> Markdown version of [/jobs/ext/3100793-cyber-security-governance-consultant](https://www.wearedevelopers.com/jobs/ext/3100793-cyber-security-governance-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Governance Consultant

- **Company:** Nortal
- **Location:** UK
- **Experience:** Expert
- **Salary:** £63,427.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, CIS Benchmarks
- **Published:** September 27, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5899931371

## About the Role

* A proven track record in cybersecurity risk and governance transformations in complex or government/defence environments.
 * Deep knowledge of cybersecurity frameworks (e.g., NIST, ISO 27001, CIS Controls) and regulatory obligations.
 * Experience designing and implementing cybersecurity governance structures from the ground up.
 * Strong analytical and strategic thinking skills to assess risks and influence operational change.
 * Excellent communication and stakeholder engagement skills
 * Demonstrated ability to manage concurrent projects and priorities under tight deadlines.
 * A passion for innovation and continuous learning in cybersecurity., * Professional certifications: CISSP, CISM, CRISC (or equivalent experience).
 * Minimum 5 years' experience in cybersecurity transformation, ideally in a defence or maritime context.
 * UK Government security clearance (DV/SC)

## Description

As a trusted advisor in a multidisciplinary environment, you will work across functions to embed secure-by-design principles, assess cyber workforce requirements, and lead the development of governance policies and controls.

 * Design and implement effective cyber governance structures and risk management processes.
 * Develop organisational models that strengthen governance and streamline cybersecurity operations.
 * Collaborate with multi-disciplinary teams to embed cybersecurity into governance frameworks, considering people, process, and technology.
 * Propose workforce structures and SQEP (Suitably Qualified and Experienced Personnel) requirements for steady-state operations.
 * Define, monitor, and report metrics to measure the effectiveness of cyber governance.
 * Lead continuous improvement initiatives and mentor key personnel within governance functions.
 * Ensure all policies, procedures, and controls are compliant with regulatory standards (NCSC, ISO 27001, NIST, CIS Controls).
 * Identify, assess, and manage risks to project or organisational goals.
 * Build alignment with executive stakeholders, board members, and external partners to ensure accountability and clear decision-making processes.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [OPA for the cloud natives](https://www.wearedevelopers.com/videos/713-opa-for-the-cloud-natives)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)