1 to 25 of 49 Remote/Hybrid NIST Jobs in London

level within complex organisations. Key Skills & Experience Proven experience developing and delivering cyber security strategies Strong understanding of security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls, encryption technologies) Knowledge of cloud ...

secure access solutions. Lead network patching, firmware upgrades, vulnerability remediation, and security hardening activities. Ensure compliance with industry standards and frameworks, including ISO 27001, NIST, CIS Benchmarks, and PCI-DSS. Partner with Cyber Security teams to identify risks, strengthen controls, and enhance enterprise security posture. Performance, Reliability & Automation Monitor, troubleshoot ...

Microsoft security technologies (Azure, Entra ID, Conditional Access, PIM, Defender, Microsoft 365 security stack) Strong understanding of security governance, risk, and compliance frameworks including NIST and FAIR Experience delivering security architecture within multi-year transformation programmes Strong stakeholder management and executive communication skills If you're looking to join ...

Microsoft security technologies (Azure, Entra ID, Conditional Access, PIM, Defender, Microsoft 365 security stack) Strong understanding of security governance, risk, and compliance frameworks including NIST and FAIR Experience delivering security architecture within multi-year transformation programmes Strong stakeholder management and executive communication skills If you're looking to join ...

designs and deployments. Review and improve customer security policies and standards. Perform risk assessments, threat modelling, and compliance gap analysis. Advise on ISO 27001, NIST, PCI DSS, and GDPR. Threat and Vulnerability Management Interpret threat intelligence and guide remediation strategies. Support patching, OS hardening, and configuration management. Assess vendor advisories ...

cybersecurity architecture or engineering role. Expertise in Zero Trust platforms, cloud security, app connectors, and integration technologies. Deep knowledge of Zero Trust frameworks (NIST 800-207, SASE, SSE), IAM, SD-WAN, endpoint security. Strong communication and business development skills; proven track record managing large teams and driving revenue. Exceptional communication ...

strong understanding of security operations, threat detection and incident response You have a good knowledge of security standards and regulatory compliance requirements (ISO, NIST) You have experience with 3rd party risk management and supplier assurance You're familiar with penetration testing processes and remediation tracking You have a good understanding ...

more of the following: Cyber Governance, Risk & Compliance (GRC) Delivering security consulting engagements Implementing or assessing controls against recognised frameworks including: ISO 27001 NIST NIS NCSC Cyber Assessment Framework (CAF) DORA TISAX IEC 62443 Conducting cyber risk assessments and governance reviews Developing security policies, standards and procedures Building business cases ...

more of the following: Cyber Governance, Risk & Compliance (GRC) Delivering security consulting engagements Implementing or assessing controls against recognised frameworks including: ISO 27001 NIST NIS NCSC Cyber Assessment Framework (CAF) DORA TISAX IEC 62443 Conducting cyber risk assessments and governance reviews Developing security policies, standards and procedures Building business cases ...

assurance, with a strong focus on application security. Hands-on experience with information security frameworks and regulatory compliance, such as ISO 27001 and the NIST SP 800 series/Cybersecurity Framework. Desirable Knowledge of regulatory requirements within the nuclear industry, particularly across the United States, United Kingdom, Netherlands, and Germany. ...

assurance, with a strong focus on application security. Hands-on experience with information security frameworks and regulatory compliance, such as ISO 27001 and the NIST SP 800 series/Cybersecurity Framework. Desirable Knowledge of regulatory requirements within the nuclear industry, particularly across the United States, United Kingdom, Netherlands, and Germany. ...

Microsoft security technologies (Azure, Entra ID, Conditional Access, PIM, Defender, Microsoft 365 security stack) Strong understanding of security governance, risk, and compliance frameworks including NIST and FAIR Experience delivering security architecture within multi-year transformation programmes Strong stakeholder management and executive communication skills If you're looking to join ...

Code using Terraform and/or CloudFormation Strong understanding of cyber security principles, secure architecture and threat modelling Experience working with frameworks such as NIST, ISO 27001 or CIS Benchmarks Excellent stakeholder engagement and consulting skills Desirable AWS Security Specialty or CISSP Experience securing containerised workloads Previous experience within Defence ...

SentinelOne, Cloudflare, OneTrust, or Microsoft Purview • Background in eComm, marketplace, or retail technology • Scripting (Python, PowerShell), Terraform, or detection-as-code experience • Familiarity with NIST CSF, ISO 27001, OWASP LLM Top 10, or similar frameworks What's on Offer for the Security Engineer • Real ownership — a genuine mandate to drive ...

services sector, or a financial services regulator. Knowledge and experience with laws, regulations, guidelines, and frameworks within the financial services industry such as COSO, NIST, ISO 27001 and 27002, COBIT, GLBA, SOX. Regulatory savvy, having operated in a highly regulated environment and worked with compliance and audit to ensure ...

and experience • Experience in Information Security, Cyber Security, Technology Risk or Security Governance • Experience in FCA-regulated financial services • Strong knowledge of ISO 27001, NIST and CIS Controls • Strong understanding of Microsoft Entra ID and AWS security • Experience conducting access reviews, risk assessments and supplier assurance • Excellent stakeholder management skills ...

security assessments and producing assurance reports. Ability to engage and influence stakeholders at all levels. Familiarity with security frameworks and standards (e.g., ISO 27001, NIST, CIS Controls). Excellent communication, planning, and organisational skills. Experience managing teams and developing talent. Ability to interpret complex technical and business information to assess ...

experience across security, resilience and risk management within a complex organisation. You will bring: Extensive cyber security leadership experience. Strong knowledge of ISO 27001, NIST or equivalent frameworks. Experience of business continuity, disaster recovery and organisational resilience planning. Knowledge of Facilities Management and Estates, including statutory compliance and contractor management. ...

command), from detection through containment and remediation. Working knowledge of MITRE ATT&CK and at least one recognised control framework (ISO 27001, CIS or NIST). Risk-based prioritisation of remediation using threat intelligence. Operated endpoint security and endpoint detection and response (EDR) tooling (e.g. CrowdStrike or equivalent ...

complex Managed Services environments Strong understanding of cloud infrastructure, networking and cybersecurity Experience delivering within Agile environments Knowledge of frameworks such as ISO 22301, NIST, ITIL or similar Excellent stakeholder management and communication skills Desirable certifications include TOGAF, CISSP, CBCP or equivalent. What's on Offer ...

complex Managed Services environments Strong understanding of cloud infrastructure, networking and cybersecurity Experience delivering within Agile environments Knowledge of frameworks such as ISO 22301, NIST, ITIL or similar Excellent stakeholder management and communication skills Desirable certifications include TOGAF, CISSP, CBCP or equivalent. What's on Offer ...

decision-making processes. Risk, Vulnerability & Compliance Management – Lead vulnerability management, third-party security assurance, policy governance, and compliance activities aligned with Cyber Essentials Plus, NIST CSF 2.0, and organisational risk appetite. Incident Response & Threat Management – Coordinate major cyber incident response, act as a senior escalation point, and maintain awareness of ...

international environment Experience & Expertise Experience in Information Security/Cyber Risk/IT Risk roles Strong background in Information Security frameworks (e.g. ISO 27001, NIST) Experience operating in a Second Line of Defence or advisory role Proven ability to provide independent challenge and constructive escalation to senior management Experience ...

access models using cloud based platforms and identity led controls including SSO, MFA and least privilege Developing security blueprints and reference architectures aligned to NIST 800-207, SASE and SSE Supporting network transformation including WAN modernisation, segmentation and secure access Aligning endpoint and network security with modern cloud first architectures ...

Significant experience in IT GRC, risk management, or information security governance Strong grounding in IT and information security risk frameworks, particularly ISO 27001 and NIST Practical experience in IT controls management, including design, documentation, assessment, testing, and attestation Familiarity with L1 to L3 control frameworks and experience building or enhancing ...