Senior Cyber Security Consultant
Role details
Job location
Tech stack
Job description
You will work on 'business as usual', technical refresh, and new project environments, applying technical knowledge and innovative thinking in complex and non-routine contexts. You will help clients establish robust security governance, perform risk assessments, and deploy effective security controls and solutions aligned with business risk appetite. You will be expected to contribute to winning new business, managing delivery, and mentoring others within the security team. Projects are likely to involve working on client sites, (although hybrid working allows us to be flexible), and may involve travel across the UK and, occasionally overseas.
Your role
Client Delivery-
- Provide cyber security advice and guidance for clients in various environments.
- Lead and deliver risk assessments, security governance, and deployment of effective security controls tailored to client needs.
- Develop, review and maintain security related artefacts, policies and procedures to ensure compliance and best practice. Manage multiple projects concurrently, balancing business and client priorities.
- Deliver high-quality work under pressure and to tight deadlines, ensuring stakeholder expectations are met.
Technical Leadership-
- Apply technical security knowledge creatively to solve complex and non-routine challenges.
- Mentor and support colleagues, sharing expertise and fostering a culture of continuous improvement within the security team.
- Articulate cyber security concepts and recommendations to both technical and non-technical audiences.
Business Development-
- Identify and pursue new business opportunities, contributing to proposals and client engagement.
- Develop innovative solutions to emerging cyber security challenges.
- Build and maintain strong relationships with clients, stakeholders, and team members.
Requirements
As a Senior Cyber Security Consultant, you'll play a pivotal role in protecting Aerospace, Defence and CNI/OT clients from evolving cyber threats. You'll lead projects that shape national security, working alongside industry experts in a supportive, innovative environment. We offer clear pathways for career advancement, professional development, and opportunities to mentor junior consultants. This role will suit experienced qualified professionals with experience of working in either Defence OR CNI/OT and are looking to continue to develop and progress their career and provide real world benefit to clients. In return, we offer a challenging and rewarding role, career development, an empowered and supportive working environment with a competitive reward package. We invest in your professional growth through certifications, training and leadership pathways., * Experience of delivering technical cyber security consultancy in multi-disciplined environments, with proven ability to work both independently and collaboratively. Strong background in information assurance, including developing Information Security Management Systems (ISMS), conducting risk assessments, and deploying appropriate security controls.
- Excellent verbal and written communication skills, with the ability to engage effectively with stakeholders at all levels. Proven ability to work both independently and collaboratively within a multi-discipline, matrix organisation. Strong organisational skills, with experience managing multiple projects and tasks concurrently. Ability to deliver security outcomes to tight deadlines while maintaining quality and managing stakeholder expectations.
- Willingness and flexibility to travel throughout the UK (and occasionally overseas) as required.
- Relevant professional certifications (e.g., ISO27000, NIST Cyber Security Professional, CISMP, CISM, CISSP, CCSP, Chartered Cyber Security Professional) are highly desirable. Solid understanding of 'Secure by Design' methodology. Commitment to ongoing professional development and willingness to learn new frameworks and technologies.
- Experience in the UK Defence sector, including knowledge of MoD security policies and processes (e.g., HMG Information Assurance Policies, Security Policy Framework, JSP440, JSP604/JSP453).
- Experience conducting and managing security assurance and accreditation activities for Defence capabilities or experience delivering cyber security consultancy in OT environments (e.g., energy, utilities, transportation). Be able to apply knowledge, with creative and innovative thinking, in a broad range of complex and non-routine contexts covering people, process and technology relating to the cyber risk management of OT/ICS.
- Experience with SCADA, PLC and RTU packages and understanding how they integrate with field devices, historians, and corporate IT networks. Facilitate Cyber Security risk assessments and determine the most cost-effective deployment of security controls and solutions in line with the client's business risk appetite to protect OT/ICS environments.
- Select appropriate technology to meet clients' security requirements and help them deploy that technology in live OT/ICS environments. Familiarity with OT cyber security standards or regulatory frameworks (e.g., IEC 62443, NIST CSF, NIS Regulations, HSE OG-0086).
- Relevant OT cyber security qualifications (e.g., GICSP, IEC/ISA 62443). Membership of recognised security professional bodies (e.g., IISP, IS2, BCS, CIISEC).
- Ability to create client policies and procedures to meet corporate and regulatory requirements in OT environments. Experience selecting and deploying appropriate technology in live CNI environments.
Benefits & conditions
Explore the rewards and benefits that help you thrive - at every stage of your life and your career. Enjoy competitive salaries, employee rewards and a brilliant range of benefits you can tailor to suit your own health, wellbeing, financial and lifestyle choices. Make the most of a myriad of opportunities for training and professional development to grow your skills and expertise. And combine our hybrid working culture and flexible holiday allowances to balance a great job and fulfilling personal life.