directs, develops or maintains organisational cyber and information security policies, standards and processes, using recognised standards (e.g. the ISO/IEC 27000 family, NIST CSF) where appropriate. Applies recognised cyber and information security standards and controls within an organisation, programme, project or operation. Applies relevant security classification. Risk … protection, risk management, enterprise IT, legal or (relevant) compliance roles. Strong understanding of security governance, risk, and compliance frameworks such as ISO 27001, NIST800-53/CSF, NIS/NIS2, DORA, UK CNI/OT/IIOT compliance. Hands-on experience building credibility with external More ❯
analysis of Networking, Windows, Mac and Linux and Cloud. Understanding of evidence collection process based on priority. Strong understanding of incident response following NIST800-61 guidelines incorporating containment, eradication and recovery phases. Experience with digital forensics and investigations, including evidence collection and chain-of-custody More ❯
both a GRC and technical nature alongside frameworks such as ISO27001/2:2005/13, DORA, NIS 2, PCI-DSS, GDPR-DPO, NIST CSF SP800-53, PSD-2, FCA/PRA, and MS Azure. Ownership of Strategic, Operational, and Tactical IT Security and Risk Management, technical and More ❯
mitigation strategies. Collaborate on incident handling, reporting, and documentation. Enforce security policies in line with industry standards and regulations (GDPR, ISO, Cyber Essentials+, NIST800-171). Assist with audits and compliance reporting. Manage and configure network devices with a focus on security. Design and implement More ❯
Nottingham, Nottinghamshire, East Midlands, United Kingdom Hybrid / WFH Options
Experian Ltd
security controls. Professional certification such as CISA, CISM, CISSP, ISO 27001 Lead Auditor, or equivalent. Knowledge of industry standards and frameworks such as NIST800-53, ISO 27001/27002, CIS Controls, COBIT. Experience with current automated and manual industry methods for evaluating security controls on More ❯
the risks arising from the threats they face and improve their security posture. Knowledge of external Information Security standards and frameworks, such as: NIST800-53, ISO 27001. Broad experience in risk management and the application of risk management methodologies. An analytical mind able to visualise More ❯
in information security assurance with a focus on application security. Experience working with regulatory compliance and information security management frameworks (e.g., ISO 27000, NIST SP800 series and CSF). Adaptable, ability to pivot quickly to new challenges to support the business and changing risk profile. Business Acumen, an More ❯
City, Aberdeen, United Kingdom Hybrid / WFH Options
Baker Hughes Gruppe
Demonstrate understanding of industry security standards, guidelines and regulatory/compliance requirements related to information security and cloud computing such as ISO 27001, NIST800-53, IEC/ISA 62443, SOC2, PCI, SOX, etc. Have hands-on experience on IT M&A/IT Compliance/ More ❯
Services regulatory landscape (e.g., PRA, FCA, BoE, ECB, MAS). Experience working with a range of security governance frameworks and standards e.g., ISO27001, NIST SP800-53, PCI-DSS. Security and Cloud related qualifications e.g., CISSP, CCSP, CCSK, TOGAF, SABSA, and/or vendor architectural qualifications in AWS, Azure More ❯
Bristol, Gloucestershire, United Kingdom Hybrid / WFH Options
AtkinsRéalis
CESG IA Portfolio and MoD JSPs such as JSP440, JSP604/JSP453 (plus other standard MoD IA methods). Certifications such as ISO27000, NIST Cyber Security Professional, CISMP etc. Flexibility over UK, and potentially overseas travel. Desirable: Certified Information Systems Security Professional (CISSP)/Certified Information Security Manager … NCSC Certified Cyber Professional/CESG CCP (Security and Information Risk Advisor or Security Architect). Understanding of 'Secure by Design' methodology and NIST800-37 Risk Management Framework. A keen interest in the latest technology with a focus on security technologies. Ambition to work in More ❯
bristol, south west england, united kingdom Hybrid / WFH Options
AtkinsRéalis
CESG IA Portfolio and MoD JSPs such as JSP440, JSP604/JSP453 (plus other standard MoD IA methods). Certifications such as ISO27000, NIST Cyber Security Professional, CISMP etc. Flexibility over UK, and potentially overseas travel. Desirable- Certified Information Systems Security Professional (CISSP)/Certified Information Security Manager … NCSC Certified Cyber Professional/CESG CCP (Security and Information Risk Advisor or Security Architect). Understanding of 'Secure by Design' methodology and NIST800-37 Risk Management Framework. A keen interest in the latest technology with a focus on security technologies. Ambition to work in More ❯
and, preferably, a record of 5 years’ UK residency), SKILLS & EXPERIENCE DESIRED: Able to perform Risk management using industry approved methodologies (such as NIST800-53). Identification of suitable risk management activities (technical, physical, or procedural) to treat/mitigate the identified risks; Support development More ❯
and, preferably, a record of 5 years’ UK residency), SKILLS & EXPERIENCE DESIRED: Able to perform Risk management using industry approved methodologies (such as NIST800-53). Identification of suitable risk management activities (technical, physical, or procedural) to treat/mitigate the identified risks; Support development More ❯
the security of both OT and IT environments, including SCADA systems and Industrial Control System (ICS) Governance and compliance of all OT systems - NIST800-82, IEC 62443, OG86, NERC-CIP, SOCI, NIST-CSF, NIS2 Taking a proactive role in threat hunting, incident response … awareness Key skills needed are: 3+ years in a cyber security role with a good level of exposure to OT security Knowledge of NIST and IEC 62443 OT frameworks Knowledge of the Microsoft security stack and wider IT security experience highly desirable Knowledge of NERC CIP and/ More ❯
the security of both OT and IT environments, including SCADA systems and Industrial Control System (ICS) Governance and compliance of all OT systems - NIST800-82, IEC 62443, OG86, NERC-CIP, SOCI, NIST-CSF, NIS2 Taking a proactive role in threat hunting, incident response … awareness Key skills needed are: 3+ years in a cyber security role with a good level of exposure to OT security Knowledge of NIST and IEC 62443 OT frameworks Knowledge of the Microsoft security stack and wider IT security experience highly desirable Knowledge of NERC CIP and/ More ❯
Bristol, Gloucestershire, United Kingdom Hybrid / WFH Options
AtkinsRéalis
/JSP453 (plus other standard MoD IA methods). Experience with IT Computer Systems and interconnecting systems and networks. Certifications such as ISO27000, NIST Cyber Security Professional, CISMP etc. Flexibility over UK, and potentially overseas travel. Desirable: Certified Information Security Manager Principles (CISMP) or equivalent. Associate/Full … of recognised security professional body such as the Institute of Information Security Professionals (IISP), IS2, BCS. Understanding of 'Secure by Design' methodology and NIST800-37 Risk Management Framework. A keen interest in the latest technology with a focus on security technologies. Ambition to work in More ❯
bristol, south west england, united kingdom Hybrid / WFH Options
AtkinsRéalis
CESG IA Portfolio and MoD JSPs such as JSP440, JSP604/JSP453 (plus other standard MoD IA methods). Certifications such as ISO27000, NIST Cyber Security Professional, CISMP etc. Flexibility over UK, and potentially overseas travel. Experience with IT Computer Systems and interconnecting systems and networks. Desirable- Certified … recognised security professional body such as the Institute of Information Security Professionals (IISP), IS2, BCS and Understanding of 'Secure by Design' methodology and NIST800-37 Risk Management Framework. A keen interest in the latest technology with a focus on security technologies. Ambition to work in More ❯
Leeds, England, United Kingdom Hybrid / WFH Options
Lorien
cybersecurity with a focus on operational technology and industrial control systems Eligible for SC clearance Knowledge of OT security standards (e.g. IEC 62443, NIST800-82, NCSC CAF Framework etc.) Knowledge of policies/procedures on OT standards Experience creating frameworks and undertaking maturity assessments Experience More ❯
Leeds, Yorkshire, United Kingdom Hybrid / WFH Options
William Hill PLC
influence cybersecurity. Skilled in stakeholder engagement, promoting information security, and working in both agile and waterfall environments, with knowledge of security standards like NIST800, ISO 27001, and PCI-DSS What we offer Our roles offer more than just a job, you'll become part of More ❯
IT/OT security trends and vulnerabilities Experience implementing Security Standards and Best Practice guidelines Knowledge of OT security standards (e.g. IEC 62443, NIST800-82, NCSC CAF Framework etc.) For more information and immediate review, please apply now More ❯
london, south east england, United Kingdom Hybrid / WFH Options
Lorien
IT/OT security trends and vulnerabilities Experience implementing Security Standards and Best Practice guidelines Knowledge of OT security standards (e.g. IEC 62443, NIST800-82, NCSC CAF Framework etc.) For more information and immediate review, please apply now More ❯
/SC-200, AWS Security, GCSA, GCLD, or similar). Familiarity with secure coding standards (OWASP, SEI CERT) and SSDLC models (Microsoft SDL, NIST800-218 SSDF). Knowledge or experience of Product Assurance Schemes (PAS) or product security frameworks (PAS 754, PAS 1296, or similar More ❯
architecting complex solutions and desirable to have several years of experience working with cyber security services Strong understanding of cyber security frameworks (e.g., NIST800-171, NSCS Guidance) and cloud security Excellent communication, stakeholder engagement, and strategic consulting skills Proficient in architecture methodologies with hands-on More ❯
Gloucester, Gloucestershire, UK Hybrid / WFH Options
uk7 UTC
behavioural analysis, and environmental factors Develop and present comprehensive risk assessment reports, including clear recommendations for mitigation and investment Apply frameworks such as NIST800-53, ISO/IEC 27001, and NCSC CAF to assess current controls and identify improvement opportunities Contribute to the development of … can apply critical thinking to complex and ambiguous environments, making informed decisions under pressure You have strong knowledge of cyber risk frameworks (e.g. NIST, ISO27001, NCSC CAF) and experience in applying them You're experienced in one or more of: counterintelligence, human intelligence and security, physical security assessments More ❯
in architecting OT and SCADA solutions in line with NCSC Cyber Assessment Framework (CAF), Security of Network & Information Systems Regulations (NIS), IEC 62443, NIST SP800, ISO 27001, etc If this is something you'd like to like to be considered for, please email your CV to george.monk@jamesadamsgroup.com More ❯