Digital Trust - Consultant

The Invent Digital Trust (DT) practice focuses on ensuring secure business outcomes for our clients, providing Cybersecurity advisory and transformation consulting in areas such as security strategy, risk management, human risk management, data and identity security, secure intelligent industry, Gen-AI risk, and security operations modernisation. Our security specialists enable clients to evaluate cyber risks, redesign Cybersecurity operating models, modernise digital identity capabilities, lead programmes to drive security culture change, and transform security and compliance regimes to make them efficient, effective, sustainable, and resilient.

For this role, we seek individuals with experience in Cybersecurity to embed security culture and practices. You will work across a range of experienced hire grades, exploring ambiguity with a business outcome mindset while applying business analysis, communications, and stakeholder engagement. You may serve as a subject-matter expert (SME) or manager of a workstream of consultants and client staff.

We are looking to grow our diverse team at the Consultant grade with those who have demonstrated expertise in one of the following domains:

• Security Assurance - Delivering robust security frameworks such as ISO 27001, NIST, and Cyber Essentials to clients.
• Generative AI - Enabling the secure design and adoption of Gen AI for business, IT and/or security functions in alignment with the evolving regulatory landscape (e.g. EU AI Act, GDPR, DPA 2018).
• Security Architecture - Improving the security posture of the Enterprise and/or applications through assessment, design or implementation of effective and secure architectural patterns that align with industry standards (e.g. CIS L1/2, NIST, ISO 27001, COBIT)., * Engage in projects that transform clients’ Cybersecurity and Architecture capabilities to reduce business and technology risk.
• Provide expertise in the strategic, organisational, and human aspects of Cybersecurity, including security strategy definition and influencing board-level stakeholders.
• Deliver insight for threat modelling, risk management, and security overlay approaches by conducting security maturity assessments.
• Translate technical domains into business value, tailoring solutions to maximise client benefits and enable quick wins.
• Influence senior stakeholders through engagement with clients in business, IT, and security.
• Collaborate with teams and stakeholders to deliver security strategy, governance, security testing, identity & access management (IAM), security architecture, privacy, and cyber data analytics., Capgemini is committed to Diversity & Inclusion, offering flexible working arrangements and supporting employee wellbeing. All UK employees are eligible to request flexible working arrangements. The company is a Disability Confident Employer (Level 2) and will offer interviews to disabled candidates who meet the minimum essential criteria for the role.

• Experience in one or more Cybersecurity domains (e.g. Security & Risk Management, Security Architecture, Asset Security, Security Engineering, Communications & Network Security, Identity & Access Management, Security Education and Awareness, Security Assessment & Testing, Security Operations, or Software Development Security).
• Desired experience: working with SOC teams, OT Security, Security Architecture, Security Op Model Transformation projects, and Cybersecurity Assessments.
• Familiarity with core Cybersecurity frameworks (e.g. NIST CSF, ISO 27001, CIS Critical Controls), regulations (e.g. NIS2), and financial regulations (e.g. DORA, FCA, Bank of England).
• Understanding of the future of Generative AI and its impact on cybersecurity.
• Relevant qualifications such as CompTIA Security+, AWS Cloud Practitioner, Azure Fundamentals, CISMP.
• Working background in an established consulting firm or industry with a consulting mindset.
• Proven ability to succeed in a matrixed organisation and enlist support from peers.
• Experience in proposition building and delivery.
• Cross-sector experience in core sectors such as Financial Services, Public Sector, Energy, Utilities & Chemicals, Consumer Products Retail Distribution, Manufacturing, Automotive & Life Sciences, Telco, Media & Technology.
• Excellent communication skills and confidence to influence senior stakeholders.
• Approx. 2 years of delivery experience in Cybersecurity projects.
• SC cleared (or above), or eligible.