Cyber and Information Assurance Security Consultants

• Deliver expert security advice for BAU, technical refresh, and new project initiatives.
• Implement and improve governance models aligned with client business needs.
• Identify cyber risks and propose risk-based mitigation strategies.
• Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture.
• Assess technical security controls across networks, systems, and infrastructure - including vulnerability management, security architecture reviews, and technical risk assessments - to inform wider assurance judgements.
• Develop, refine, or review security policies and procedures to align with corporate and regulatory standards.
• Build strong relationships with clients and internal teams to enhance the value of Cyber Security & Information Assurance services delivered.

We’re looking for people who can make a real impact. You should have:

• Proven experience in Cyber Security & Information Assurance within Defence or UK Government environments.
• Strong understanding of risk management frameworks
• Working technical knowledge across areas such as network security, secure system architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure security controls.

• Familiarity with government and defence security standards such as:

• HMG/NCSC IA Policies and Guidelines
• JSP440 and other MoD IA standards
• Cyber Essentials
• NIST, NIS-D

You will ideally hold CISM / CISSP or similar higher level recognised and current Information Security or Assurance certification

Excellent stakeholder communication skills - you can clearly explain complex security concepts to both technical and non-technical audiences.

Security Clearance Due to the highly sensitive nature of the work, all applicants must hold valid eDV clearance.