Cyber Security Consultant - Associate Network

Location: UK / Remote / Hybrid depending on client requirements

Engagement: Freelance, contract, fixed-price or outcome-based assignments

Duration: Short to medium-term engagements

Goaco is expanding our trusted network of Cyber Security Consultant Associates to support a growing range of client engagements across the public sector and regulated industries. We are looking to build relationships with experienced independent consultants who can work with us on defined deliverables, projects and specialist assignments. Engagements may range from short advisory pieces through to assessments, implementation programmes and ongoing monitoring.

Assignments may include:

• Cyber security strategy and advisory
• Security assessments, audits and gap analysis
• ISO 27001 readiness, implementation and continuous improvement
• Cyber Essentials and Cyber Essentials Plus support
• Security architecture and secure-by-design advisory
• Cloud security across Microsoft Azure, Google Cloud or other environments
• Identity and access management
• Risk management and security governance
• Vulnerability management and remediation
• Security monitoring and operational security
• Policy, process and control development
• Compliance and assurance within regulated environments
• Security improvement and remediation programmes
• Client-side cyber security leadership and specialist consultancy

What we are looking for:

• Strong practical cyber security consulting experience
• Experience delivering within government, public sector or regulated industries
• The ability to take ownership of a defined outcome or deliverable
• Strong written communication and documentation skills
• Client-facing capability when an engagement requires direct stakeholder interaction
• Experience working with technical teams, senior stakeholders and governance functions
• The ability to work independently while integrating effectively with Goaco delivery teams

Relevant certifications are advantageous and may include:

• ISO 27001 Lead Implementer / Lead Auditor
• IASME certifications
• Cyber Essentials / Cyber Essentials Plus
• Microsoft Security certifications
• Microsoft Azure certifications
• Google Cloud security certifications
• AWS security certifications
• CISSP
• CISM
• CCSP
• CompTIA Security+
• CREST or equivalent specialist security qualifications

We are interested in practical capability rather than certification alone. Consultants should be able to demonstrate where they have applied their knowledge to real client environments and delivered measurable outcomes.

How engagements work:

This is not necessarily a permanent position. We are growing a trusted associate network that Goaco can engage as requirements arise. Assignments may be structured around:

• Daily or weekly contract engagements
• Fixed-price pieces of work
• Defined deliverables
• Outcome-based engagements
• Short-term specialist support
• Medium-term client programmes

Some assignments may be delivered remotely while others may require client-facing or on-site involvement depending on the project.

If you are an experienced Cyber Security Consultant operating independently or looking to complement your existing consultancy work with additional projects, we would be interested in hearing from you. Please apply with your CV and include your areas of specialism, relevant certifications, current availability, preferred engagement model and indicative day rate or fixed-price approach.

About Goaco:

Goaco delivers digital transformation, cyber security, cloud, data and technology services across public sector and enterprise environments. We work with organisations where security, assurance and dependable delivery are central to successful transformation. We are building a high-quality associate community that allows us to bring the right specialist capability into each engagement when it is needed.