Senior Security Consultant

Join Our Growing Security & Compliance Team, We are seeking an experienced Compliance & Information Security Consultant to drive our security and compliance service offerings forward. You will work within the Information Security & Compliance team, supporting the operation, maintenance, and maturity of our information security programme for both DXR Cyber and our external-facing clients., * Ensure the protection of information assets and technologies across client engagements

• Conduct hands-on implementation and auditing of ISO 27001, ISO 27701, ISO 9001, NIST-CSF, and IASME Governance frameworks
• Perform internal audits for both DXR Cyber and external clients, documenting findings and recommendations
• Develop and maintain compliance documentation, policies, and procedures
• Support the achievement and maintenance of ISO certifications across the organisation
• Client & Stakeholder Engagement:
• Develop and leverage strong relationships with internal and external stakeholders
• Support the Sales team with engagement scoping, ensuring clients receive valued and tailored services
• Deliver security awareness training and be comfortable with public speaking and client presentations
• Manage Third Party Risk Management (TPRM), including vendor security assessments and programme reviews
• Communicate complex security concepts clearly to technical and non-technical audiences
• Programme Support:
• Contribute to the continuous improvement of DXR Cyber’s information security programme
• Support the operation and maturity of our internal ISO 27001 ISMS
• Identify and escalate security risks and compliance gaps
• Contribute to incident response and security investigations where required
• Potential to act as a vCISO for client engagements
• Contribution to marketing activities such as pod casts and client events
• Comfortable presenting in public, This is an excellent opportunity within a stable, dedicated cybersecurity organisation. You will work with a talented team delivering high-quality security and compliance services to blue-chip clients across multiple sectors. We invest in your professional development and support relevant certifications.

The ideal candidate will have hands-on experience implementing and auditing ISO 27001, combined with knowledge of NIST Cybersecurity Framework and other compliance frameworks. You will combine technical expertise with strong stakeholder management and communication skills., * Extensive Information Security Governance, Risk and Compliance (GRC) experience

• Hands-on InfoSec Operations experience
• Proven experience implementing and auditing ISO 27001
• Proven experience contributing to a Business Management System (BMS) certified to ISO standards
• Good knowledge of Cyber Essentials Plus scheme
• Strong understanding of UK & EU General Data Protection Regulation (GDPR) and the Data Protection Act 2018
• Ability to work autonomously and collaboratively within a team
• Excellent verbal and written communication skills
• Certifications (Preferred):
• ISO 27001 Lead Implementer or Internal Auditor
• ISO 9001 Implementor or Lead Auditor
• CISM or CISSP
• NIST CSF or equivalent cybersecurity framework knowledge

Personal Competencies & Skills

• Excellent time, priority, and task management
• Strong interpersonal skills; ability to build relationships with clients and team members
• Ability to anticipate problems, resolve ambiguity, and take decisive action
• Proactive problem-solver with analytical mindset
• Self-motivated and able to manage multiple engagements
• Comfortable with public speaking and client presentations
• Willingness to travel to client sites when required

Additional Requirements

• Eligibility for Security Clearance (UK-based)
• Valid UK Driving Licence
• Hybrid working arrangement with requirement to work from Head Office (Doncaster, with visits once or twice a month, depending on location)

• Competitive salary (commensurate with experience)
• Salary Sacrifice pension scheme
• Private Medical Insurance
• Buy/sell holiday scheme
• Birthday leave (paid)
• 33 days holiday (including bank holidays)
• Cycle-to-work scheme
• Employee Assistance Programme
• Government Childcare Scheme
• Professional development and training opportunities
• Flexible working arrangements