Role: Cyber and Information Assurance Consultant Mid, Senior & Principal Levels Location: Nottingham / Remote-first Working Arrangement: Remote-first, with travel to Nottingham and customer sites as required Salary: £65,000 £120,000 Are you a cyber security or information assurance professional who enjoys working with customers, getting into complex problems and turning security risks into practical solutions? We re looking for Cyber and Information Assurance Consultants across Mid, Senior and Principal levels to join a growing team working on complex, high-assurance environments across defence, government and critical infrastructure. This is a consultancy-focused role, so you won t be sitting in a purely internal security position. You ll work directly with customers, technical teams and senior stakeholders to assess risk, understand threats and vulnerabilities, and provide clear recommendations on how security can be improved. You ll work across areas including cyber risk assessments, information assurance, security governance and secure-by-design. Depending on your level and experience, you could be reviewing solution designs, developing security cases, supporting accreditation and assurance activity, maintaining risk registers or helping shape security requirements across major programmes. You ll also work closely with architects, engineers, project teams, suppliers and customer security teams. A big part of the role will be taking technical evidence and security requirements and explaining what they actually mean from a risk and business perspective. You ll ideally have professional experience in cyber security, information assurance, risk management, systems engineering or a related discipline, alongside experience contributing to security assessment or assurance work. You ll need to be comfortable producing clear security documentation and communicating with both technical and non-technical audiences. Knowledge of areas such as cyber risk management, security controls, threat and vulnerability assessment, security governance and risk acceptance is important. Experience with frameworks such as ISO 27001, ISO 27005, the NCSC Cyber Assessment Framework, NIST or MOD security standards would be beneficial. Experience within defence, government, critical infrastructure or another high-assurance environment would be particularly relevant. Experience with cloud security assurance, security architecture reviews, accreditation or secure information exchange would also be useful. The level you join at will depend on your experience, with opportunities available from Mid-level through to Principal. There is a clear progression route into senior consultancy, security architecture, cyber risk leadership and information assurance leadership, with support towards professional qualifications such as CISSP, CISM, CRISC and ISO 27001. The role is remote-first, although you ll need to be comfortable travelling to the Nottingham office and customer sites when required. Regular UK travel may form part of the role, with occasional international travel possible. If you re looking for a role where you can work on genuinely complex security challenges, have direct customer exposure and continue developing your career across cyber security and assurance, please apply now or get in touch to find out more. We welcome diverse applicants and are dedicated to treating all applicants with dignity and respect, regardless of background.
Aug 23, 2026
Full time
Role: Cyber and Information Assurance Consultant Mid, Senior & Principal Levels Location: Nottingham / Remote-first Working Arrangement: Remote-first, with travel to Nottingham and customer sites as required Salary: £65,000 £120,000 Are you a cyber security or information assurance professional who enjoys working with customers, getting into complex problems and turning security risks into practical solutions? We re looking for Cyber and Information Assurance Consultants across Mid, Senior and Principal levels to join a growing team working on complex, high-assurance environments across defence, government and critical infrastructure. This is a consultancy-focused role, so you won t be sitting in a purely internal security position. You ll work directly with customers, technical teams and senior stakeholders to assess risk, understand threats and vulnerabilities, and provide clear recommendations on how security can be improved. You ll work across areas including cyber risk assessments, information assurance, security governance and secure-by-design. Depending on your level and experience, you could be reviewing solution designs, developing security cases, supporting accreditation and assurance activity, maintaining risk registers or helping shape security requirements across major programmes. You ll also work closely with architects, engineers, project teams, suppliers and customer security teams. A big part of the role will be taking technical evidence and security requirements and explaining what they actually mean from a risk and business perspective. You ll ideally have professional experience in cyber security, information assurance, risk management, systems engineering or a related discipline, alongside experience contributing to security assessment or assurance work. You ll need to be comfortable producing clear security documentation and communicating with both technical and non-technical audiences. Knowledge of areas such as cyber risk management, security controls, threat and vulnerability assessment, security governance and risk acceptance is important. Experience with frameworks such as ISO 27001, ISO 27005, the NCSC Cyber Assessment Framework, NIST or MOD security standards would be beneficial. Experience within defence, government, critical infrastructure or another high-assurance environment would be particularly relevant. Experience with cloud security assurance, security architecture reviews, accreditation or secure information exchange would also be useful. The level you join at will depend on your experience, with opportunities available from Mid-level through to Principal. There is a clear progression route into senior consultancy, security architecture, cyber risk leadership and information assurance leadership, with support towards professional qualifications such as CISSP, CISM, CRISC and ISO 27001. The role is remote-first, although you ll need to be comfortable travelling to the Nottingham office and customer sites when required. Regular UK travel may form part of the role, with occasional international travel possible. If you re looking for a role where you can work on genuinely complex security challenges, have direct customer exposure and continue developing your career across cyber security and assurance, please apply now or get in touch to find out more. We welcome diverse applicants and are dedicated to treating all applicants with dignity and respect, regardless of background.
Senior/Principal Penetration Tester / Experienced Red Team Consultant Testing Team United Kingdom Remote working options Full Time About the role Rootshell Security is seeking an experienced Senior / Principal Penetration Tester / Red Team Consultant to join our rapidly expanding Offensive Security team. This role is suited to a highly capable security professional with extensive experience delivering complex penetration testing and adversary simulation engagements across a range of sectors, including critical national infrastructure, financial services, and government organisations. You will be responsible for delivering advanced Red Team operations, intelligence-led security assessments, and bespoke attack simulations that help our clients understand their true resilience against modern threat actors. The position involves a combination of remote engagements and on site client activities across the United Kingdom. Rootshell Security is an equal opportunity employer. We welcome and encourage diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability or veteran status. Please do not apply if you are based outside the UK and/or are not eligible to apply for UK Security Clearance. Role responsibilities Lead and deliver advanced penetration testing and Red Team engagements Conduct intelligence-led adversary emulation and attack simulation exercises Deliver engagements aligned to recognised frameworks including TIBER-EU, CBEST, DORA, GBEST and STAR-FS Perform threat led security assessments against complex enterprise environments Develop Red Team infrastructure, tooling, attack paths and operational plans Conduct phishing, social engineering and physical assessment activities where authorised Support pre sales activities including technical scoping and solution design Produce high-quality technical reports and executive level findings Contribute to the development of Rootshell Security methodologies, research and innovation Skills we are looking for Mandatory Requirements Must be eligible to apply for UK Security Clearance Must be permanently based within the United Kingdom Must have several years of provable commercial experience delivering Red Team engagements Excellent working knowledge of the MITRE ATT&CK Framework Demonstrable experience delivering engagements aligned to TIBER-EU, CBEST, DORA and other threat led testing frameworks Strong knowledge of adversary emulation, attack path development and operational security Excellent report writing and client communication skills Strong network, infrastructure, Active Directory and cloud attack experience Experience operating against Azure, AWS and hybrid enterprise environments Certifications Must hold or have previously held a recognised Red Team certification demonstrating advanced offensive security capability, Typically CREST or CyberScheme Currently holds or has held Team Leader certifications in either Infrastructure and/or Applications Currently holds professional title of Principal / Chartered or would be eligible to apply Social engineering and phishing operation experience Physical intrusion testing experience Threat intelligence and Purple Team experience Malware analysis or custom tooling development Experience briefing senior stakeholders and board level audiences Proficiency in Python, PowerShell or C# development Company benefits Long-term career progression opportunities Continuous technical and non-technical training Regular attendance at industry conferences, events and community meetups Exposure to a diverse range of engagements across multiple sectors Dedicated research and innovation time Opportunity to influence Rootshell's offensive security capabilities and methodologies Mentoring and career development from senior leadership Recognition and reward for innovation, technical excellence and client impact Equality, Diversity, and Inclusion at Rootshell Security We are committed to fostering an inclusive and diverse workplace where everyone is valued and respected. We believe that a diverse team drives innovation and excellence, and we welcome applications from individuals of all backgrounds, experiences, and perspectives. As a proud holder of the Bronze Award under the Defence Employer Recognition Scheme (ERS), we actively support the Armed Forces community, aligning with the principles of the Armed Forces Covenant. We recognise the valuable skills and experiences that service personnel, reservists, and veterans bring to the workplace and encourage them to apply. Rootshell Security is an equal opportunities employer. We do not discriminate based on age, disability, gender, gender identity, marital or civil partnership status, pregnancy or maternity, race, religion or belief, sexual orientation, or any other characteristic protected by law. If you require any reasonable adjustments during the recruitment process, please let us know-we are happy to support you.
Aug 20, 2026
Full time
Senior/Principal Penetration Tester / Experienced Red Team Consultant Testing Team United Kingdom Remote working options Full Time About the role Rootshell Security is seeking an experienced Senior / Principal Penetration Tester / Red Team Consultant to join our rapidly expanding Offensive Security team. This role is suited to a highly capable security professional with extensive experience delivering complex penetration testing and adversary simulation engagements across a range of sectors, including critical national infrastructure, financial services, and government organisations. You will be responsible for delivering advanced Red Team operations, intelligence-led security assessments, and bespoke attack simulations that help our clients understand their true resilience against modern threat actors. The position involves a combination of remote engagements and on site client activities across the United Kingdom. Rootshell Security is an equal opportunity employer. We welcome and encourage diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability or veteran status. Please do not apply if you are based outside the UK and/or are not eligible to apply for UK Security Clearance. Role responsibilities Lead and deliver advanced penetration testing and Red Team engagements Conduct intelligence-led adversary emulation and attack simulation exercises Deliver engagements aligned to recognised frameworks including TIBER-EU, CBEST, DORA, GBEST and STAR-FS Perform threat led security assessments against complex enterprise environments Develop Red Team infrastructure, tooling, attack paths and operational plans Conduct phishing, social engineering and physical assessment activities where authorised Support pre sales activities including technical scoping and solution design Produce high-quality technical reports and executive level findings Contribute to the development of Rootshell Security methodologies, research and innovation Skills we are looking for Mandatory Requirements Must be eligible to apply for UK Security Clearance Must be permanently based within the United Kingdom Must have several years of provable commercial experience delivering Red Team engagements Excellent working knowledge of the MITRE ATT&CK Framework Demonstrable experience delivering engagements aligned to TIBER-EU, CBEST, DORA and other threat led testing frameworks Strong knowledge of adversary emulation, attack path development and operational security Excellent report writing and client communication skills Strong network, infrastructure, Active Directory and cloud attack experience Experience operating against Azure, AWS and hybrid enterprise environments Certifications Must hold or have previously held a recognised Red Team certification demonstrating advanced offensive security capability, Typically CREST or CyberScheme Currently holds or has held Team Leader certifications in either Infrastructure and/or Applications Currently holds professional title of Principal / Chartered or would be eligible to apply Social engineering and phishing operation experience Physical intrusion testing experience Threat intelligence and Purple Team experience Malware analysis or custom tooling development Experience briefing senior stakeholders and board level audiences Proficiency in Python, PowerShell or C# development Company benefits Long-term career progression opportunities Continuous technical and non-technical training Regular attendance at industry conferences, events and community meetups Exposure to a diverse range of engagements across multiple sectors Dedicated research and innovation time Opportunity to influence Rootshell's offensive security capabilities and methodologies Mentoring and career development from senior leadership Recognition and reward for innovation, technical excellence and client impact Equality, Diversity, and Inclusion at Rootshell Security We are committed to fostering an inclusive and diverse workplace where everyone is valued and respected. We believe that a diverse team drives innovation and excellence, and we welcome applications from individuals of all backgrounds, experiences, and perspectives. As a proud holder of the Bronze Award under the Defence Employer Recognition Scheme (ERS), we actively support the Armed Forces community, aligning with the principles of the Armed Forces Covenant. We recognise the valuable skills and experiences that service personnel, reservists, and veterans bring to the workplace and encourage them to apply. Rootshell Security is an equal opportunities employer. We do not discriminate based on age, disability, gender, gender identity, marital or civil partnership status, pregnancy or maternity, race, religion or belief, sexual orientation, or any other characteristic protected by law. If you require any reasonable adjustments during the recruitment process, please let us know-we are happy to support you.
Principal Security Consultant Travel to UK Client sites and home working (Hybrid) Travel to UK Client Sites 70,000- 80,000 + Bonus + Benefits Looking to influence security across some of the UK's most critical Defence and Government programmes? We're recruiting a Principal Security Consultant to lead Security Assurance and Secure by Design activities across complex client environments. You'll act as a trusted advisor, working with senior stakeholders to embed security throughout the system lifecycle while helping shape secure, resilient solutions. You'll have experience in: Security Assurance and Secure by Design Defence, Government or Critical National Infrastructure Security governance, risk management and accreditation Building trusted client relationships and influencing stakeholders Producing high-quality assurance documentation Desirable experience includes: JSP 440 / JSP 604 NIST, CAF, ISO 27001 or Cyber Essentials Active SC Clearance (DV advantageous) Professional certifications such as CISSP, CISM or CRISC are highly desirable. Chartered Cyber Security Professional (or working towards Chartered status) would be a significant advantage. Join a growing cyber consultancy where you'll work on genuinely meaningful programmes, collaborate with experienced consultants and have the opportunity to shape both client outcomes and the future of the business. If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
Jul 30, 2026
Full time
Principal Security Consultant Travel to UK Client sites and home working (Hybrid) Travel to UK Client Sites 70,000- 80,000 + Bonus + Benefits Looking to influence security across some of the UK's most critical Defence and Government programmes? We're recruiting a Principal Security Consultant to lead Security Assurance and Secure by Design activities across complex client environments. You'll act as a trusted advisor, working with senior stakeholders to embed security throughout the system lifecycle while helping shape secure, resilient solutions. You'll have experience in: Security Assurance and Secure by Design Defence, Government or Critical National Infrastructure Security governance, risk management and accreditation Building trusted client relationships and influencing stakeholders Producing high-quality assurance documentation Desirable experience includes: JSP 440 / JSP 604 NIST, CAF, ISO 27001 or Cyber Essentials Active SC Clearance (DV advantageous) Professional certifications such as CISSP, CISM or CRISC are highly desirable. Chartered Cyber Security Professional (or working towards Chartered status) would be a significant advantage. Join a growing cyber consultancy where you'll work on genuinely meaningful programmes, collaborate with experienced consultants and have the opportunity to shape both client outcomes and the future of the business. If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
Principal Security Consultant - Defence & National Security Hybrid / Remote with client travel Up to £80,000 + Bonus + Excellent Benefits SC or DV Clearance Required A growing cyber security consultancy delivering high-impact work across Defence, Government and National Security is looking to hire a Principal Security Consultant to join its expanding consulting team click apply for full job details
May 18, 2026
Full time
Principal Security Consultant - Defence & National Security Hybrid / Remote with client travel Up to £80,000 + Bonus + Excellent Benefits SC or DV Clearance Required A growing cyber security consultancy delivering high-impact work across Defence, Government and National Security is looking to hire a Principal Security Consultant to join its expanding consulting team click apply for full job details
Lead Cyber Security Consultant (Defence) UK Remote (travel required approx. 60% / 3 days onsite per week) Full-time & Permanent Consultancy Competitive salary + Excellent benefits About the Opportunity We're working with an established and growing UK cybersecurity consultancy expanding its Defence and Public Sector practice. This is a great opportunity for an experienced security professional to lead high-impact programmes, influence senior stakeholders, and shape security outcomes across MOD and wider Defence environments. The Role As a Lead Cyber Security Consultant, you'll take ownership of multiple client engagements, delivering expert advice across governance, risk, compliance, and Secure by Design practices. You'll work closely with senior stakeholders to assess risk, define security controls, deliver assurance activities, and support secure architecture across complex, high-profile systems. This is a hands-on, strategic role that combines leadership, client engagement, and technical depth. Key Responsibilities Lead Secure by Design and security assurance activities across MOD and Public Sector programmes Support and guide the application of risk management frameworks, ISMS, and Enterprise Security Risk Management Conduct and lead workshops with technical and business stakeholders Produce clear, actionable reporting on risk, vulnerabilities, and remediation Provide pragmatic, proportionate recommendations aligned to business goals Support secure design across cloud and on-premise platforms Contribute to internal knowledge sharing and thought leadership Experience & Expertise Strong background in Technical/Security Architecture or Governance, Risk & Compliance Experience working in Defence / MOD environments Strong analytical and communication skills, with the ability to influence senior stakeholders Passion for continuous learning and high-quality security outcomes Desirable Knowledge SAC (Security Assurance Coordinator) or Delivery Team Security Lead experience MOD/GDS Secure by Design Familiarity with: JSP440, JSP604/453, JSP490 Supplier Chain Assurance GDPR, PCI DSS, ICO ISO 27001, NIST CSF, CIS Controls v8 Skills in: Threat modelling (kill chain, attack trees, etc.) Cloud security (AWS, Azure), containerisation, firewalls Secure SDLC HLD/LLD review ITHC scoping and remediation Certifications (Highly Desirable) CIISEC UK Cyber Security Council registration (Chartered or Principal) AWS/Azure Security (Professional) CCSP, CISSP, CISM ISO 27001 Lead Auditor Security Vetting / Clearance Active and transferable DV clearance is essential Must be a sole British National and UK-based Benefits Competitive salary and benefits package Private healthcare & wellbeing support Flexible working (remote with travel) Career pathways, mentoring and continuous learning Inclusive, supportive culture Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.
May 03, 2026
Full time
Lead Cyber Security Consultant (Defence) UK Remote (travel required approx. 60% / 3 days onsite per week) Full-time & Permanent Consultancy Competitive salary + Excellent benefits About the Opportunity We're working with an established and growing UK cybersecurity consultancy expanding its Defence and Public Sector practice. This is a great opportunity for an experienced security professional to lead high-impact programmes, influence senior stakeholders, and shape security outcomes across MOD and wider Defence environments. The Role As a Lead Cyber Security Consultant, you'll take ownership of multiple client engagements, delivering expert advice across governance, risk, compliance, and Secure by Design practices. You'll work closely with senior stakeholders to assess risk, define security controls, deliver assurance activities, and support secure architecture across complex, high-profile systems. This is a hands-on, strategic role that combines leadership, client engagement, and technical depth. Key Responsibilities Lead Secure by Design and security assurance activities across MOD and Public Sector programmes Support and guide the application of risk management frameworks, ISMS, and Enterprise Security Risk Management Conduct and lead workshops with technical and business stakeholders Produce clear, actionable reporting on risk, vulnerabilities, and remediation Provide pragmatic, proportionate recommendations aligned to business goals Support secure design across cloud and on-premise platforms Contribute to internal knowledge sharing and thought leadership Experience & Expertise Strong background in Technical/Security Architecture or Governance, Risk & Compliance Experience working in Defence / MOD environments Strong analytical and communication skills, with the ability to influence senior stakeholders Passion for continuous learning and high-quality security outcomes Desirable Knowledge SAC (Security Assurance Coordinator) or Delivery Team Security Lead experience MOD/GDS Secure by Design Familiarity with: JSP440, JSP604/453, JSP490 Supplier Chain Assurance GDPR, PCI DSS, ICO ISO 27001, NIST CSF, CIS Controls v8 Skills in: Threat modelling (kill chain, attack trees, etc.) Cloud security (AWS, Azure), containerisation, firewalls Secure SDLC HLD/LLD review ITHC scoping and remediation Certifications (Highly Desirable) CIISEC UK Cyber Security Council registration (Chartered or Principal) AWS/Azure Security (Professional) CCSP, CISSP, CISM ISO 27001 Lead Auditor Security Vetting / Clearance Active and transferable DV clearance is essential Must be a sole British National and UK-based Benefits Competitive salary and benefits package Private healthcare & wellbeing support Flexible working (remote with travel) Career pathways, mentoring and continuous learning Inclusive, supportive culture Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.
Our client, a leading consultancy in the cyber security sector, specialising in defence & security, is currently seeking a talented Cyber Security Consultant to join their team on a permanent basis. This role involves delivering specialist cyber security professional services, helping businesses and organisations to understand the value of their information assets, assess associated security risks, and develop technical and procedural controls to protect them. About the Role: As a Cyber Security Consultant, you will be responsible for providing expert cyber security technical advice, guidance and support. Specific responsibilities include: Advising and supporting companies, organisations, programmes or projects on all aspects of cyber security Producing formal deliverables such as security policies, operating procedures, risk assessments, security assurance management plans, and audits Liaising and working closely with customers to meet project/programme deadlines Understanding, assessing, and articulating business and information security risk at a technical and business process level Reviewing the effectiveness of existing security controls and proposing proportionate security improvements Supporting business development by developing and managing relationships with existing and new customers Job Requirements: Essential Skills & Experience: Recognised industry cyber security certifications or qualifications (e.g., CISSP, CISM, CISA) Relevant experience in a cyber security role Knowledge of cyber security industry standards and good practices Baseline knowledge of information systems (e.g., cloud, access control, networking) Experience in a customer-facing role Good understanding and working knowledge of Governance, Risk & Compliance Strong written, verbal, and interpersonal communication skills Ability to work independently, manage own time and work to deadlines Desirable Skills & Experience: UK Cyber Security Council - Professional Registration Title (e.g., Chartered, Principal, Practitioner) Knowledge and understanding of HMG and MoD cyber security policies, standards, guidance, security processes, and organisation Experience implementing the Secure by Design principles-based approach Previous experience as a Security Manager or Security Lead on a MoD, HMG, or industry project/programme Knowledge and understanding of MOD cyber security policy (e.g., JSP440), standards, and guidance Chairing and participation in HMG/MoD Security Working Groups Experience with the NCSC Cyber Assurance Framework (CAF) and GovAssure audits Knowledge and experience of NIST standards, e.g., the Cyber Security Framework, Risk Assessment Cyber security audit skills, knowledge and experience (e.g., ISO/IEC 27001 audit) Experience of Supplier Assurance and security of the supply chain Experience of scoping and assessing output from IT Health Checks, Penetration Tests, and Vulnerability Assessments Requirements: Ideally National Security Vetted, SC or DV, if not, willing to undergo government security vetting process Eligible to work in the UK and have the appropriate right to work documents Willing to travel as necessary Benefits: Opportunity to work on a variety of interesting and challenging projects Professional development and training opportunities Supportive and collaborative work environment Employee benefits package If you are an experienced Cyber Security Consultant looking for a new opportunity to further develop your career, we would love to hear from you. Apply now to join our client's dynamic and talented team.
Apr 30, 2026
Full time
Our client, a leading consultancy in the cyber security sector, specialising in defence & security, is currently seeking a talented Cyber Security Consultant to join their team on a permanent basis. This role involves delivering specialist cyber security professional services, helping businesses and organisations to understand the value of their information assets, assess associated security risks, and develop technical and procedural controls to protect them. About the Role: As a Cyber Security Consultant, you will be responsible for providing expert cyber security technical advice, guidance and support. Specific responsibilities include: Advising and supporting companies, organisations, programmes or projects on all aspects of cyber security Producing formal deliverables such as security policies, operating procedures, risk assessments, security assurance management plans, and audits Liaising and working closely with customers to meet project/programme deadlines Understanding, assessing, and articulating business and information security risk at a technical and business process level Reviewing the effectiveness of existing security controls and proposing proportionate security improvements Supporting business development by developing and managing relationships with existing and new customers Job Requirements: Essential Skills & Experience: Recognised industry cyber security certifications or qualifications (e.g., CISSP, CISM, CISA) Relevant experience in a cyber security role Knowledge of cyber security industry standards and good practices Baseline knowledge of information systems (e.g., cloud, access control, networking) Experience in a customer-facing role Good understanding and working knowledge of Governance, Risk & Compliance Strong written, verbal, and interpersonal communication skills Ability to work independently, manage own time and work to deadlines Desirable Skills & Experience: UK Cyber Security Council - Professional Registration Title (e.g., Chartered, Principal, Practitioner) Knowledge and understanding of HMG and MoD cyber security policies, standards, guidance, security processes, and organisation Experience implementing the Secure by Design principles-based approach Previous experience as a Security Manager or Security Lead on a MoD, HMG, or industry project/programme Knowledge and understanding of MOD cyber security policy (e.g., JSP440), standards, and guidance Chairing and participation in HMG/MoD Security Working Groups Experience with the NCSC Cyber Assurance Framework (CAF) and GovAssure audits Knowledge and experience of NIST standards, e.g., the Cyber Security Framework, Risk Assessment Cyber security audit skills, knowledge and experience (e.g., ISO/IEC 27001 audit) Experience of Supplier Assurance and security of the supply chain Experience of scoping and assessing output from IT Health Checks, Penetration Tests, and Vulnerability Assessments Requirements: Ideally National Security Vetted, SC or DV, if not, willing to undergo government security vetting process Eligible to work in the UK and have the appropriate right to work documents Willing to travel as necessary Benefits: Opportunity to work on a variety of interesting and challenging projects Professional development and training opportunities Supportive and collaborative work environment Employee benefits package If you are an experienced Cyber Security Consultant looking for a new opportunity to further develop your career, we would love to hear from you. Apply now to join our client's dynamic and talented team.
