> Markdown version of [/jobs/ext/2818009-cyber-security-consultant](https://www.wearedevelopers.com/jobs/ext/2818009-cyber-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Consultant

- **Company:** Xcede
- **Location:** London, UK
- **Contract:** Temporary contract
- **Skills:** Cloud Computing Security, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Identity and Access Management, Network Security, Software Vulnerability Management
- **Published:** September 10, 2026
- **Apply:** https://www.totaljobs.com/job/cybersecurity-consultant/xcede-job107961951

## About the Role

We're looking for someone with a strong understanding of cybersecurity principles, controls and security architecture, with experience working across several security domains such as:

 * Identity & Access Management
 * Endpoint Security
 * Vulnerability Management
 * Network Security
 * Detection & Response
 * Data Protection
 * Cloud Security
 * Security Monitoring & Logging

You should also have practical experience working with one or more recognised security frameworks, ideally including:

 * NIST Cybersecurity Framework (CSF)
 * NIST 800-53
 * CIS Critical Security Controls
 * CRI Profile

Crucially, you'll have experience mapping technologies, controls or processes to security frameworks, control objectives or desired security outcomes.
Key Skills

 * Cybersecurity / Information Security
 * Security Controls & Control Mapping
 * Security Capability Assessment
 * Cybersecurity Frameworks
 * NIST / CIS / CRI
 * Security Maturity Assessments
 * Security Architecture
 * GRC / Cyber Risk
 * Stakeholder Engagement
 * Workshop Facilitation
 * Strong analytical and investigative skills
 * Excellent written and verbal communication

Desirable

 * Financial services or other regulated industry experience.
 * Experience developing security capability or maturity models.
 * Experience working within large, complex enterprise environments.

If you have experience assessing enterprise security capabilities, mapping controls against frameworks and working with senior stakeholders, we'd be keen to hear from you.

## Description

We're currently supporting a major global financial services organisation with an exciting Cyber Security capability and controls mapping programme.
We're looking for an experienced Cyber Security Consultant / Security Architect / GRC Consultant who can assess the organisation's current security landscape, identify and catalogue security technologies, and map capabilities and controls against recognised cybersecurity frameworks.

You'll work across a complex enterprise environment, engaging with security, technology and business stakeholders to understand the organisation's current security capabilities and how its technology estate supports security outcomes.
Key responsibilities will include:

 * Identifying and cataloguing security tools and technologies across the organisation.
 * Investigating IT platforms that provide security outcomes, even where security isn't their primary purpose.
 * Building and maintaining a central inventory of security capabilities and supporting technologies.
 * Mapping security technologies, capabilities and controls against frameworks including NIST CSF, NIST 800-53, CIS Critical Security Controls and CRI Profile.
 * Establishing a baseline security capability model.
 * Benchmarking current security capabilities against recognised industry frameworks and standards.
 * Running workshops, interviews and discovery sessions with security and technology stakeholders.
 * Challenging assumptions and validating information from multiple sources.
 * Producing clear analysis, executive reporting and progress updates.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol)
- [A Computer Is All You Need](https://www.wearedevelopers.com/videos/100142-a-computer-is-all-you-need)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Demystifying application networking in the cloud](https://www.wearedevelopers.com/videos/675-demystifying-application-networking-in-the-cloud)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)