Cyber Security Consultant

Cyber Security Consultant

Salary: £60,000 – £85,000 (depending on experience) + £5,750 Car Allowance + 10% Bonus

Location: Southwest – Bristol/Cheltenham

Security Clearance Required: BPSS and security clearance (typically requires 10 years continuous UK address history, usually including no periods of 30 consecutive days or more spent outside of the UK, and declaration of being a British passport holder with no dual nationalism at the point of application)

About the Role

Join a fast-growing Cyber Practice community of industry-leading experts. We're looking for a cyber security generalist consultant with experience in solving complex cyber security problems utilizing your technical expertise and learned experience.

As a cyber generalist, we expect you to demonstrate advanced skills and a high level of expertise across multiple facets of the cyber security domain. We don't expect any candidate to have experience in all areas, but you should align your work with responsibilities that include influencing policy, overseeing complex projects, and delivering high-quality security solutions.

Key Responsibilities

Security Governance and Compliance

• Develop, implement, and maintain security policies, standards, and guidelines to ensure organisational security objectives are met
• Ensure compliance with relevant legal and regulatory requirements
• Conduct regular security audits and assessments to ensure compliance with internal policies and external regulatory requirements
• Ensure adherence to industry best practices and frameworks, such as ISO 27001, NIST, and COBIT

Security Operations

• Provide best practice advice for SecOps/SOC teams
• Support the establishment and delivery of SecOps strategies
• Perform SOC Maturity Assessments via SOC-CMM framework
• Perform threat hunting and vulnerability management

Security Architecture

• Design and review security architectures for new and existing systems
• Provide security input during project design and implementation phases
• Ensure that security architecture aligns with business objectives and compliance requirements
• Define the Security Architecture roadmap
• Investigate and thoroughly understand applications and systems

Security Strategy

• Develop security practice strategy in alignment with corporate strategy
• Evolve current, retiring, and developing new services in conjunction with practice owners and aligned to corporate strategy
• Work with business development as the "voice of the customer"
• Work with suppliers to maintain relationships and develop new services
• Monitor emerging trends

Consultancy and Advice

• Provide expert advice on security best practices to clients
• Assist clients in developing and enhancing their security posture
• Deliver security awareness training and workshops

Essential Skills and Knowledge

This is a generalist role, but key skills we're looking for include:

• Proven experience in a cyber security role, with a focus on consultancy
• Comprehensive understanding of security principles, techniques, and technologies
• Experience with security frameworks and standards (e.g., ISO 27001, NIST, GDPR, CAF)
• Knowledge of Incident response and management frameworks such as NCSC, NIST, and CREST
• Experience performing maturity assessments and utilizing their outcomes to drive security strategy
• Strong analytical and problem-solving skills
• Excellent communication and interpersonal skills, with the ability to convey complex security concepts to non-technical stakeholders
• Proficiency in security tools and technologies, such as SIEM, IDS/IPS, and vulnerability scanners
• Autonomy: Works under broad direction. Work is often self-initiated
• Influence: Influences organisation, customers, suppliers, partners, and peers on the contribution of own specialism. Builds appropriate and effective business relationships
• Complexity: Performs an extensive range and variety of complex technical and professional work activities
• Business Skills: Advises on available standards, methods, tools, and applications relevant to own specialism. Analyses, designs, plans, executes, and evaluates work to time, cost, and quality targets

Desirable Qualifications

• Bachelor's degree in Cyber Security, Information Technology, or a related field
• Professional certifications (e.g., CISSP, CISM, CEH, CompTIA Network+, CompTIA Security+, SANS certifications)
• NCSC CCP Scheme

Whilst having experience in a consultancy is beneficial, demonstrable experience in working with clients/external partners in other settings will always be considered. We actively encourage and support employees to continually upskill and develop their skills and knowledge.

What's in it For You

In addition to a competitive salary package, you'll receive an extensive benefits package including:

• 25 days' vacation per year
• Private medical insurance
• 3 extra days leave per year for charitable work of your choice