801 to 825 of 914 NIST Jobs in the UK

maintaining, or owning policy, standards, guidance, or assurance products in complex environments.Knowledge of relevant identity, access management, cyber security, and assurance standards, such as NIST 800-63, NIST 800-53, UK DIATF and Government Counter Fraud Standards, with the ability to apply them proportionately in FPC and IDVA policy, governance ...

maintaining, or owning policy, standards, guidance, or assurance products in complex environments.Knowledge of relevant identity, access management, cyber security, and assurance standards, such as NIST 800-63, NIST 800-53, UK DIATF and Government Counter Fraud Standards, with the ability to apply them proportionately in FPC and IDVA policy, governance ...

with developers, and help embed secure coding practices across the SDLC. We value strong hands-on testing expertise, knowledge of OWASP Top Ten and NIST CSF, and the ability to communicate findings clearly to stakeholders and guide remediation. #J-18808-Ljbffr ...

management with continuous improvement of MTTR and service stability.Define, implement, and continuously mature infrastructure governance and compliance frameworks, ensuring alignment to ISO27001 (Annex A), NIST CSF, CIS benchmarks, and regulatory expectations, including secure configuration, logging, monitoring, and audit readiness.Act as control owner for infrastructure and cloud services, ensuring effective design … operating within financial services regulatory frameworks, including FCA/PRA requirements and operational resilience obligations.Knowledge of industry standards and control frameworks including ISO 27001, NIST CSF, CIS Benchmarks and ITIL.Qualifications:Minimum of one below is required:Microsoft Certified: AZ-104 Azure AdministratorMicrosoft Certified: Azure DevOps Engineer Minimum of one below ...

with continuous improvement of MTTR and service stability. Define, implement, and continuously mature infrastructure governance and compliance frameworks, ensuring alignment to ISO27001 (Annex A), NIST CSF, CIS benchmarks, and regulatory expectations, including secure configuration, logging, monitoring, and audit readiness. Act as control owner for infrastructure and cloud services, ensuring effective … within financial services regulatory frameworks, including FCA/PRA requirements and operational resilience obligations. Knowledge of industry standards and control frameworks including ISO 27001, NIST CSF, CIS Benchmarks and ITIL. Qualifications: Minimum of one below is required: Microsoft Certified: AZ-104 Azure AdministratorMicrosoft Certified: Azure DevOps Engineer Minimum of ...

with continuous improvement of MTTR and service stability. Define, implement, and continuously mature infrastructure governance and compliance frameworks, ensuring alignment to ISO27001 (Annex A), NIST CSF, CIS benchmarks, and regulatory expectations, including secure configuration, logging, monitoring, and audit readiness. Act as control owner for infrastructure and cloud services, ensuring effective … within financial services regulatory frameworks, including FCA/PRA requirements and operational resilience obligations. Knowledge of industry standards and control frameworks including ISO 27001, NIST CSF, CIS Benchmarks and ITIL. Qualifications: Minimum of one below is required: Minimum of one below is required: ITIL V4 Microsoft Certified: Azure Security Engineer ...

infrastructure and cloud environments, and ensure risk-based controls throughout the development lifecycle. The role requires deep knowledge of IT assurance frameworks (ISO 44001, NIST 800-53/171/172, NIS2, DEFSTAN, JSP), strong cross-functional leadership, excellent communication, and the ability to implement secure #J-18808-Ljbffr ...

decided, not a franchise to defend. What you'll do: Lead the delivery of AI security and governance engagements — operationalising frameworks (ISO 42001, NIST AI RMF, EU AI Act readiness) into programmes clients can actually run. Bridge advisory design and hands-on execution across multi-workstream cyber transformation. Grow accounts ...

gaps and seeing remediation through to completion.Document and uphold secure-by-design principles and architecture governance, and enforce policy-as-code frameworks aligned with NIST, CIS, and PCI DSS.Set the monitoring scope and priorities for CNAPP/CSPM tooling (e.g. Wiz or equivalent), defining which misconfigurations and vulnerabilities matter most … against CIS, NIST, and PCI DSS benchmarks, and holding engineering teams accountable to remediation outcomes.Work with Security Operations to shape cloud logging and detection requirements, ensuring our SIEM has the right visibility across the estate.Collaborate with senior stakeholders to articulate security risks and mitigations in terms that support business decision ...

and seeing remediation through to completion. Document and uphold secure-by-design principles and architecture governance, and enforce policy-as-code frameworks aligned with NIST, CIS, and PCI DSS.Set the monitoring scope and priorities for CNAPP/CSPM tooling (e.g. Wiz or equivalent), defining which misconfigurations and vulnerabilities matter most … against CIS, NIST, and PCI DSS benchmarks, and holding engineering teams accountable to remediation outcomes. Work with Security Operations to shape cloud logging and detection requirements, ensuring our SIEM has the right visibility across the estate. Collaborate with senior stakeholders to articulate security risks and mitigations in terms that support ...

architectures.Define and AI governance frameworks covering model risk management, responsible AI, data lineage, bias/fairness testing, explainability, and regulatory alignment (EU AI Act, NIST AI RMF, ISO/IEC 42001).Act as trusted technical advisor to client CTOs, CIOs and Heads of Data/AI on platform strategy, build … data privacy regulation (GDPR, CCPA) as applied to AI training and inference data.Working knowledge of emerging AI-specific regulation and standards: EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001.Experience establishing model documentation, audit trail, and approval-gate processes for production AI systems.Security & CloudAI-specific security fundamentals ...

Define and AI governance frameworks covering model risk management, responsible AI, data lineage, bias/fairness testing, explainability, and regulatory alignment (EU AI Act, NIST AI RMF, ISO/IEC 42001).Act as trusted technical advisor to client CTOs, CIOs and Heads of Data/AI on platform strategy, build … privacy regulation (GDPR, CCPA) as applied to AI training and inference data. Working knowledge of emerging AI-specific regulation and standards: EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001.Experience establishing model documentation, audit trail, and approval-gate processes for production AI systems. Security & CloudAI-specific security ...

understanding of networking, systems and application security Experience with risk assessments and security controls Knowledge of security frameworks and standards, including ISO 27001 and NIST Understanding of vulnerability management Experience using security tools and technologies Strong analytical, problem-solving and communication skills Degree in Cyber Security, Information Technology … vacancy only. KEY SKILLS Cyber Security Engineer, Security Engineering, Cyber Security, Risk Assessment, Security Controls, Vulnerability Management, Security Management Plans, Security Case, ISO 27001, NIST, CISSP, CISM, CEH, Security Clearance ...

to. 5+ years of relevant experience in the medical device space (either industry or through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat … modeling, security testing) and determining residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle ...

to. 5+ years of relevant experience in the medical device space (either industry or through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat … modeling, security testing) and determining residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle ...

risk and governance. Design and implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review … prompt injection, data leakage and excessive agency. Strong understanding of relevant AI regulation and frameworks, particularly EU AI Act, UK GDPR/ICO, DPIAs, NIST AI RMF and ISO 42001. Experience working with regulated organisations. The ability to communicate equally well with senior executives and technical teams. Nice to have ...

coordination, access reviews, and firewall configuration reviews.Policy, Controls and Regulatory CoverageApply working knowledge of PCI DSS v4.0.1, ISO 27001/27002, SOC 2, DORA, NIST CSF, and other applicable frameworks to day-to-day GRC work.Support meeting regulatory change across Checkout's operating markets including FCA/PRA requirements and … related function, ideally within payments, financial services, or fintech.Practical working knowledge of PCI DSS (v4.0.1 preferred), ISO 27001, and SOC 2. Familiarity with DORA, NIST CSF, or the EU AI Act is a plus.Experience supporting or directly managing external audits and assessments, including evidence collation and assessor liaison.Demonstrated ability ...

access reviews, and firewall configuration reviews. Policy, Controls and Regulatory CoverageApply working knowledge of PCI DSS v4.0.1, ISO 27001/27002, SOC 2, DORA, NIST CSF, and other applicable frameworks to day-to-day GRC work. Support meeting regulatory change across Checkout's operating markets including FCA/PRA requirements … function, ideally within payments, financial services, or fintech. Practical working knowledge of PCI DSS (v4.0.1 preferred), ISO 27001, and SOC 2. Familiarity with DORA, NIST CSF, or the EU AI Act is a plus. Experience supporting or directly managing external audits and assessments, including evidence collation and assessor liaison. Demonstrated ...

Experience supporting regulated environments or environments with strict customer, contractual, or compliance obligations. (Desirable) Familiarity with AI security frameworks and guidance such as the NIST AI Risk Management Framework, NIST Generative AI Profile, OWASP Top 10 for LLM Applications, or Cloud Security Alliance AI security guidance. (Desirable) Experience with ...

automated remediation workflows.Experience supporting regulated environments or environments with strict customer, contractual, or compliance obligations.Familiarity with AI security frameworks and guidance such as the NIST AI Risk Management Framework, NIST Generative AI Profile, OWASP Top 10 for LLM Applications, or Cloud Security Alliance AI security guidance.Experience with RAG architecture ...

current SMR technology, security controls and capabilities. Develop a comprehensive target-state Cyber Security Architecture. Map current and future-state capabilities against the NIST Cybersecurity Framework (NIST CSF). Identify gaps in security controls, implementation, adoption and utilisation. Develop recommendations and a clear roadmap to address identified gaps. Work closely … background in Cyber Security Architecture or Security Engineering. Experience assessing complex enterprise security environments. Strong understanding of Security Monitoring, Detection & Response. Good knowledge of NIST CSF and security control frameworks. Experience conducting security gap analysis and developing transformation roadmaps. Strong stakeholder management and communication skills. Experience working within financial services ...

equivalent experience.* Strong and demonstrable experience in Excel, PowerPoint, and other Office applications.* An understanding of cybersecurity control and risk assessment frameworks (e.g., NIST CSF, CIS, NIST 800-53, ISO 27001) and their unique differences.* Awareness of the regulatory landscape and well-known data privacy, cybersecurity, and operational resilience regulations.Preferred ...

Reviewing IT architecture to identify potential security gaps and/or vulnerabilities Assessing compliance with IT security policies and technical standards (e.g. ISO 27001, NIST, Cyber Essentials, COBIT, etc...) Additional technical qualifications (e.g. CRISC, CISM, NCSC CCP, ISSAP, CompTIA SecurityX, CCSK, CCSP, GDSA, ISO 27001 Lead Implementer, ISO 27001 Lead … Auditor) Knowledge of well-known Frameworks (e.g., NIST, MITRE ATT&CK, ISO 27001) and how they are applied pragmatically within delivery. Ability to work with limited supervision. By applying for this role you will automatically be considered for a Junior Cyber Risk and Assurance Analyst role ...

Reviewing IT architecture to identify potential security gaps and/or vulnerabilities Assessing compliance with IT security policies and technical standards (e.g. ISO 27001, NIST, Cyber Essentials, COBIT, etc...) Additional technical qualifications (e.g. CRISC, CISM, NCSC CCP, ISSAP, CompTIA SecurityX, CCSK, CCSP, GDSA, ISO 27001 Lead Implementer, ISO 27001 Lead … Auditor) Knowledge of well-known Frameworks (e.g., NIST, MITRE ATT&CK, ISO 27001) and how they are applied pragmatically within delivery. Ability to work with limited supervision.By applying for this role you will automatically be considered for a Senior Cyber Risk and Assurance Analyst role if we feel you exceed ...

and government security requirements SECURITY ARCHITECT ESSENTIAL SKILLS Experience operating as a Security Architect or similar senior security role Strong knowledge of ISO 27001, NIST, CIS or similar frameworks Experience with cloud security across AWS, Azure or Google Cloud Understanding of network security, encryption, authentication and access control Experience with … submit, subject to required skills, your application to our client in conjunction with this vacancy only. KEY SKILLS Security Architect, Cyber Security, ISO 27001, NIST, Cloud Security, AWS, Azure, Risk Assessment, Threat Modelling, SIEM, Defence ...