Role Overview
Primary Responsibilities: Join Our Growing Security & Compliance Team We are seeking an experienced Compliance & Information Security Consultant to drive our security and compliance service offerings forward. You will work within the Information Security & Compliance team, supporting the operation, maintenance, and maturity of our information security programme for both DXR Cyber and our external-facing clients. The ideal candidate will have hands-on experience implementing and auditing ISO 27001, combined with knowledge of NIST Cybersecurity Framework and other compliance frameworks. You will combine technical expertise with strong stakeholder management and communication skills. Role Overview & Key Responsibilities Security & Compliance Delivery Ensure the protection of information assets and technologies across client engagements Conduct hands-on implementation and auditing of ISO 27001, ISO 27701, ISO 9001, NIST-CSF, and IASME Governance frameworks Perform internal audits for both DXR Cyber and external clients, documenting findings and recommendations Develop and maintain compliance documentation, policies, and procedures Support the achievement and maintenance of ISO certifications across the organisation Client & Stakeholder Engagement: Develop and leverage strong relationships with internal and external stakeholders Support the Sales team with engagement scoping, ensuring clients receive valued and tailored services Deliver security awareness training and be comfortable with public speaking and client presentations Manage Third Party Risk Management (TPRM), including vendor security assessments and programme reviews Communicate complex security concepts clearly to technical and non-technical audiences Programme Support: Contribute to the continuous improvement of DXR Cyber's information security programme Support the operation and maturity of our internal ISO 27001 ISMS Identify and escalate security risks and compliance gaps Contribute to incident response and security investigations where required Potential to act as a vCISO for client engagements Contribution to marketing activities such as pod casts and client events Comfortable presenting in public Essential Requirements & Experience Required Experience: Extensive Information Security Governance, Risk and Compliance (GRC) experience Hands-on InfoSec Operations experience Proven experience implementing and auditing ISO 27001 Proven experience contributing to a Business Management System (BMS) certified to ISO standards Good knowledge of Cyber Essentials Plus scheme Strong understanding of UK & EU General Data Protection Regulation (GDPR) and the Data Protection Act 2018 Ability to work autonomously and collaboratively within a team Excellent verbal and written communication skills Certifications (Preferred): ISO 27001 Lead Implementer or Internal Auditor ISO 9001 Implementor or Lead Auditor CISM or CISSP NIST CSF or equivalent cybersecurity framework knowledge Personal Competencies & Skills Excellent time, priority, and task management Strong interpersonal skills; ability to build relationships with clients and team members Ability to anticipate problems, resolve ambiguity, and take decisive action Proactive problem-solver with analytical mindset Self-motivated and able to manage multiple engagements Comfortable with public speaking and client presentations Willingness to travel to client sites when required Additional Requirements Eligibility for Security Clearance (UK-based) Valid UK Driving Licence Hybrid working arrangement with requirement to work from Head Office (Doncaster, with visits once or twice a month, depending on location) Why Join Us? This is an excellent opportunity within a stable, dedicated cybersecurity organisation. You will work with a talented team delivering high-quality security and compliance services to blue-chip clients across multiple sectors. We invest in your professional development and support relevant certifications. Benefits Competitive salary (commensurate with experience) Salary Sacrifice pension scheme Private Medical Insurance Buy/sell holiday scheme Birthday leave (paid) 33 days holiday (including bank holidays) Cycle-to-work scheme Employee Assistance Programme Government Childcare Scheme Professional development and training opportunities Flexible working arrangements
Senior Security Consultant in Doncaster employer: Xypher
DigitalXRAID is an exceptional employer that prioritises employee growth and development within the fast-paced cyber security industry. With a vibrant work culture that emphasises teamwork, customer satisfaction, and continuous improvement, employees enjoy a range of benefits including a generous holiday allowance, private medical insurance, and opportunities for career progression. Located in a dynamic environment, DigitalXRAID fosters a supportive atmosphere where every team member is encouraged to be their best self while having fun at work.
