Cyber Security Risk Consultant

As a Cyber Security Risk Consultant, you will join our Information Assurance and Cyber Risk team that provides expert risk assessments, audits, analysis and advice to our clients., * Creating business risk models and associated material, in support of operational cyber security and business planning activity across a range of different domains or sectors against recognised standards (e.g. ISO27001, NCSC CAF, NIS Directive, UK GovAssure)

• Identify mitigations for cyber risk in a given business or operational scenario and threat environment
• Lead and deliver cyber security audits, risk reviews and control assessments
• Identify control weaknesses, assess risks, and present actionable recommendations
• Produce high-quality risk reports, advisory outputs and client presentations

• Minimum of 2-3 years of experience in security vulnerability, risk, audit & compliance
• Proven track record of Cyber Security compliance audits, managing regulatory engagements and working with external and internal regulatory bodies
• Strong understanding of Cyber security principles, cloud security, and third-party risk management; Ability to analyse complex IT risks and provide strategic risk mitigation recommendations
• Ability to challenge, influence, and collaborate at all levels, including senior leadership
• Data driven with eye for the detail
• Eligibility to obtain UK security clearance (requires 5 years continuous UK address history), * ISO 27001 Lead Auditor or Implementer
• ISACA Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Principle or above in UKCSC Specialism ‘Governance & Risk Management’ or ‘Audit & Assurance’