51 to 75 of 288 NIST Jobs in the UK excluding London

successful assessment and delivery of security related change control processes. Experience in application of Security Frameworks: E.G. Cyber Essentials Plus, ISO27000 series, NIST-800 (including SP800-37 and SP800-53) and associated assurance activities. ExperienceEssential: Demonstrable understanding of cloud/Infrastructure as Code technologies;Demonstrable understanding of application of security ...

and risk management capabilities. Experience of managing risk registers. An understanding of cyber and information security best practice frameworks, standards and certifications such as NIST, ISO27001, SbD, (ideally PSN, Cyber Essentials and CAF).Proficiency in project management methodologies and tools including scheduling (e.g., Agile, PRINCE2, PMP, MS Project, P6).Experience ...

engage effectively with both technical and non-technical stakeholders and facilitate balanced risk discussions. Working knowledge of security frameworks and governance concepts, including NIST CSF, ISO 27000 series, FAIR risk analysis, and privacy-related requirements. Preferred Skills and Qualifications: Relevant industry certifications such as CISSP, SSCP, or GCIA are preferred. ...

automation and Infrastructure-as-Code tools such as Terraform, Ansible, Python or Bash. Familiarity with Docker and Kubernetes. Understanding of security frameworks such as NIST, CIS Benchmarks and ISO 27001. Strong troubleshooting, documentation and communication skills. Due to a highly secure envrionment you must be eligable for SC clearance and ...

Experience operating within complex multi-supplier environments Strong stakeholder management and supplier challenge capability Experience presenting risk information to senior stakeholders Desirable Knowledge of: NIST CSF NCSC guidance ISO 27001 Secure by Design principles Experience in Defence, Government, or highly regulated environments Exposure to security assurance and audit activities ...

response . Understanding of cloud security and network security principles . Experience supporting security assessments, audits and penetration testing. Knowledge of security frameworks including NIST and Cyber Essentials . Understanding of ITIL processes, particularly Incident, Change and Problem Management. Strong communication and stakeholder management skills. The ability to work independently ...

security concepts, such as email security, endpoint detection and response, vulnerability management, and SIEM.Understanding of at least one information security framework (e.g., ISO 27001, NIST) and general awareness of regulations such as GDPR.Strong communication skills, with the ability to explain technical risks to non-technical users. Enthusiastic, proactive team player ...

and assurance artefacts. Desirable Skills & Experience Experience within Defence, Government, or highly regulated environments. Knowledge of security accreditation and assurance processes. Familiarity with the NIST Risk Management Framework (RMF). Experience with vulnerability management and security tooling. Exposure to security architecture, secure design reviews, or threat modelling. Understanding of ...

customers. Mentoring and educating internal teams on SOC operations, threat landscapes, and analyst workflows. Ensuring product features align with industry frameworks (MITRE ATT&CK, NIST, ISO 27001) and SOC maturity models. Act as a trusted SOC and cyber defence expert in customer meetings, workshops, and solution design sessions. Support ...

secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+, CEH, CKS, CKA or similar certifications Please note: Active SC Clearance is essential for this ...

securing web applications and cloud platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical expert, but you must be able to understand and articulate ...

securing web applications and cloud platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical expert, but you must be able to understand and articulate ...

full project lifecycle from bid through delivery and into service. Desirable ExperiencePost-Quantum Cryptography (PQC) planning and migration. Cryptographic standards and frameworks including NCSC, NIST, ETSI, ISO and IEC standards. Scripting and automation using PowerShell, Python, or Bash. Identity & Access Management (IAM) integration. Critical National Infrastructure (CNI) or Operational Technology ...

full project lifecycle from bid through delivery and into service. Desirable ExperiencePost-Quantum Cryptography (PQC) planning and migration. Cryptographic standards and frameworks including NCSC, NIST, ETSI, ISO and IEC standards. Scripting and automation using PowerShell, Python, or Bash. Identity & Access Management (IAM) integration. Critical National Infrastructure (CNI) or Operational Technology ...

Cyber Risk Management Framework Assist in assessing cyber risks against: Government Security Policy Framework (SPF) DSPT Cyber Assurance Framework NCSC guidance ISO 27001/NIST aligned approaches Promote a proportionate, risk-based approach to cyber security across the organisation Governance & Reporting Contribute to cyber risk reporting for senior management and ...

cloud security, infrastructure security, identity and access management and application security. - Utilise your experience of working with recognised security frameworks and standards (ISO27001, NIST 800-53, CIS). - Translate technical security risks into business impact with an ability to make recommendations to technical audiences, business leaders and senior stakeholders. - Excellent ...

accreditation and secure by design processes (ISN2023/09), and associated policies, practices and deliverables across the lifecycle. In the application of standards including NIST Special Publications (e.g. SP 800-30, 37 & 53), and/or RTCA-DO-326A/B, 355A & 356A. That extends outside of traditional enterprise ...

accreditation and secure by design processes (ISN2023/09), and associated policies and practices across the lifecycle. In the application of standards including NIST Special Publications (e.g. SP 800-30, 37 & 53), and/or RTCA-DO-326A/B, 355A & 356A.In the application of Defence security standards, such ...

Familiarity with MOD security requirements, Classification Guides and security policy Knowledge of ITAR regulations and export control requirements Understanding of security standards (ISO 27001, NIST CSF, etc.) Practical knowledge of common IT architectures and technologies Personal Attributes Strong analytical and problem-solving skills Excellent leadership skills Excellent written and verbal ...

including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems. Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent. GenAI security: experience assessing and mitigating risks ...

including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems. Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent. GenAI security: experience assessing and mitigating risks ...

including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems. Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent. GenAI security: experience assessing and mitigating risks ...

including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems. Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent. GenAI security: experience assessing and mitigating risks ...

including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems. Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent. GenAI security: experience assessing and mitigating risks ...

code to deliver secure, consistent and maintainable identity services Advising clients on IAM best practices, standards and regulatory requirements, including GDPR, ISO 27001, NIST Frameworks About You Strong engineering background with deep expertise across Active Directory, Entra ID and PKI/ADCS in large, complex environments Pragmatic, methodical problem‐solver ...