cyber incident response planning, with an understanding of GRC frameworks and XDR technologies Strong knowledge of cybersecurity regulations relevant to utilities (ISO27001, CAF, GDPR, NIST) Experience developing and implementing incident response strategies in highly regulated environments. Familiarity with cybersecurity tools and technologies used for detection, response, and reporting. Excellent communication more »
environments Expert level of security architect, cyber security infrastructure technologies, including implementation and configuration Conversant with security best practices (including ISO27001 and/or NIST 800-53) and relevant security legislation Extensive experience working with internal and external service providers to deliver IT systems in a regulated/accredited environment more »
management, vulnerability/threat assessment) or equivalent, related work experience Knowledge of information security standards, such as HMG, NCSC Guidance, ISO 27001/18, NIST 800, HMG is fundamental Capable of a very high standard of written communication including experience of writing complex reports and giving formal presentations to senior … standard security policy, standardsand good practice guidance and their application to a variety of IT solutions processing protectively marked information Desirable: Knowledge ofNIST 800-53 & NIST 800-171 Benefits: As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible more »
What you'll be doing: Deliver the Cyber Operational Assurance services to assure the compliance and effectiveness of applicable IT security controls to meet NIST (DFARS), DEFSTAN, HMG Secure by Design requirements and/or Group Cyber Security Standards (GCSS) Support other Information Security certifications such as; ISO/IEC … to underpin international networks and differing overseas requirements Report the Performance/Health of applicable security controls to assure compliance and effectiveness aligned with NIST (DFARS), DEFSTAN, HMG Secure by Design requirements and/or Group Cyber Security Standards (GCSS) to highlight key issues to senior stakeholders Support, assist in more »