26 to 46 of 46 NIST Jobs in the West Midlands

Skills You will have a solid understanding of: Third Party Risk Management (TPRM) and supply chain security Security frameworks including ISO 27001, ISO 27036, NIST, and related assurance standards Zero Trust security principles and third-party access controls Vendor risk assessment, risk scoring, and continuous monitoring practices Enterprise security architecture ...

bring: Mandatory skills Significant experience in Information Security and GRCStrong understanding of risk management methodologies and international security standards (e.g., ISO 27001, US NIST, TSA, etc.) and the ability to assess risks, identify vulnerabilities, etc.Familiarity with data privacy legislation such as EU GDPRExperience maintaining and auditing Information Security Management Systems ...

Knowledge of industrial communication networks and IEC 61850 environments. Practical knowledge of IEC 62443, NCSC CAF, NIS2 Directive, Cyber Resilience Act (CRA), and the NIST framework. Knowledge of NERC CIP standards is an asset. Experience working in cross-functional teams and coordinating with suppliers. Excellent communication skills, with the ability ...

embed security requirements and guide secure delivery from design through to procurement. You will apply threat modelling, risk assessments and industry standards (ISO 27001, NIST) while collaborating with IAM, GRC and infrastructure teams to ensure secure operations. #J-18808-Ljbffr ...

Build and own the offensive AI security testing methodology, testing harness, covering LLM, agentic and AI-enabled systems, aligned to OWASP LLM Top 10, NIST AI RMF and emerging regulation including the EU AI Act.Own technical standards, peer review, quality assurance and research and development across all offensive service lines ...

of architecture e.g. Layered security, Zoning, Integration aspects, API, Endpoint security, Data security, Compliance and regulations f. Demonstrate experience in doing security assessment against NIST Frameworks, SANS, CIS, etc. g. Provide support during technical deployment, configuration, integration and administration of security technologies h. Demonstrate experience around ITIL or Key process ...

of network architecture and secure‐by‐design principles. Experience deploying and managing containerised applications and environments. Familiarity with cyber security frameworks and standards, including: NIST Cyber Security Framework Cyber Essentials OWASP IEC 62443 EU Cyber Resilience Act (CRA) UK Product Security and Telecommunications Infrastructure (PSTI) requirements Desirable Experience Operational Technology ...

operations, security and business stakeholders. Support governance, reporting, audit readiness and continuous improvement. Implement automation and operational best practices where applicable. Technical Skills : CVSS, NIST, DORA, ISO 27001, Cyber Defence Preferred Skills : Enterprise-scale operations experience, stakeholder management, automation mindset, strong analytical and problem-solving capabilities. ...

stakeholders. Support governance, reporting, audit readiness and continuous improvement. Implement automation and operational best practices where applicable. Required Experience - 9+ years Technical Skills - CVSS, NIST, DORA, ISO 27001, Cyber Defence Preferred Skills Enterprise-scale operations experience, stakeholder management, automation mindset, strong analytical and problem-solving capabilities. Benefits A supportive, diverse ...

availability of all OT assets, including the deployment of the latest anti-virus and software patches to comply with security standards and alignment to NIST, IEC62443, and GDPR frameworks Implementing and maintaining robust cyber security measures to protect OT systems from threats and vulnerabilities Developing and executing the OT strategy ...

architectures for National Security, Defence IT, C5ISR, mission systems, and secure services and consultancy Leading architectural governance, ensuring compliance with MOD standards, JSPs, DEFSTANs, NIST, and relevant NATO frameworks Shaping technical roadmaps aligned with growth roadmaps and long-term defence strategies evaluating and selecting technologies across cloud, edge computing, secure ...

MITRE ATT&CK and Cyber Kill Chain frameworks Skilled inmaintaining Microsoft directory services. Skilled inusing virtualisation software. Knowledgeof key security frameworks (e.g. ISO, NIST 800-53) Experienceof writing Defence/Government documentation BroadSpectrum Cyber Course (SANS SEC401 or SEC501 or equivalent) Experienceof managing cyber incidents and investigations SIEMDesign, Architecture and ...

patternsHybrid classical/PQC key exchangeCryptographic agility frameworksSecure key management and HSM integrationDevelop defensible design patterns, for high-assurance systems, ensuring alignment with NCSC, NIST, ETSI and sector specific standards.Provide technical leadership to engineering teams, guiding implementation, testing, and assurance.Engage with senior stakeholders, translating complex trust and crypto concepts into ...

role also includes leading a team of five, deploying cyber security measures, budgeting OT OPEX and CAPEX, and aligning with standards such as NIST, IEC62443 and GDPR. #J-18808-Ljbffr ...

coordinating third-party security providers such as managed SOC or security service partners. Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF or similar. Experience in an engineering or manufacturing business delivering long-lived systems would be helpful. Experience in high-trust, regulated or mission-critical ...

platform security and work across engineering, operations and stakeholders to ensure audit readiness. The role requires 9+ years of experience and expertise in CVSS, NIST, DORA, ISO 27001 and cyber defence, with a focus on automation and process improvement. #J-18808-Ljbffr ...

technologies, architectures, protocols, threats and controls Proven experience building a security capability, service or function from the ground up Strong knowledge of IEC 62443, NIST CSF and NIST SP 800-82 Practical experience applying the Purdue model within manufacturing/engineering organisations Working knowledge of project management principles Willingness ...

migration and modernisation of legacy hosting and identity platforms. Reduce technical debt and legacy technology dependencies. Apply security principles and recognised standards including NIST, CIS and Secure-by-Design. Produce architecture artefacts and technical designs and support architecture governance. Engage with senior stakeholders and communicate complex security and architecture decisions … align with wider technology strategy. Security Architecture Security architecture and enterprise security design. Zero Trust architecture and adoption. Security modernisation. Secure-by-Design principles. NIST and/or CIS frameworks. Security controls and technical assurance. Technical debt reduction and legacy modernisation. Identity & Access Management Identity and Access Management (IAM). ...

and engineering teams to ensure secure configurations and patch management – find the root causes of issues and work to resolve· Support compliance alignment with NIST, and Cyber Essentials· Assist in threat modelling and risk assessments· Maintain documentation and procedures related to vulnerability management· Seek out and exploit opportunities for improvement … management processes and secure system configurations.· You are familiar with OT environments is a plus· You have an understanding of security frameworks such as NIST, and Cyber Essentials· You have an ability to work independently in a fast-paced, on-site environment· You have a strong analytical mindset and communication ...

documentation to assess cyber security risks, enabling informed operational decision making and business planning across a variety of sectors using recognised frameworks such as NIST and UK Government standards Leading and delivering cyber security audits against established standards, including ISO27001, to evaluate compliance, identify areas for improvement and support organisational … detailed vulnerability assessments and cyber risk analyses to provide a comprehensive understanding of security maturity, threat exposure and organisational resilience, leveraging frameworks such as NIST, MITRE ATT&CK and UK Government guidance Identifying, assessing and clearly communicating appropriate mitigation strategies to reduce cyber risk within specific business, operational and threat ...

chain management and perform cyber security auditsExperience in producing Zones and Conduits Partitioning Diagrams, Cyber Security Requirements definition and cyber security AssuranceISO 27005/NIST 800-82/NIST 800-53 KnowledgeDesirable requirements for the role includeNIS/NIS2 knowledgeRailway industry experience and TS 50701 KnowledgeUnderstanding of Railway frameworks (e.g. ...