mitigation strategies. Collaborate on incident handling, reporting, and documentation. Enforce security policies in line with industry standards and regulations (GDPR, ISO, Cyber Essentials+, NIST800-171). Assist with audits and compliance reporting. Manage and configure network devices with a focus on security. Design and implement More ❯
and, preferably, a record of 5 years’ UK residency), SKILLS & EXPERIENCE DESIRED: Able to perform Risk management using industry approved methodologies (such as NIST800-53). Identification of suitable risk management activities (technical, physical, or procedural) to treat/mitigate the identified risks; Support development More ❯
and, preferably, a record of 5 years’ UK residency), SKILLS & EXPERIENCE DESIRED: Able to perform Risk management using industry approved methodologies (such as NIST800-53). Identification of suitable risk management activities (technical, physical, or procedural) to treat/mitigate the identified risks; Support development More ❯
City, Aberdeen, United Kingdom Hybrid / WFH Options
Baker Hughes Gruppe
Demonstrate understanding of industry security standards, guidelines and regulatory/compliance requirements related to information security and cloud computing such as ISO 27001, NIST800-53, IEC/ISA 62443, SOC2, PCI, SOX, etc. Have hands-on experience on IT M&A/IT Compliance/ More ❯
Bristol, Gloucestershire, United Kingdom Hybrid / WFH Options
AtkinsRéalis
CESG IA Portfolio and MoD JSPs such as JSP440, JSP604/JSP453 (plus other standard MoD IA methods). Certifications such as ISO27000, NIST Cyber Security Professional, CISMP etc. Flexibility over UK, and potentially overseas travel. Desirable: Certified Information Systems Security Professional (CISSP)/Certified Information Security Manager … NCSC Certified Cyber Professional/CESG CCP (Security and Information Risk Advisor or Security Architect). Understanding of 'Secure by Design' methodology and NIST800-37 Risk Management Framework. A keen interest in the latest technology with a focus on security technologies. Ambition to work in More ❯
bristol, south west england, united kingdom Hybrid / WFH Options
AtkinsRéalis
CESG IA Portfolio and MoD JSPs such as JSP440, JSP604/JSP453 (plus other standard MoD IA methods). Certifications such as ISO27000, NIST Cyber Security Professional, CISMP etc. Flexibility over UK, and potentially overseas travel. Desirable- Certified Information Systems Security Professional (CISSP)/Certified Information Security Manager … NCSC Certified Cyber Professional/CESG CCP (Security and Information Risk Advisor or Security Architect). Understanding of 'Secure by Design' methodology and NIST800-37 Risk Management Framework. A keen interest in the latest technology with a focus on security technologies. Ambition to work in More ❯
Leeds, Yorkshire, United Kingdom Hybrid / WFH Options
William Hill PLC
influence cybersecurity. Skilled in stakeholder engagement, promoting information security, and working in both agile and waterfall environments, with knowledge of security standards like NIST800, ISO 27001, and PCI-DSS What we offer Our roles offer more than just a job, you'll become part of More ❯
the security of both OT and IT environments, including SCADA systems and Industrial Control System (ICS) Governance and compliance of all OT systems - NIST800-82, IEC 62443, OG86, NERC-CIP, SOCI, NIST-CSF, NIS2 Taking a proactive role in threat hunting, incident response … awareness Key skills needed are: 3+ years in a cyber security role with a good level of exposure to OT security Knowledge of NIST and IEC 62443 OT frameworks Knowledge of the Microsoft security stack and wider IT security experience highly desirable Knowledge of NERC CIP and/ More ❯
Bristol, Gloucestershire, United Kingdom Hybrid / WFH Options
Snc-Lavalin
/JSP453 (plus other standard MoD IA methods). Experience with IT Computer Systems and interconnecting systems and networks. Certifications such as ISO27000, NIST Cyber Security Professional, CISMP, etc. Flexibility over UK and potentially overseas travel. Desirable: Certified Information Security Manager Principles (CISMP) or equivalent. Associate/Full … of recognised security professional body such as the Institute of Information Security Professionals (IISP), IS2, BCS. Understanding of 'Secure by Design' methodology and NIST800-37 Risk Management Framework. A keen interest in the latest technology with a focus on security technologies. Ambition to work in More ❯
bristol, south west england, united kingdom Hybrid / WFH Options
AtkinsRéalis
CESG IA Portfolio and MoD JSPs such as JSP440, JSP604/JSP453 (plus other standard MoD IA methods). Certifications such as ISO27000, NIST Cyber Security Professional, CISMP etc. Flexibility over UK, and potentially overseas travel. Experience with IT Computer Systems and interconnecting systems and networks. Desirable- Certified … recognised security professional body such as the Institute of Information Security Professionals (IISP), IS2, BCS and Understanding of 'Secure by Design' methodology and NIST800-37 Risk Management Framework. A keen interest in the latest technology with a focus on security technologies. Ambition to work in More ❯
Leeds, England, United Kingdom Hybrid / WFH Options
Lorien
cybersecurity with a focus on operational technology and industrial control systems Eligible for SC clearance Knowledge of OT security standards (e.g. IEC 62443, NIST800-82, NCSC CAF Framework etc.) Knowledge of policies/procedures on OT standards Experience creating frameworks and undertaking maturity assessments Experience More ❯
Gloucester, Gloucestershire, UK Hybrid / WFH Options
uk7 UTC
behavioural analysis, and environmental factors Develop and present comprehensive risk assessment reports, including clear recommendations for mitigation and investment Apply frameworks such as NIST800-53, ISO/IEC 27001, and NCSC CAF to assess current controls and identify improvement opportunities Contribute to the development of … can apply critical thinking to complex and ambiguous environments, making informed decisions under pressure You have strong knowledge of cyber risk frameworks (e.g. NIST, ISO27001, NCSC CAF) and experience in applying them You're experienced in one or more of: counterintelligence, human intelligence and security, physical security assessments More ❯
london, south east england, United Kingdom Hybrid / WFH Options
Lorien
IT/OT security trends and vulnerabilities Experience implementing Security Standards and Best Practice guidelines Knowledge of OT security standards (e.g. IEC 62443, NIST800-82, NCSC CAF Framework etc.) For more information and immediate review, please apply now More ❯
architecting complex solutions and desirable to have several years of experience working with cyber security services Strong understanding of cyber security frameworks (e.g., NIST800-171, NSCS Guidance) and cloud security Excellent communication, stakeholder engagement, and strategic consulting skills Proficient in architecture methodologies with hands-on More ❯
Chatham, Kent, United Kingdom Hybrid / WFH Options
OneSavings Bank PLC
such as savings and mortgages Strong understanding of Cloud Security and Controls and the application of internationally recognised standards such as NISTSP-800-53, CSA CCM, ISO27001 is essential Hands-on experience with core banking platforms, payment systems, and customer-facing applications Strong knowledge of Azure functionality More ❯
control design adequacy and effectiveness. The role supports RCSA processes and leads evidence-based evaluations. Key Responsibilities: Evaluate and test security controls against NIST800-53 requirements Execute scheduled control testing, document results, and analyse weaknesses Review and capture control evidence for audit and compliance purposes More ❯
london, south east england, United Kingdom Hybrid / WFH Options
Vantage Data Centers
Strong understanding of cybersecurity frameworks for ICS/OT environments Strong understanding of OT network communication protocols and industrial networking topologies. Familiarity with NIST (National Institute of Standards and Technology) SpecialPublication800-61 Revision 2, Computer Security Incident Handling Guide. Familiarity with NIST (National Institute of Standards and Technology) SpecialPublication800-82 Comprehensive knowledge of internet protocols, firewalls, proxies, and intrusion detection/prevention systems. Familiarity/Knowledge of the Perdue Enterprise Reference Architecture (PERA) Certifications for SANS (SysAdmin, Audit, Network and Security) GIAC (Global Information Assurance Certification … NERC CIP (North American Electric Reliability Corporation Critical Infrastructure Plan) frameworks Understanding of general cybersecurity frameworks (ISO IEC 27001/27002, ISO 15408, NIST Cybersecurity Framework (CSF), NIST SP800-53), and Guide to Industrial Control Systems (ICS) Security (NIST SP800-82) A working knowledge More ❯
for this vacancy. 5 + years of security/technology audit experience, including development of control test plans/scripts Working knowledge of NIST CSF 2.0 and/or NIST 800.53 rev. 5 Experience in automating control testing processes Experience managing multiple assignments and projects at More ❯