1 to 25 of 53 Remote/Hybrid NCSC Jobs

across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

Cloud Security Microsoft 365 Security DevSecOps Security Architecture Experience in application architecture, software engineering, or infrastructure architecture Knowledge of security standards and frameworks including NCSC, ISO 27001, SOC, NIST, PCI DSS, GDPR Experience with security testing tools and techniques Experience implementing Continuous Security, CI/CD, and DevSecOps practices Strong ...

/government agenc ies. Expertis e in:Security legislation (GDPR, PCI DSS, ICO)Frameworks (ISO 27001, NIST CSF, CIS Control s v8)HMG/NCSC policies and gui danceCloud security (AWS, A zure)Microservice architec turesPKI, Cryptography, Privileged Access Manag ement Certifica tions: SABSA, TOGAF, AWS/Azure Architect, CISSP ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling – Kill Chain ...

security qualification such as CISSP, CCSK or CCSP. It would be great if you had: Knowledge of security architecture frameworks and methodologies, including: NIST. NCSC guidance. SABSA. Understanding of Secure by Design principles. Experience across one or more security domains, such as: Identity & Access Management (IAM). Infrastructure. Security. Data ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

security qualification such as CISSP, CCSK or CCSP. It would be great if you had: Knowledge of security architecture frameworks and methodologies, including: NIST. NCSC guidance. SABSA. Understanding of Secure by Design principles. Experience across one or more security domains, such as: Identity & Access Management (IAM). Infrastructure. Security. Data ...

emphasis on balancing security needs with useability and reducing user friction. Technical Mastery: Knowledge of security frameworks (e.g. ISO 27001, NIST, and/or NCSC guidance), security risk management, security architecture, and best practices for safeguarding sensitive assets. Regulatory Compliance: Familiarity with UK legislation, standards, and protocols. Incident Management: Demonstrable ...

Chartered Institute of Information Security (CIISec) — highly desirable. • Chartered or Principal status via the UK Cyber Security Council for Secure Systems Architecture. • NCSC Certified Cyber Professional (CCP) in Security Architecture. • IEng or CEng registered with a UK engineering body. • Chartership through BCS, The Chartered Institute for IT. • SABSA Chartered Security ...

highly regulated environment, or within His Majesty's Government (HMG). Knowledge of security frameworks (e.g. ISO 27001, NIST, and/or NCSC guidance), security risk management & security architecture. Relevant professional certifications (such as CISSP, CISM, CISA, or equivalent) - Desirable ...

following: Cyber Governance, Risk & Compliance (GRC) Delivering security consulting engagements Implementing or assessing controls against recognised frameworks including: ISO 27001 NIST NIS NCSC Cyber Assessment Framework (CAF) DORA TISAX IEC 62443 Conducting cyber risk assessments and governance reviews Developing security policies, standards and procedures Building business cases and regulatory compliance ...

doing so play a key role in nationally critical projects which make a real difference to people’s everyday lives. We are a National Cyber Security Centre Assured Cyber Security Consultancy. Locations: London, Guildford, Bristol, M4 corridor Roles and Responsibilities Working either individually or as part of a larger Actica ...

assess and manage cyber security risks proportionately, balancing risk appetite, security controls and operational needs. Strong knowledge of security policies, standards and frameworks, including NCSC guidance and defence-in-depth principles. Confident communicator who can explain complex security concepts clearly to technical teams, senior leaders, programme boards and external stakeholders. ...

across technical, operational and executive audiences. Coaching, mentoring and developing cyber security professionals. Experience in one or more of the following would be advantageous: NCSC guidance, UK Cyber Security Council frameworks and CIISec professional standards. Defence, Government, Critical National Infrastructure or other highly regulated sectors. Security governance, risk and compliance ...

policy-based access control solutions. Practical experience with Open Policy Agent and policy-as-code solutions at scale. Practical experience HMG security assurance (e.g. NCSC Cyber Assessment Framework). Ability to produce high-quality architecture and security design documentation. Ability to translate complex security concepts for technical and non-technical ...

collaboratively within a team environment. It would be great if you had: • Exposure to security frameworks such as ISO 27001, Cyber Essentials or National Cyber Security Centre guidance. • Understanding of third-party risk management concepts. • Experience working with structured processes such as onboarding, compliance or risk assessments. • Awareness of data ...

technical reports for clients Supporting and collaborating with a wider team of cyber security consultants on varied projects Maintaining testing activities in line with NCSC CHECK and CREST methodologies What They're Looking For: Active SC Clearance (essential) Current CHECK Team Member status (essential) Proven experience delivering penetration testing engagements ...

Security Cleared environ ment, You will hold current SC Clearance or DV (Deve loped Vetting) Skills required: CSTL or CSTM-essential (NCSC) Previous experience of penetration testing public sector or critical national infrastructure (CNI) systems and networks. Azure,AWS On-prem Infrastructure Containers, Kubernetes Excellent communication skills, with previous coaching ...

with the development of infrastructure as code using Terraform or Bicep. A strong understanding of cloud security principles and Zero Trust architectures. Familiarity with NCSC, GDS, and UK government security frameworks-such as Secure by Design, Cloud Security Principles, and Government Functional Standards. Desirable Qualifications: Microsoft Azure Fundamentals ...

Implement the guardrails the Architect designs - bias mitigation checks, evaluation harnesses, human-in-the-loop review points - so that Responsible AI principles (ATRS alignment, NCSC "Secure by Design, " meaningful human control) are enforced in the running system, not just on paper. Reliability, Security & Observability Build AI services to be secure ...

engage senior stakeholders and explain complex technical issues clearly to both technical and non-technical audiences. A recognised cyber security qualification (such as an NCSC-certified Master's degree, CISSP or equivalent Level 6 qualification), professional membership and/or chartership, and the ability to achieve and maintain Developed Vetting ...

hands-on, client-facing role covering: OT/ICS security assessments SCADA and control system environment reviews IEC 62443, NIST SP 800-82 and NCSC CAF aligned work IT/OT convergence, segmentation and remote access reviews OT-aware vulnerability assessments using non-disruptive approaches Reporting and briefings for both ...

Water Civil Nuclear Transport (including aviation, rail, maritime, road and autonomous vehicles) Wider critical infrastructure Security standards relating to the sector, including: NCSC NIS Guidance and CAF ISO 27001 and ISO 27005 NERC CIP ISA‐99/IEC 62443 NIST CSF Benefits Health and lifestyle perks accompanying private healthcare ...

technical reports for clients Supporting and collaborating with a wider team of cyber security consultants on varied projects Maintaining testing activities in line with NCSC CHECK methodologies Requirements: Active SC Clearance (essential) Current CHECK Team Member status (essential) Proven experience delivering penetration testing engagements Knowledge of infrastructure, web application ...