences. ...

cloud‐security monitoring and investigations across Microsoft Azure, Amazon Web Services, or other cloud environments. Familiarity with recognized AI‐risk guidance such as the NIST AI Risk Management Framework and Generative AI Profile. Relevant certifications such as Security+, SC‐200, AZ‐500, CISSP, GCIH, or equivalent credentials. Post‐secondary education ...

Microsoft Sentinel, Splunk) and EDR/XDR platforms (e.g., Microsoft Defender for Endpoint, CrowdStrike Falcon). Security Frameworks: Solid understanding of MITRE ATT&CK, NIST CSF, NCSC Caf v4.0 and ISO 27001. Communication: Ability to write concise incident reports and speak comfortably with both engineers and business leaders. Experience working ...

security controls and monitoring measures, rather than relying solely on templates or standard security checklists. Familiarity with at least one recognised security framework – e.g. NIST, NCSC, MITRE, CyberEssentials, DCC. General attributes required: Strong analytical and problem‐solving skills, with the ability to make informed security recommendations based on technical evidence. ...

analyst, security engineer or security consultant would be particularly advantageous. Experience with regulated businesses, financial services or compliance frameworks such as ISO 27001, NIST, Cyber Essentials, PCI DSS or similar would also be useful. Certifications Relevant Microsoft, cyber security or industry certifications would be advantageous, but they are not essential. ...

and confidence. Drive secure architecture at scale. Define and assure enterprise, solution, and system-level security architectures. Apply and tailor security frameworks such as NIST, ISO 27001, SABSA and Zero Trust principles. Ensure systems are secure by design, proportionate, and aligned to mission objectives. Own risk and assurance outcomes. Lead ...

of cryptographic services,products and HSM devices. Knowledge of wider security, audit, riskand compliance standards including: PCI-P2PE PCI-POI-PTS ISO27701 ISO27005 ISO31000 NIST GDPR Governance,Risk and Compliance tools Experience with quality managementsystems and external audit standards such as ISO 9001. #J-18808-Ljbffr ...

cloud, identity, network, perimeter and platform security solutions. Apply Zero Trust, defence-in-depth and threat-informed design principles. Ensure security architectures align with NIST, ISO 27001, CIS, NCSC and client security requirements. Act as a security design authority, providing technical guidance and architectural decisions. Work closely with enterprise, infrastructure ...

equivalent Or an equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience of Enterprise ...

equivalent Or an equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience of Enterprise ...

equivalent Or an equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience of Enterprise ...

emerging legal, regulatory and industry standards. Liaise with external suppliers to ensure smooth delivery of their work. Required skills Good knowledge of ISO 27001, NIST CSF, NIS 2.0 Legal and Regulatory requirements across UK and Europe incl. GDPR. Supporting knowledge of CIS controls. Familiarity with cloud platforms: AWS, Azure ...

cloud, identity, network, perimeter and platform security solutions. Apply Zero Trust, defence-in-depth and threat-informed design principles. Ensure security architectures align with NIST, ISO 27001, CIS, NCSC and client security requirements. Act as a security design authority, providing technical guidance and architectural decisions. Work closely with enterprise, infrastructure ...

cloud, identity, network, perimeter and platform security solutions. Apply Zero Trust, defence-in-depth and threat-informed design principles. Ensure security architectures align with NIST, ISO 27001, CIS, NCSC and client security requirements. Act as a security design authority, providing technical guidance and architectural decisions. Work closely with enterprise, infrastructure ...

Azure Security Engineer, AWS Security) Fortinet NSE certification (Level 7 or 8) Experience with security automation and orchestration Knowledge of compliance frameworks (ISO 27001, NIST) #J-18808-Ljbffr ...

degree in Computer Science, Cybersecurity, Information Systems, or a related field (Master’s degree preferred). Strong understanding of frameworks and standards such as NIST , ISO 27001 , TOGAF , and other security architecture methodologies. Excellent documentation skills with experience producing SDDs, architecture diagrams, and technical specifications. Preferred Certifications CISSP , SABSA , TOGAF ...

GCP. In-depth knowledge of cloud infrastructure and architecture (e.g. VPC, EC2, S3, Cloud Storage and Compute Engine. Familiarity with compliance and risk frameworks (NIST, ISO 27001, CSA STAR) Experience in business engagement for Information Security, Risk or Control & Compliance, IT Analysis/Design or Program/Project Management. Perform ...

/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical use of MITRE ATT&CK, STIX/TAXII, CVE, CWE, CAPEC, NIST frameworks, CIS Controls, and common threat-intelligence vocabularies. GenAI and GraphRAG: LLM-based extraction, retrieval orchestration, agent/tool integration, prompt design, evaluation, grounding, guardrails ...

Microsoft Purview administration and optimisation. Desirable Experience within information security, governance, risk or compliance functions. Knowledge of recognised security frameworks such as ISO 27001, NIST or Cyber Essentials. Ability to successfully obtain UK Government Security Clearance (SC). Why join us? This is an exciting opportunity to play ...