> Markdown version of [/jobs/ext/1456969-cyber-security-senior-grc-consultant-dv-cleared](https://www.wearedevelopers.com/jobs/ext/1456969-cyber-security-senior-grc-consultant-dv-cleared). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security - Senior GRC Consultant (DV Cleared)

- **Company:** Sanderson Recruitment Plc
- **Location:** Bristol, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cyber Security, Information Systems Security Architecture Professional, PCI Data Security Standards, Systems Development Life Cycle, Software Engineering, Information Security Management System, CIS Benchmarks
- **Published:** July 27, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/x/42122371/

## About the Role

Experience RequiredThe successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC and UK Cyber Security Council professional registration at either Chartered or Principal for Risk Management.Active DV clearance requiredStrong working knowledge of Security Assurance Coordinator or Delivery Team Security Lead rolesJSP440, JSP604/453 & JSP490Working with system secure design & MOD/GDS Secure by Design PrinciplesSupplier Chain Assurance and Risks.Security related legislation (e.g. GDPR, PCI DSS, ICO requirements).Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8.HMG, NPSA and NCSC security policies, standards and guidance.Have experience building and implementing secure by design principals within the software development lifecycle (SDLC).Threat Modelling - Kill Chain - Attack tree analysis.
Certifications: AWS/Azure Security Professional, CCSP, CISSP, CISM, CIISEC, UK Cyber Security Council registration (Chartered or Principal).
What's in it for You
Hybrid Working: 3 days onsite per weekCompetitive SalaryCareer Development: Continuous learning and professional growth.

## Description

About the RoleAs a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within MOD and Public Sector environments. You'll collaborate with multi-disciplinary teams to define and implement security risk assessments and best practice solutions, ensuring alignment with business risk appetites and transformation goals. You'll be part of a knowledge-sharing culture, working alongside expert peers in Secure Architecture and Risk Planning.
Key ResponsibilitiesDeliver Secure by Design risk and security assurance functions within MOD/Public Sector.Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management.Facilitate security and risk workshops with Authority departments.Produce clear reporting on vulnerabilities, risks, controls, and treatment activities.Provide pragmatic remediation and risk management guidance.Support secure design across technology platforms including cloud infrastructures.Contribute to blogs and research within the Cyberfort community.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)