Cyber Security Consultant

I’m working with a growing cyber security consultancy that’s looking to bring in an experienced Cyber Security Consultant to support a range of complex projects within highly regulated environments.

This is a great opportunity for someone who enjoys building trusted relationships with customers and helping them tackle complex security, risk and assurance challenges. You’ll work directly with customers, helping them understand and manage security risk, meet assurance requirements and improve their overall security posture.

The team is made up of experienced consultants who genuinely enjoy what they do. There’s a strong culture of collaboration, knowledge sharing and professional development, without the layers of bureaucracy often found in larger organisations. People are trusted to take ownership of their work, contribute ideas and play an active role in both client delivery and the continued growth of the business.

What You’ll Be Doing

• Providing cyber security, risk and assurance support across a variety of client engagements
• Producing security documentation, assessments and assurance evidence
• Identifying and communicating security risks to both technical and non-technical audiences
• Reviewing security controls and recommending practical, proportionate improvements
• Supporting governance, assurance and compliance activities
• Working closely with customers, project teams and suppliers throughout the project lifecycle
• Building trusted relationships and acting as a valued advisor to clients

• Experience working within Defence or other highly regulated environments
• Experience in Information Assurance, Security Assurance, Governance, Risk & Compliance, or Cyber Security Consulting
• Strong stakeholder engagement and communication skills
• Experience producing security documentation, assessments and assurance evidence
• Experience working with modern IT environments, with knowledge of areas such as cloud platforms, access management and network infrastructure
• Ability to assess and communicate risk in a clear and pragmatic way
• Experience with recognised frameworks and standards such as NIST, ISO 27001, CAF, GovAssure or Secure by Design
• Professional certifications such as CISSP, CISM, Lead Auditor
• Current SC or DV clearance