Cyber Security Risk Consultant - SC cleared
Location: Remote (Occasional UK travel)
Contract Type: Full-time, Permanent
Salary: £55,000 - £70,000 + Benefits
About the Role
The Cyber Security Consultant will support the organisation's security risk management capability through the identification, assessment, analysis, logging and ongoing monitoring of information and cyber security risks. The role is responsible for delivering effective control assurance, validating that security control objectives are met across people, process and technology, and support the business in making well-informed, risk-based decisions.
Working collaboratively with business, technology and delivery teams, the role provides independent challenge, expert advice and pragmatic guidance to ensure security risks are understood, managed and remediated in line with organisational risk appetite and recognised best practice frameworks (e.g. ISO 27001, NIST, CIS Controls).
Key Responsibilities
Deliver security risk identification, assessment, analysis and logging activities, ensuring risks are clearly articulated, consistently scored and recorded in approved Information Security Risk Management (ISRM) tools.
Perform control assurance activities to validate how control objectives are being met in practice, working closely with technical delivery teams to understand design and implementation.
Identify and document control gaps, assess residual risk, and clearly articulate outcomes within control and assurance artefacts.
Support the delivery, rollout and continuous improvement of Information Security Risk Management methodologies, including the discovery, review and transformation of historic risk assessments into an updated, consistent approach.
Manage allocated assignments end-to-end, ensuring all control, assurance and risk outputs are delivered accurately and in a timely manner.
Maintain oversight of risk remediation activities, tracking actions through to implementation and ensuring ongoing risk treatment and control effectiveness.
Provide advice, guidance and intelligent challenge on enterprise control alignment during reviews of solution designs, security documentation and architecture artefacts.
Lead and facilitate collaborative control and risk workshops with business and technical stakehold...
Cyber Security Risk Consultant in East Kilbride employer: Sanderson Government and Defence
As a Lead Network Engineer in Salisbury, you will join a dynamic team dedicated to maintaining and enhancing a critical network capability within a secure environment. Our company fosters a culture of collaboration and innovation, offering extensive opportunities for professional growth and development while prioritising diversity and inclusion. With a commitment to employee well-being and a supportive work atmosphere, we ensure that our team members thrive both personally and professionally.
Contact Details:
Sanderson Government and Defence Recruitment Team
