Cyber Security Consultant

We are searching for a Cyber Incident Response Consultant who will play a vital role in designing and implementing a comprehensive Cyber Incident Response capability from the ground up. This role will work closely with the newly appointed Head of Cyber Security to assess current cyber reporting maturity, define decision-making structures, and ensure the organisation is fully prepared to respond effectively to cyber incidents.

The successful consultant will lead the creation of a fully documented Cyber Incident Response Plan, develop scenario-based playbooks for a range of cyber threats, and embed these processes across the business to ensure they are understood, adopted, and followed during real incidents.

Responsibilities

• Conduct a full review of existing cyber security documentation, reporting, and governance frameworks
• Work closely with the Head of Cyber Security to understand current controls, gaps, and organisational risk appetite
• Design and document a comprehensive Cyber Incident Response Plan from scratch
• Define clear roles, responsibilities, escalation paths, and decision-making authority during cyber incidents
• Identify and engage key stakeholders and executive decision-makers required during an incident
• Develop detailed, scenario-based incident response playbooks covering threats such as ransomware, DDoS, and phishing attacks
• Collaborate with the Communications function to agree and document an internal and external crisis communications strategy
• Produce communication templates for use during cyber incidents, including executive, staff, customer, and third-party messaging
• Lead the implementation of the Cyber Incident Response Plan across the organisation
• Ensure processes are embedded, understood, and adhered to through stakeholder engagement and enablement
• Provide executive-level summaries and recommendations to senior leadership
• Optionally define a roadmap for future improvements, testing, and tabletop exercises