1 to 25 of 127 Remote/Hybrid NIST Jobs in the UK excluding London

Knowledge Strong understanding of: Security legislation and regulatory requirements, including GDPR, PCI DSS and related compliance frameworks. Security frameworks and standards including ISO 27001, NIST Cyber Security Framework and CIS Controls v8. UK Government and NCSC security policies, guidance and best practices. Cloud security architecture, particularly AWS services such ...

including Defender for Cloud, Secure Score, and Azure Policy. Risk assessment, threat modelling, and vulnerability management. Strong understanding of security frameworks including ISO 27001, NIST, Secure by Design, and Cyber Essentials. Secure system integration, API security, and DevSecOps principles. Excellent stakeholder management skills with the ability to communicate effectively with ...

security requirements. Key Responsibilities Zero Trust Strategy & Architecture Define and deliver enterprise-wide Zero Trust strategies and roadmaps Design Zero Trust architectures aligned to NIST 800-207 principles Implement identity-first security models across users, devices, applications and data Develop continuous verification and adaptive access control frameworks Lead micro-segmentation … regulated sectors Experience leading security transformation and modernisation initiatives Technical Knowledge Deep expertise in Zero Trust Architecture principles and implementation methodologies Strong knowledge of NIST 800-207 and modern security architecture frameworks Expert understanding of Identity & Access Management technologies Experience with Microsoft Entra ID, Conditional Access, PIM and PAM solutions ...

enterprise. Hands‐on experience with ISO/IEC 27001 (ISMS lifecycle, Annex A controls, risk assessment and treatment) and related security control frameworks (e.g., NIST CSF, ISO 27000, TISAX, etc.).Demonstrated experience with Integration Risk Management (project/solution risk assessments) and Third‐Party Risk Management (vendor due diligence, ongoing ...

industries (e.g., telecom, financial services, critical infrastructure) Familiarity with compliance tools (e.g., ServiceNow GRC, Archer, MetricStream) Experience with control frameworks such as ISO 27001, NIST, or COBIT What we offer you: Looking to make a mark? At Colt, you'll make a difference. Because around here, we empower people. ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

stakeholder engagement and governance leadership skills Experience presenting risk and compliance information to senior stakeholders Desirable Knowledge of Industry certifications and frameworks, i.e. ISO27001, NIST, NCSC Experience within Defence, Government, Critical National Infrastructure, or regulated industries Experience with GRC platforms such as ServiceNow GRC, Archer, or equivalent You can bring ...

with automation and scripting highly desirable Competence, knowledge and skills Competence Experience working within recognised Information Security frameworks and best practices such as ISO27001, NIST etc. 5 years’ experience in an Information Security role gained in a financial services or e-commerce environment is preferred Knowledge & Skills Significant experience ...

advantageousHands-on experience with automation and scripting highly desirableCompetence, knowledge and skillsCompetenceExperience working within recognised Information Security frameworks and best practices such as ISO27001, NIST etc.5 years' experience in an Information Security role gained in a financial services or e-commerce environment is preferredKnowledge & SkillsSignificant experience in the area of ...

with automation and scripting highly desirable Competence, knowledge and skills Competence Experience working within recognised Information Security frameworks and best practices such as ISO27001, NIST etc. 5 years experience in an Information Security role gained in a financial services or e-commerce environment is preferred Knowledge & Skills Significant experience ...

Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within ...

reviews, security requirements management and pragmatic risk treatment in fast-moving projects You have experience working with security control standards and frameworks e.g. ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others You have demonstrable continuous personal development, supported by relevant certifications and accreditations You have good interpersonal ...

system of record such as Jira or Octane. Expert knowledge using Cloud Technologies. Strong understanding of regulatory compliance requirements (e.g. GDPR, ISO 27001, NIST) and experience implementing security controls to meet those requirements. Hands-on experience with Azure Kubernetes Service (AKS) and microservices architecture. Familiarity with DevSecOps methodologies and tools ...

and hybrid infrastructure security, with strong knowledge of networking, operating systems and attacker techniques. Practical understanding of MITRE ATT&CK, Cyber Kill Chain, NIST and SANS incident response frameworks. Experience working within regulated and audited environments, including ISO 27001 and Cyber Essentials. Excellent communication, stakeholder management and documentation skills, with ...

and hybrid infrastructure security, with strong knowledge of networking, operating systems and attacker techniques. Practical understanding of MITRE ATT&CK, Cyber Kill Chain, NIST and SANS incident response frameworks. Experience working within regulated and audited environments, including ISO 27001 and Cyber Essentials. Excellent communication, stakeholder management and documentation skills, with ...

threats whilst meeting security requirements. Key ResponsibilitiesZero Trust Strategy & ArchitectureDefine and deliver enterprise-wide Zero Trust strategies and roadmapsDesign Zero Trust architectures aligned to NIST 800-207 principlesImplement identity-first security models across users, devices, applications and dataDevelop continuous verification and adaptive access control frameworksLead micro-segmentation and least privilege … aerospace, government or highly regulated sectorsExperience leading security transformation and modernisation initiativesTechnical KnowledgeDeep expertise in Zero Trust Architecture principles and implementation methodologiesStrong knowledge of NIST 800-207 and modern security architecture frameworksExpert understanding of Identity & Access Management technologiesExperience with Microsoft Entra ID, Conditional Access, PIM and PAM solutionsStrong understanding of ...

Familiarity with government and defence security standards such as: HMG/NCSC IA Policies and Guidelines JSP440 and other MoD IA standards Cyber Essentials NIST, NIS-D You will ideally hold CISM/CISSP or similar higher level recognised and current Information Security or Assurance certification Excellent stakeholder communication skills ...

governance frameworks, policies, controls, and operating models. Experience interpreting and applying AI-related regulations, standards, and guidance, such as the EU AI Act, NIST AI Risk Management Framework (AI RMF), ISO/IEC 42001, ISO/IEC 23894, OECD AI Principles, and emerging regulatory requirements. Experience conducting AI risk assessments ...

and confidence Drive secure architecture at scale Define and assure enterprise, solution, and system-level security architectures Apply and tailor security frameworks such as NIST, ISO 27001, SABSA and Zero Trust principles Ensure systems are secure by design, proportionate, and aligned to mission objectives Own risk and assurance outcomes Lead ...

Experience operating within complex multi-supplier environments Strong stakeholder management and supplier challenge capability Experience presenting risk information to senior stakeholders Desirable Knowledge of: NIST CSF NCSC guidance ISO 27001 Secure by Design principles Experience in Defence, Government, or highly regulated environments Exposure to security assurance and audit activities ...

customers. Mentoring and educating internal teams on SOC operations, threat landscapes, and analyst workflows. Ensuring product features align with industry frameworks (MITRE ATT&CK, NIST, ISO 27001) and SOC maturity models. Act as a trusted SOC and cyber defence expert in customer meetings, workshops, and solution design sessions. Support ...

secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+, CEH, CKS, CKA or similar certifications Please note: Active SC Clearance is essential for this ...

Cyber Risk Management Framework Assist in assessing cyber risks against: Government Security Policy Framework (SPF) DSPT Cyber Assurance Framework NCSC guidance ISO 27001/NIST aligned approaches Promote a proportionate, risk-based approach to cyber security across the organisation Governance & Reporting Contribute to cyber risk reporting for senior management and ...

cloud security, infrastructure security, identity and access management and application security. - Utilise your experience of working with recognised security frameworks and standards (ISO27001, NIST 800-53, CIS). - Translate technical security risks into business impact with an ability to make recommendations to technical audiences, business leaders and senior stakeholders. - Excellent ...

accreditation and secure by design processes (ISN2023/09), and associated policies, practices and deliverables across the lifecycle. In the application of standards including NIST Special Publications (e.g. SP 800-30, 37 & 53), and/or RTCA-DO-326A/B, 355A & 356A. That extends outside of traditional enterprise ...