Cyber GRC Consultant (DV Cleared)

Sanderson Recruitment Plc

London, UK

11 days ago

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Working hours

Regular working hours

Job source

www.totaljobs.com

Tech stack

Artificial Intelligence Amazon Web Services Application Firewall Microsoft Azure Cloud Computing Security Cyber Security Intrusion Detection Systems Information Systems Security Architecture Professional Key Management Network Security PCI Data Security Standards Public Key Infrastructure

+9 more

Systems Development Life Cycle Zero Trust Network Access Software Engineering Information Security Management System Cloud Platform System Firewalls (Computer Science) Containerization CIS Benchmarks User Administration

Job description

As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within MOD and Public Sector environments. You’ll collaborate with multi-disciplinary teams to define and implement security risk assessments and best practice solutions, ensuring alignment with business risk appetites and transformation goals. You’ll be part of a knowledge-sharing culture, working alongside expert peers in Secure Architecture and Risk Planning., * Deliver Secure by Design risk and security assurance functions within MOD/Public Sector.

Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management.
Facilitate security and risk workshops with Authority departments.
Produce clear reporting on vulnerabilities, risks, controls, and treatment activities.
Provide pragmatic remediation and risk management guidance.
Support secure design across technology platforms including cloud infrastructures.
Contribute to blogs and research within the business community.

Requirements

The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC and UK Cyber Security Council professional registration at either Chartered or Principal for Risk Management.

Active DV clearance required
Strong working knowledge of:
Security Assurance Coordinator or Delivery Team Security Lead roles
JSP440, JSP604/453 & JSP490
Working with system secure design
MOD/GDS Secure by Design Principles
Supplier Chain Assurance and Risks.
Security related legislation (e.g. GDPR, PCI DSS, ICO requirements).
Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8.
HMG, NPSA and NCSC security policies, standards and guidance.
Have experience building and implementing secure by design principals within the software development lifecycle (SDLC).
Threat Modelling - Kill Chain - Attack tree analysis.
Working understanding of:
Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups, Host based firewalls, Web Application Firewalls
Physical Network Infrastructure, Anti-Patterns, Network Firewalls, IDS/IPS, DMZs
AI use cases, secure configuration (ISO42001 knowledge preferable),
ITHC scoping and remediation action plans.
HLD and LLD reviews and analysis.
Working knowledge and experience of tooling relating to cloud security posture management offerings, cloud native security (AWS/Azure) and endpoint security.
Proficient in Public Key Infrastructure, Data at Rest/inTransit, Cryptography, Privileged User Access Management, Zero Trust, Cross Domain Solutions and Role-based Access Controls.
Thrives on tackling challenges with creative solutions, challenging the normal.