Cyber Essentials Plus Consultant

A major organisation operating within a complex, business-critical environment is seeking an experienced Cyber Essentials Plus Consultant to lead a significant remediation and certification programme. Following a recent review of the organisation's Cyber Essentials Plus readiness, gaps have been identified that must be addressed before certification is achieved. The successful contractor will take ownership of the programme, driving remediation activity across technology teams and lead the organisation through to successful certification. This is a delivery-focused role requiring an individual who understands the Cyber Essentials and Cyber Essentials Plus process from end to end and can move beyond advisory recommendations to deliver tangible improvements.

You will be responsible for assessing the current position, identifying gaps against Cyber Essentials Plus requirements and leading the remediation activity required to achieve certification. Working closely with technical and operational stakeholders, you will help improve security controls, challenge existing approaches and ensure regulatory and security requirements are embedded across the organisation.

• Leading Cyber Essentials Plus readiness and remediation activities
• Taking ownership of the certification programme from planning through to assessment
• Conducting gap analysis against Cyber Essentials Plus requirements
• Developing and driving remediation plans across infrastructure, endpoint and operational teams
• Reviewing security controls, policies and technical configurations
• Advising on security frameworks, standards and best practice
• Managing stakeholders across technology, security and operational functions
• Tracking risks, dependencies and programme progress through to completion

What We're Looking For:

• Proven experience delivering Cyber Essentials or Cyber Essentials Plus certification programmes
• Strong understanding of Cyber Essentials Plus requirements and assessment methodology
• Experience leading remediation initiatives and addressing audit or certification findings
• Good understanding of wider security frameworks and controls
• Technically minded with the ability to engage effectively with infrastructure, network, cloud and endpoint teams
• Strong stakeholder management and communication skills
• Comfortable operating in environments where security maturity is still developing

Contract Details:

• Outside IR35
• Initial 6-month contract
• £350 - £450 per day
• Hybrid working
• North West England
• One-stage interview process
• Immediate start available

This role will suit a Cyber Security Consultant, Cyber Essentials Consultant, Information Security Consultant or GRC professional who enjoys hands-on delivery and can drive change within a complex operational environment. If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.