826 to 850 of 916 NIST Jobs in the UK

Reviewing IT architecture to identify potential security gaps and/or vulnerabilities Assessing compliance with IT security policies and technical standards (e.g. ISO 27001, NIST, Cyber Essentials, COBIT, etc...) Additional technical qualifications (e.g. CRISC, CISM, NCSC CCP, ISSAP, CompTIA SecurityX, CCSK, CCSP, GDSA, ISO 27001 Lead Implementer, ISO 27001 Lead … Auditor) Knowledge of well-known Frameworks (e.g., NIST, MITRE ATT&CK, ISO 27001) and how they are applied pragmatically within delivery. Ability to work with limited supervision.By applying for this role you will automatically be considered for a Senior Cyber Risk and Assurance Analyst role if we feel you exceed ...

and government security requirements SECURITY ARCHITECT ESSENTIAL SKILLS Experience operating as a Security Architect or similar senior security role Strong knowledge of ISO 27001, NIST, CIS or similar frameworks Experience with cloud security across AWS, Azure or Google Cloud Understanding of network security, encryption, authentication and access control Experience with … submit, subject to required skills, your application to our client in conjunction with this vacancy only. KEY SKILLS Security Architect, Cyber Security, ISO 27001, NIST, Cloud Security, AWS, Azure, Risk Assessment, Threat Modelling, SIEM, Defence ...

Define and AI governance frameworks covering model risk management, responsible AI, data lineage, bias/fairness testing, explainability, and regulatory alignment (EU AI Act, NIST AI RMF, ISO/IEC 42001). Act as trusted technical advisor to client CTOs, CIOs and Heads of Data/AI on platform strategy … privacy regulation (GDPR, CCPA) as applied to AI training and inference data. Working knowledge of emerging AI‐specific regulation and standards: EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001. Experience establishing model documentation, audit trail, and approval‐gate processes for production AI systems. Security & Cloud ...

of Security Architecture baselines and ensure AI/ML systems comply with relevant regulatory requirements and industry standards, such as the EU AI Act, NIST AI RMF, the Digital Services Act, the Digital Markets Act, GDPR and ISO 27001Support the testing of AI/ML products, services and models and …/ML pipelines and AI-/ML-ops, software engineering, DevSecOps, shift-left, cloud infrastructures and application security.Experience with Security Architecture Frameworks such as NIST CSF, ISO27001, SABSA and TOGAFDevelopment of foundational Security Architectures and Designs, Security Baselines, Standards and Whitepapers.Excellent analytical and problem-solving skills, with the ability ...

This role will provide Cyber Security Technology and Integration Assessment for QBE's IT Change Projects utilising a Secure Design Framework based on the NIST framework. The role will require the ability to work with Architects and Solution Design SME's across a range of technologies to identify Cyber threats … risks. Your new role Lead security assurance, assessments, advisory for IT and Business projects (Cloud and On-prem) within EO and globally against the NIST 800-53 cyber security standard and compliance framework Partner with the security architecture and other relevant teams to define security patterns and ensure that appropriate ...

supporting security accreditation and operational assurance activities. Key Responsibilities Lead the architecture and design of enterprise security solutions. Design platform security controls aligned to NIST Cybersecurity Framework and MOD security policies. Deliver enterprise Anti-Virus, Endpoint Protection and Endpoint Detection & Response (EDR) capabilities. Design vulnerability management frameworks, scanning strategies and … security architecture documents. Excellent stakeholder management and communication skills. Security & Compliance Knowledge Experience working with one or more of the following is highly desirable: NIST Cybersecurity Framework NCSC Cyber Security Design Principles Secure by Design JSP 440 JSP 604 JSP 453 Security Accreditation & Assurance Risk Management & Compliance ...

and development teams. Conduct risk assessments and threat modeling, proactively identifying vulnerabilities and mitigation strategies. Develop and maintain security policies and frameworks aligned with NIST, ISO 27001, and CIS Controls. Lead PCI‐DSS architecture and compliance, ensuring both front‐ and back‐office systems meet standards. Guide and mentor teams … security architecture or design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/ ...

happy to discuss flexible working! Top 3 skills needed for this role: Information Security Governance & Risk Leadership Regulatory & Framework Expertise (ISO27001, GDPR, NIST) Stakeholder Communication & Security Culture Influence What this role is all about: As our Senior Information Security Officer, you'll drive a business-wide security agenda, shaping … Information Risk management in alignment with the Enterprise Risk Framework Act as a trusted advisor on regulatory requirements and best-practice frameworks (ISO27001, GDPR, NIST, ITIL), protecting the confidentiality, integrity and availability of systems Lead security governance forums and manage the Information Security Governance team, including the Information Risk function ...

risk. Human Factors Policy & Governance Develop, maintain, and continuously improve policies related to human factors in cybersecurity, aligned to recognised good practice (including the NIST Cybersecurity Framework). Ensure policies are comprehensive, current, and effectively communicated across the organisation. Partner with Legal and Compliance to ensure policy content meets relevant … demonstrable equivalent knowledge. Proven experience in cybersecurity, with a focus on human factors, behaviour analysis, or organizational psychology. In-depth knowledge of the NIST Cybersecurity Framework and other relevant industry standards. Strong understanding of human behaviour, cognition, and decision‐making processes in the context of cybersecurity. Experience developing and implementing ...

management within a high-threat government environment. Skills and Experience: Proven expertise in risk management, particularly in information security, utilizing recognized methodologies such as NIST 800-30/37 and ISO 31000. Experienced in managing both internal and external cybersecurity risks related to IT systems, services, and data storage, especially … within digital cloud services. Demonstrated ability to provide advice, guidance, and assurance documentation in line with security standards, including NIST, ISO 27001, CIS, CAF, HMG GovS 007, and NPSA. Knowledgeable and hands-on experience with security architecture and Security Information and Event Management (SIEM) tools. Solid track record in risk ...

Job Description Your impact Leonardo is seeking an experienced Red Team Consultant to join our growing Offensive Security capability. This role is open to both Senior and Principal level Consultants. Working within a defence-focused ...

hackajob is partnering directly with Leonardo to hire for this role. Job Description: Your impact Leonardo is seeking an experienced Red Team Consultant to join our growing Offensive Security capability. This role is open to ...

Lead the firm's quantum-safe transition to post-quantum cryptography — maintaining a cryptographic inventory, assessing exposure, and planning a crypto-agile migration to NIST-standardised PQC algorithms. Compliance & regulatory: Ensure security controls meet FCA SYSC obligations, SYSC 15A operational risk requirements and ISO27001 standard. Work closely with the Head … Kafka-backed event architectures and the security considerations they introduce. Awareness of AI and machine-learning security risks and emerging AI governance frameworks (e.g. NIST AI RMF, ISO/IEC 42001). Understanding of post-quantum cryptography and quantum-safe migration and crypto-agility planning. 25 days holiday (exc. Bank ...

lifecycle according to the Security by Design framework and principles. Ensure knowledge and application of relevant standards, including but not limited to (ISO 44001, NIST 800-53, 800-171, 800-172, NIS2, DEFSTAN, JSP's). Secure Development: Define and follow secure development guidelines. Collaborate with development teams to embed … and running of multiple tasks in parallel against challenging requirements. Expert knowledge and practical application of major IT Assurance frameworks and standards (ISO 44001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN, JSP). Deep understanding and experience in implementing the Security by Design framework across ...

lifecycle according to the Security by Design framework and principles. Ensure knowledge and application of relevant standards, including but not limited to (ISO 44001, NIST , NIS2, DEFSTAN, JSP's). Secure Development: Define and follow secure development guidelines. Collaborate with development teams to embed requirements and guarantee controls to protect … and running of multiple tasks in parallel against challenging requirements. Expert knowledge and practical application of major IT Assurance frameworks and standards (ISO 44001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN, JSP). Deep understanding and experience in implementing the Security by Design framework across ...

your impact. Be familiar with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with ...

systems actually introduce security risk — whether that's through LLM applications, APIs, RAG, agents, tool use, data access or autonomous workflows. Experience with NIST AI RMF, OWASP LLM/Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF or similar frameworks would be valuable. Why now? AI Security is still ...

DescriptionThe Cyber Detection and Response Analyst supports day-to-day detection, investigation, and response activities as part of a Cyber Detection and Response Team (DART). This is a hands-on technical role focused on ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

Develop AI governance policies, controls, operating models and reporting frameworks. Advise clients on emerging AI regulations, standards and guidance, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 and ISO/IEC 23894. Conduct AI risk assessments, model governance reviews, algorithmic impact assessments and responsible … experience developing AI governance frameworks, policies, controls and operating models. Practical knowledge of AI-related regulations, standards and guidance, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894 and OECD AI Principles . Experience conducting AI risk assessments, model governance reviews, algorithmic impact ...

maintenance of UKHSAs Cyber Risk Management FrameworkAssist in assessing cyber risks against: Government Security Policy Framework (SPF)DSPT Cyber Assurance FrameworkNCSC guidanceISO 27001/NIST aligned approachesPromote a proportionate, risk-based approach to cyber security across the organisationGovernance & ReportingContribute to cyber risk reporting for senior management and assurance forumsAnalyse cyber … maintenance of UKHSAs Cyber Risk Management FrameworkAssist in assessing cyber risks against: Government Security Policy Framework (SPF)DSPT Cyber Assurance FrameworkNCSC guidanceISO 27001/NIST aligned approachesPromote a proportionate, risk-based approach to cyber security across the organisationGovernance & ReportingContribute to cyber risk reporting for senior management and assurance forumsAnalyse cyber ...

maintenance of UKHSAs Cyber Risk Management FrameworkAssist in assessing cyber risks against: Government Security Policy Framework (SPF)DSPT Cyber Assurance FrameworkNCSC guidanceISO 27001/NIST aligned approachesPromote a proportionate, risk-based approach to cyber security across the organisationGovernance & ReportingContribute to cyber risk reporting for senior management and assurance forumsAnalyse cyber … maintenance of UKHSAs Cyber Risk Management FrameworkAssist in assessing cyber risks against: Government Security Policy Framework (SPF)DSPT Cyber Assurance FrameworkNCSC guidanceISO 27001/NIST aligned approachesPromote a proportionate, risk-based approach to cyber security across the organisationGovernance & ReportingContribute to cyber risk reporting for senior management and assurance forumsAnalyse cyber ...

maintenance of UKHSAs Cyber Risk Management FrameworkAssist in assessing cyber risks against: Government Security Policy Framework (SPF)DSPT Cyber Assurance FrameworkNCSC guidanceISO 27001/NIST aligned approachesPromote a proportionate, risk-based approach to cyber security across the organisationGovernance & ReportingContribute to cyber risk reporting for senior management and assurance forumsAnalyse cyber … maintenance of UKHSAs Cyber Risk Management FrameworkAssist in assessing cyber risks against: Government Security Policy Framework (SPF)DSPT Cyber Assurance FrameworkNCSC guidanceISO 27001/NIST aligned approachesPromote a proportionate, risk-based approach to cyber security across the organisationGovernance & ReportingContribute to cyber risk reporting for senior management and assurance forumsAnalyse cyber ...