> Markdown version of [/jobs/ext/4095837-senior-security-consultant](https://www.wearedevelopers.com/jobs/ext/4095837-senior-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Security Consultant - **Company:** Xypher - **Location:** Doncaster, United Kingdom - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Podcasting, Cyber Security, Information Security Management System, National Institute of Standards and Technology Cybersecurity Framework - **Published:** October 13, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=c6739d4968ca37ce ## About the Role The ideal candidate will have hands-on experience implementing and auditing ISO 27001, combined with knowledge of NIST Cybersecurity Framework and other compliance frameworks. You will combine technical expertise with strong stakeholder management and communication skills., * Extensive Information Security Governance, Risk and Compliance (GRC) experience * Hands-on InfoSec Operations experience * Proven experience implementing and auditing ISO 27001 * Proven experience contributing to a Business Management System (BMS) certified to ISO standards * Good knowledge of Cyber Essentials Plus scheme * Strong understanding of UK & EU General Data Protection Regulation (GDPR) and the Data Protection Act 2018 * Ability to work autonomously and collaboratively within a team * Excellent verbal and written communication skills * Certifications (Preferred): * ISO 27001 Lead Implementer or Internal Auditor * ISO 9001 Implementor or Lead Auditor * CISM or CISSP * NIST CSF or equivalent cybersecurity framework knowledge Personal Competencies & Skills * Excellent time, priority, and task management * Strong interpersonal skills; ability to build relationships with clients and team members * Ability to anticipate problems, resolve ambiguity, and take decisive action * Proactive problem-solver with analytical mindset * Self-motivated and able to manage multiple engagements * Comfortable with public speaking and client presentations * Willingness to travel to client sites when required Additional Requirements * Eligibility for Security Clearance (UK-based) * Valid UK Driving Licence * Hybrid working arrangement with requirement to work from Head Office (Doncaster, with visits once or twice a month, depending on location) ## Description Join Our Growing Security & Compliance Team, We are seeking an experienced Compliance & Information Security Consultant to drive our security and compliance service offerings forward. You will work within the Information Security & Compliance team, supporting the operation, maintenance, and maturity of our information security programme for both DXR Cyber and our external-facing clients., * Ensure the protection of information assets and technologies across client engagements * Conduct hands-on implementation and auditing of ISO 27001, ISO 27701, ISO 9001, NIST-CSF, and IASME Governance frameworks * Perform internal audits for both DXR Cyber and external clients, documenting findings and recommendations * Develop and maintain compliance documentation, policies, and procedures * Support the achievement and maintenance of ISO certifications across the organisation * Client & Stakeholder Engagement: * Develop and leverage strong relationships with internal and external stakeholders * Support the Sales team with engagement scoping, ensuring clients receive valued and tailored services * Deliver security awareness training and be comfortable with public speaking and client presentations * Manage Third Party Risk Management (TPRM), including vendor security assessments and programme reviews * Communicate complex security concepts clearly to technical and non-technical audiences * Programme Support: * Contribute to the continuous improvement of DXR Cyber's information security programme * Support the operation and maturity of our internal ISO 27001 ISMS * Identify and escalate security risks and compliance gaps * Contribute to incident response and security investigations where required * Potential to act as a vCISO for client engagements * Contribution to marketing activities such as pod casts and client events * Comfortable presenting in public, This is an excellent opportunity within a stable, dedicated cybersecurity organisation. You will work with a talented team delivering high-quality security and compliance services to blue-chip clients across multiple sectors. We invest in your professional development and support relevant certifications.