Managing Security Consultant – Cyber Business Resilience and Recovery in England

Managing Security Consultant – Cyber Business Resilience and Recovery in England

England Full-Time 63000 - 77000 £ / year (est.) Hybrid
N

At a Glance

  • Tasks: Help organisations prepare for and recover from cyber incidents with tailored strategies.
  • Company: Join NCC Group, a leader in cyber resilience and IT consulting.
  • Benefits: Enjoy competitive perks like pension schemes, life assurance, and community programmes.
  • Other info: Collaborative environment with opportunities for personal and professional growth.
  • Why this job: Make a real impact on digital security while working on high-stakes projects.
  • Qualifications: Experience in cyber resilience and disaster recovery is essential.

The predicted salary is between 63000 - 77000 £ per year.

Join to apply for the Managing Security Consultant – Cyber Business Resilience and Recovery role at NCC Group. Applications will close on Sunday, 4 January 2026. Our review process will commence on Friday, 2 January 2026. We appreciate your interest and look forward to connecting with you soon.

Why this role?

Do you thrive on helping organisations prepare for, withstand, and recover from cyber incidents? At NCC Group, you’ll be part of a team that bridges the gap between cyber operations and business continuity — ensuring our clients can respond confidently when disruption strikes. You’ll work across incident response readiness, cyber recovery planning, crisis management exercises, and resilience assessments that protect real‑world business outcomes. It’s meaningful, high‑impact work that blends strategy, governance, and hands‑on resilience engineering.

What you’ll do:

  • Build cyber resilience strategies: Design and deliver tailored cyber resilience and recovery frameworks that integrate business continuity, IT disaster recovery, and incident response.
  • Assess and improve readiness: Conduct cyber resilience maturity assessments and tabletop exercises; identify and prioritise gaps in recovery capabilities.
  • Design recovery playbooks: Create actionable recovery and communication plans aligned with NIST, ISO 22301, and industry best practice.
  • Test and validate: Lead scenario‑based simulations and recovery testing to validate processes, people, and technology readiness.
  • Integrate with security operations: Collaborate with SOC and IR teams to align resilience and recovery capabilities with detection, containment, and response functions.
  • Engage stakeholders: Translate technical findings into clear, business‑relevant recommendations; present outcomes to executives and boards.
  • Advise on resilience architecture: Support the design of resilient infrastructure, backup strategies, and cloud recovery configurations.
  • Mentor and contribute: Coach junior consultants and share lessons learned through internal knowledge sessions and reusable playbook templates.

What you’ll bring:

  • Strong experience in cyber resilience, business continuity, and disaster recovery consulting, ideally within complex enterprise environments.
  • Practical understanding of incident response, crisis management, and cyber recovery operations.
  • Familiarity with frameworks and standards such as ISO 22301, NIST CSF, NIST SP 800‑34, and BS 65000.
  • Proven ability to engage at all levels — from technical recovery teams to C‑suite executives.
  • Experience running or facilitating tabletop exercises, war‑gaming sessions, or simulation testing.
  • Knowledge of resilience tooling (e.g., backup orchestration, DR automation, configuration baselining).
  • Strong written and verbal communication — able to produce concise reports and deliver persuasive presentations.

Nice‑to‑haves (not show‑stoppers):

  • Exposure to cloud resilience (Azure/AWS/GCP) and hybrid recovery architectures.
  • Experience with risk management frameworks (ISO 27005, FAIR).
  • Understanding of supply chain resilience and third‑party risk.
  • Certifications such as CBCI, ISO 22301 Lead Implementer/Auditor, CISSP, CISM, or CRISC.

Why Join Us?

At NCC Group, your mission is to help create a more secure digital future. You’ll work on high‑impact projects, cutting‑edge research, and real‑world security challenges. We partner with some of the world’s most innovative companies and we want you to be part of that journey. You’ll join a global team of specialists who thrive on solving complex problems. We invest in your development and well‑being, and we’ve built an environment where you can grow, professionally, personally, and technically.

So, ready to join us?

What’s In It For You?

We balance high performance with world‑class well‑being benefits, including:

  • Pension, life assurance, share save scheme
  • Community & volunteering programmes
  • Cycle to work scheme

If this sounds like the right fit, we’d love to hear from you. Click apply to submit your CV and cover letter.

Your Application:

We review every application. If your profile matches, we’ll be in touch. If not, don’t be discouraged, we may keep your details for future roles. If you prefer we don’t, just email us to opt out.

Need reasonable adjustments? Let us know at any point during the process.

Note: This role requires pre‑employment background checks (BS7858 screening) due to the nature of the work.

Seniority level: Mid‑Senior level

Employment type: Full‑time

Job function: Information Technology, Strategy/Planning, and Training

Industries: IT Services and IT Consulting

Managing Security Consultant – Cyber Business Resilience and Recovery in England employer: NCC Group plc

NCC is an exceptional employer, offering a dynamic work culture that prioritises flexibility and employee well-being in the heart of London. With generous holiday allowances, robust financial benefits, and a commitment to community engagement, employees are empowered to grow both personally and professionally while contributing to cutting-edge cyber threat intelligence initiatives.

N

Contact Details:

NCC Group plc Recruitment Team

StudySmarter Expert Advice🤫

We think this is how you could land Managing Security Consultant – Cyber Business Resilience and Recovery in England

✨Get Involved in the Cybersecurity Community

Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!

✨Show Off Your Skills with Capture the Flag Competitions

Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including NCC Group plc, love seeing candidates who actively engage in these challenges.

✨Tailor Your Online Presence

Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!

✨Apply Directly Through NCC Group plc

Don’t forget to head straight to our website and check out any openings for cybersecurity roles at NCC Group plc. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.

We think you need these skills to ace Managing Security Consultant – Cyber Business Resilience and Recovery in England

Cyber Resilience
Business Continuity
Disaster Recovery Consulting
Incident Response
Crisis Management
Cyber Recovery Operations
ISO 22301

Some tips for your application 🫡

Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!

Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!

Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at NCC Group plc insight into your practical problem-solving abilities and makes your application memorable.

Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to NCC Group plc that you’re committed to staying ahead in the game.

How to prepare for a job interview at NCC Group plc

✨Sharpen Your Technical Skills

For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.

✨Prepare for Scenario-Based Questions

Expect the interviewers at NCC Group plc to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.

✨Highlight Your Certifications

Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at NCC Group plc.

✨Show Your Passion for Cybersecurity

Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.