> Markdown version of [/jobs/ext/3163064-iso-27001-consultant-auditor-defence-cyber-certification](https://www.wearedevelopers.com/jobs/ext/3163064-iso-27001-consultant-auditor-defence-cyber-certification). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # ISO 27001 Consultant & Auditor - Defence Cyber Certification - **Company:** Key Sigma Ltd - **Location:** Cheltenham, UK (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Security Management System - **Published:** September 9, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=3044a53bb2ab4f7a ## About the Role Instead, we are looking for someone with a strong foundation in ISO 27001, at least three years' relevant experience in cyber security consultancy, implementation and/or auditing, and the professional judgement and enthusiasm to develop into a specialist DCC consultant and assessor., We are looking for an experienced cyber security professional with a strong background in ISO 27001 consultancy, implementation or auditing. You may currently work as an: · ISO 27001 Consultant · ISO 27001 Lead Auditor · ISO 27001 Lead Implementer · Cyber Security Consultant · GRC Consultant · Information Security Consultant · Cyber Assurance Consultant What matters is that you already have a strong professional foundation that can be developed into DCC expertise. Essential Experience and Qualifications You will need: · An ISO 27001 Lead Auditor or ISO 27001 Lead Implementer qualification. · At least three years' relevant professional experience in cyber security consultancy, implementation, audit, assurance or a closely related discipline. · The ability to identify gaps and turn findings into practical and proportionate actions. · Strong consultancy and client-facing skills. · Strong written communication and report-writing skills. · A genuine interest in developing specialist knowledge of Defence Cyber Certification and defence cyber assurance. You may have spent more of your career implementing ISO 27001, or you may have a stronger auditing background. We are interested in people who have the underlying knowledge, practical experience and professional capability to develop across both consultancy and assurance work. Desirable Experience The following would be useful but is not essential: · Experience working within the defence or defence supply-chain sector. · Experience supporting organisations through external certification. · Broader GRC, cyber assurance or compliance experience. · Additional professional qualifications such as CISSP, CISM, CISMP or similar., * ISO 27001, ISMS or GRC: 3 years (required) Licence/Certification: * ISO 27001 Lead Implementer/Auditor certification (preferred) ## Description This is a combined consultancy and assurance role. You will work with clients that need help understanding and implementing the requirements of Defence Cyber Certification, as well as developing the capability to undertake independent DCC assessments once you have completed the required training and qualification. Your work will therefore span two complementary areas: DCC Implementation Consultancy You will help organisations understand what is required of them and put appropriate controls, processes and evidence in place. This will include: · DCC gap assessments and readiness reviews. · Identifying gaps and developing proportionate remediation plans. · Supporting implementation of controls, policies and evidence. · Supporting risk, governance and resilience activities. · Running client workshops and preparing organisations for assessment. DCC Audit and Certification Following DCC assessor training and qualification, you will also undertake independent assessments, including: · Planning and delivering DCC assessments. · Reviewing scope, controls and supporting evidence. · Assessing compliance and documenting findings. · Producing clear assessment reports. · Managing assessments impartially and supporting certification decisions., KEYSIGMA is a Disability Confident Employer and is committed to attracting, recruiting and retaining disabled people and those with long-term health conditions. We welcome applications from disabled candidates, neurodivergent people and those with long-term health conditions, and are committed to providing an accessible and inclusive recruitment process. Our recruitment process may include an initial CV review, interview, and role-related discussion or assessment. We will consider reasonable adjustments at each stage, which may include alternative formats, additional time, adjusted interview arrangements, or other changes to help candidates demonstrate their suitability for the role. If you would like to be considered under the Disability Confident interview commitment, please let us know when applying and ensure your CV or covering note clearly demonstrates how you meet the minimum essential criteria for the role. If you require any other adjustments during the recruitment process, please let us know and we will work with you to understand what support would enable you to participate fully. Armed Forces Community KEYSIGMA is a signatory to the Armed Forces Covenant and has been recognised with a Bronze Award under the Defence Employer Recognition Scheme. We actively welcome applications from members of the Armed Forces community, including: · Service leavers and veterans · Reservists · Military spouses and partners · Members of the wider Armed Forces community We recognise the significant transferable skills that can come from military service, including leadership, risk management, assurance, problem solving, technical expertise and the ability to operate effectively in challenging environments. A previous military or defence background is not required for this position. Working Arrangements This is a hybrid role based from our Cheltenham office. You will have flexibility to work remotely but must be able to attend the office when required and travel to client locations where an assignment requires on-site work. Security Screening Due to the nature of our work within the defence sector, the successful candidate will be expected to attain and maintain a minimum of Security Check (SC) clearance. Applicants must therefore be willing and able to undergo the required UK security vetting. This may include checks relating to identity, employment history, residency, criminal record, financial circumstances and other relevant background information. Appointment and continued suitability for certain duties may be dependent on obtaining and maintaining the required level of security clearance.