Cyber Security Consultant

Join a fast-growing Cyber Practice community of industry-leading experts. We’re looking for a cyber security generalist consultant with experience in solving complex cyber security problems utilizing your technical expertise and learned experience., Security Governance and Compliance

• Develop, implement, and maintain security policies, standards, and guidelines to ensure organisational security objectives are met
• Ensure compliance with relevant legal and regulatory requirements
• Conduct regular security audits and assessments to ensure compliance with internal policies and external regulatory requirements
• Ensure adherence to industry best practices and frameworks, such as ISO 27001, NIST, and COBIT

Security Operations

• Provide best practice advice for SecOps/SOC teams
• Support the establishment and delivery of SecOps strategies
• Perform SOC Maturity Assessments via SOC-CMM framework
• Perform threat hunting and vulnerability management

Security Architecture

• Design and review security architectures for new and existing systems
• Provide security input during project design and implementation phases
• Ensure that security architecture aligns with business objectives and compliance requirements
• Define the Security Architecture roadmap
• Investigate and thoroughly understand applications and systems

Security Strategy

• Develop security practice strategy in alignment with corporate strategy
• Evolve current, retiring, and developing new services in conjunction with practice owners and aligned to corporate strategy
• Work with business development as the “voice of the customer”
• Work with suppliers to maintain relationships and develop new services
• Monitor emerging trends

Consultancy and Advice

• Provide expert advice on security best practices to clients
• Assist clients in developing and enhancing their security posture
• Deliver security awareness training and workshops

As a cyber generalist, we expect you to demonstrate advanced skills and a high level of expertise across multiple facets of the cyber security domain. We don’t expect any candidate to have experience in all areas, but you should align your work with responsibilities that include influencing policy, overseeing complex projects, and delivering high-quality security solutions., * Proven experience in a cyber security role, with a focus on consultancy

• Comprehensive understanding of security principles, techniques, and technologies
• Experience with security frameworks and standards (e.g., ISO 27001, NIST, GDPR, CAF)
• Knowledge of Incident response and management frameworks such as NCSC, NIST, and CREST
• Experience performing maturity assessments and utilizing their outcomes to drive security strategy
• Strong analytical and problem-solving skills
• Excellent communication and interpersonal skills, with the ability to convey complex security concepts to non-technical stakeholders
• Proficiency in security tools and technologies, such as SIEM, IDS/IPS, and vulnerability scanners
• Autonomy: Works under broad direction. Work is often self-initiated
• Influence: Influences organisation, customers, suppliers, partners, and peers on the contribution of own specialism. Builds appropriate and effective business relationships
• Complexity: Performs an extensive range and variety of complex technical and professional work activities
• Business Skills: Advises on available standards, methods, tools, and applications relevant to own specialism. Analyses, designs, plans, executes, and evaluates work to time, cost, and quality targets, * Bachelor’s degree in Cyber Security, Information Technology, or a related field
• Professional certifications (e.g., CISSP, CISM, CEH, CompTIA Network+, CompTIA Security+, SANS certifications)
• NCSC CCP Scheme

In addition to a competitive salary package, you’ll receive an extensive benefits package including:

• 25 days’ vacation per year
• Private medical insurance
• 3 extra days leave per year for charitable work of your choice