of Cyber Security Risk in various capacities as needed Your skills and experiences: Essential: Robust understanding of risk analysis methodologies, frameworks and theories (FAIR, NIST) Previous experience working in large and complex organisations Ability to effectively write high quality reports and presentations Advanced user with Microsoft Excel Bachelor's degree more »
Industry Security Qualifications, e.g. CCP, CISSP, CISM (or able to achieve) Proven experience of assessing and managing risk in line with industry good practice (NIST, ISO 27001) Significant experience with using security baselines, mitigations and controls Engineering background and or strong familiarity with a life cycle phased approach Desirable: Experience more »
london, south east england, United Kingdom Hybrid / WFH Options
Anson McCade
key industries such as electricity, oil and gas, water, transportation, and wider critical infrastructure. Knowledge of security standards including ISO 27001, NERC CIP, andNIST CSF. A collaborative spirit with excellent communication skills and stakeholder management abilities. Why join us? Flexible working arrangements to support your work-life balance. Access more »
Experience of packaged systems selection, implementation, and enhancements With proven experience in Information Security and Cyber Project Management, youll have an understanding of the NIST Framework and Cyber Essentials and will have excellent leadership and communication skills, able to work in a fast-paced, dynamic environment. About us We value more »
bradford, yorkshire and the humber, United Kingdom Hybrid / WFH Options
Caraffi
5000+ endpoints, and implement security infrastructure solutions such as SIEM, Access Governance, SASE, and Endpoint Protection. Apply information security standards (e.g., ISO 27001, ISF, NIST), industry security guidance (OWASP & CIS), and risk assessment frameworks to ensure systems/services meet acceptable security requirements. Identify and assess business and technical security more »
controls. * Knowledge and understanding of cybersecurity threats and associated attack techniques. * Analysis and management of risks and cybersecurity controls. Standardsand methodologies: ISO 27000, NIST, SANS CSC, etc. * Knowledge of application security and associated standards. What’s in it for you? * Annual Leave beyond the statutory entitlement of 31 days more »
related field (or equivalent experience). Minimum of 5 years experience in a security engineering role. Strong understanding of security principles and methodologies (e.g., NIST Cybersecurity Framework, CIS Controls). Experience with network security tools (NAC, firewalls) and web security solutions (TLS inspection). Experience with endpoint security and access more »
Bristol, Avon, South West, United Kingdom Hybrid / WFH Options
Leidos Innovations UK Limited
CloudWatch, Guard Duty, Macie Experience with network security, vulnerability management, and penetration testing Knowledge of security best practices and industry standards, such as CIS, NIST, and PCI-DSS Excellent communication and collaboration skills Ability to work independently and in a team environment AWS certifications such as AWS Certified Security Specialty more »
IEC/ISO 27001 framework and experience with ISMS tooling Experience in supporting and maintaining ISO27001 and Cyber Essentials PLUS aligned solutions Knowledge ofNIST, CISSP and GDPR Recognised IS qualifications This is a fantastic opportunity to join a prestigious firm working with best-of-breed technologies. Information Security Analyst more »
Professional. Knowledge of UK/NATO Information Assurance standards, procedures & systems, including Government Functional Standard GovS 007: Security, HMG IS1&2, ISO27000 series standards, NIST SP800 series standards, JSP440, JSP604, guidance material provided by NCSC, CPNI and NIST. Practical experience of producing Security Accreditation documentation Practical experience of NCSC andmore »
the IT security team to ensure AI/ML systems comply with relevant regulatory requirements and industry standards, such as the EU AI Act, NIST AI RMF, the Digital Services Act, the Digital Markets Act, GDPR and ISO 27001. Work alongside incident response teams to investigate and respond to security more »
SR2 | Socially Responsible Recruitment | Certified B Corporation™
current operational processes and contribute across Security Assurance, Threat Detection, Risk Management, CPSM & Threat Intelligence. Skills required: Control Frameworks & Industry Standards (ISO27001, 27002, GDPR, NIST) Security Operations Performance Tracking Data Security, Malware Detection, Threat & Incident response For the right person this is a huge opportunity - considering the sustained growth that more »
Industry Security Qualifications, e.g. CCP, CISSP, CISM (or able to achieve) Proven experience of assessing and managing risk in line with industry good practice (NIST, ISO 27001) Significant experience with using security baselines, mitigations and controls Engineering background and or strong familiarity with a life cycle phased approach Desirable: Experience more »
Nottingham, Nottinghamshire, East Midlands, United Kingdom
Microlise
for the organisation Research and propose data tools and technologies to improve efficiency and data and information security within the context of GDPR, CISSP, NIST, ISO 27001, Zero Trust Architecture, Information Security, Identity and Access Management, locally and internationally Develop, maintain, and oversee data principles, standards, policies, and procedures to more »
Industry Security Qualifications, eg. CCP, CISSP, CISM (or able to achieve) · Proven experience of assessing and managing risk in line with industry good practice (NIST, ISO 27001) · Experience with using security baselines, mitigations and controls · Conducted cyber security analysis work, developed threat taxonomies, security architectures, security baselines and risk mitigations. more »
Industry Security Qualifications, eg. CCP, CISSP, CISM (or able to achieve) · Proven experience of assessing and managing risk in line with industry good practice (NIST, ISO 27001) · Experience with using security baselines, mitigations and controls · Conducted cyber security analysis work, developed threat taxonomies, security architectures, security baselines and risk mitigations. more »
Industry Security Qualifications, eg. CCP, CISSP, CISM (or able to achieve) · Proven experience of assessing and managing risk in line with industry good practice (NIST, ISO 27001) · Experience with using security baselines, mitigations and controls · Conducted cyber security analysis work, developed threat taxonomies, security architectures, security baselines and risk mitigations. more »
Industry Security Qualifications, eg. CCP, CISSP, CISM (or able to achieve) · Proven experience of assessing and managing risk in line with industry good practice (NIST, ISO 27001) · Experience with using security baselines, mitigations and controls · Conducted cyber security analysis work, developed threat taxonomies, security architectures, security baselines and risk mitigations. more »
skills and experiences: Experience as an Auditor or Implementer of ISO27001 Expert understanding of information security principles and Security Frameworks including ISO 27001 andNIST Experience in Cyber Security in relation to DEFCON 658, DEFSTAN 05-138, MOD Accreditation/Secure by Design Degree (or equivalent experience) in a relevant more »
experienced Director of Information Security. This individual will have a proven track record in managing security systems and ensuring compliance with standards (ISO 27001, NIST, SOC 2). This opportunity involves working cross- functionally with supporting teams taking a strategic 360 approach to security. You must be prepared to influence more »
Newcastle upon Tyne, Tyne and Wear, Tyne & Wear, United Kingdom Hybrid / WFH Options
Hays Technology
/Cloud environment, be experienced with the security principles surrounding business acquisitions and have a nice hybrid of traditional Information Security knowledge (ISO27001, GRC, NIST, Cyber Essentials Plus etc.) alongside a technical cyber understanding enabling them to create and ensure the adherence of policies in a cloud-focused SAAS business more »
Employment Type: Permanent
Salary: £80000 - £100000/annum plus bonuses and more benefits
JIRA) * Ability to identify Threat Vectors in enterprise or cloud environments and design associated security/controls. * Knowledge of Enterprise security frameworks such as NIST Cybersecurity Framework. * Knowledge of Cyber-attack phases (e.g. Cyber Kill Chain and/or Mitre Attack Framework). * Knowledge of a broad range of security more »