Role: Cyber and Information Assurance Consultant Mid, Senior & Principal Levels Location: Nottingham / Remote-first Working Arrangement: Remote-first, with travel to Nottingham and customer sites as required Salary: £65,000 £120,000 Are you a cyber security or information assurance professional who enjoys working with customers, getting into complex problems and turning security risks into practical solutions? We re looking for Cyber and Information Assurance Consultants across Mid, Senior and Principal levels to join a growing team working on complex, high-assurance environments across defence, government and critical infrastructure. This is a consultancy-focused role, so you won t be sitting in a purely internal security position. You ll work directly with customers, technical teams and senior stakeholders to assess risk, understand threats and vulnerabilities, and provide clear recommendations on how security can be improved. You ll work across areas including cyber risk assessments, information assurance, security governance and secure-by-design. Depending on your level and experience, you could be reviewing solution designs, developing security cases, supporting accreditation and assurance activity, maintaining risk registers or helping shape security requirements across major programmes. You ll also work closely with architects, engineers, project teams, suppliers and customer security teams. A big part of the role will be taking technical evidence and security requirements and explaining what they actually mean from a risk and business perspective. You ll ideally have professional experience in cyber security, information assurance, risk management, systems engineering or a related discipline, alongside experience contributing to security assessment or assurance work. You ll need to be comfortable producing clear security documentation and communicating with both technical and non-technical audiences. Knowledge of areas such as cyber risk management, security controls, threat and vulnerability assessment, security governance and risk acceptance is important. Experience with frameworks such as ISO 27001, ISO 27005, the NCSC Cyber Assessment Framework, NIST or MOD security standards would be beneficial. Experience within defence, government, critical infrastructure or another high-assurance environment would be particularly relevant. Experience with cloud security assurance, security architecture reviews, accreditation or secure information exchange would also be useful. The level you join at will depend on your experience, with opportunities available from Mid-level through to Principal. There is a clear progression route into senior consultancy, security architecture, cyber risk leadership and information assurance leadership, with support towards professional qualifications such as CISSP, CISM, CRISC and ISO 27001. The role is remote-first, although you ll need to be comfortable travelling to the Nottingham office and customer sites when required. Regular UK travel may form part of the role, with occasional international travel possible. If you re looking for a role where you can work on genuinely complex security challenges, have direct customer exposure and continue developing your career across cyber security and assurance, please apply now or get in touch to find out more. We welcome diverse applicants and are dedicated to treating all applicants with dignity and respect, regardless of background.
Aug 23, 2026
Full time
Role: Cyber and Information Assurance Consultant Mid, Senior & Principal Levels Location: Nottingham / Remote-first Working Arrangement: Remote-first, with travel to Nottingham and customer sites as required Salary: £65,000 £120,000 Are you a cyber security or information assurance professional who enjoys working with customers, getting into complex problems and turning security risks into practical solutions? We re looking for Cyber and Information Assurance Consultants across Mid, Senior and Principal levels to join a growing team working on complex, high-assurance environments across defence, government and critical infrastructure. This is a consultancy-focused role, so you won t be sitting in a purely internal security position. You ll work directly with customers, technical teams and senior stakeholders to assess risk, understand threats and vulnerabilities, and provide clear recommendations on how security can be improved. You ll work across areas including cyber risk assessments, information assurance, security governance and secure-by-design. Depending on your level and experience, you could be reviewing solution designs, developing security cases, supporting accreditation and assurance activity, maintaining risk registers or helping shape security requirements across major programmes. You ll also work closely with architects, engineers, project teams, suppliers and customer security teams. A big part of the role will be taking technical evidence and security requirements and explaining what they actually mean from a risk and business perspective. You ll ideally have professional experience in cyber security, information assurance, risk management, systems engineering or a related discipline, alongside experience contributing to security assessment or assurance work. You ll need to be comfortable producing clear security documentation and communicating with both technical and non-technical audiences. Knowledge of areas such as cyber risk management, security controls, threat and vulnerability assessment, security governance and risk acceptance is important. Experience with frameworks such as ISO 27001, ISO 27005, the NCSC Cyber Assessment Framework, NIST or MOD security standards would be beneficial. Experience within defence, government, critical infrastructure or another high-assurance environment would be particularly relevant. Experience with cloud security assurance, security architecture reviews, accreditation or secure information exchange would also be useful. The level you join at will depend on your experience, with opportunities available from Mid-level through to Principal. There is a clear progression route into senior consultancy, security architecture, cyber risk leadership and information assurance leadership, with support towards professional qualifications such as CISSP, CISM, CRISC and ISO 27001. The role is remote-first, although you ll need to be comfortable travelling to the Nottingham office and customer sites when required. Regular UK travel may form part of the role, with occasional international travel possible. If you re looking for a role where you can work on genuinely complex security challenges, have direct customer exposure and continue developing your career across cyber security and assurance, please apply now or get in touch to find out more. We welcome diverse applicants and are dedicated to treating all applicants with dignity and respect, regardless of background.
Managing Cyber Security Consultant Join a fast-growing technology consultancy helping organisations strengthen their cyber resilience through expert advisory services. This is an opportunity to lead high-profile consulting engagements, mentor talented consultants, and play a key role in shaping the growth of an ambitious Cyber Security practice. Role Overview Location: Central London/Hybrid (2 days per week on site) Package: £75,000- £95,000pa & benefits Industry: Cyber Security / Consultancy What You'll Be Doing Lead the successful delivery of cyber security consulting engagements across a broad range of industries. Manage multiple client projects, ensuring high-quality delivery, commercial success and client satisfaction. Advise organisations on cyber security strategy, governance, risk management and compliance. Deliver security maturity assessments, gap analyses and cyber risk reviews. Develop practical security roadmaps and recommendations that help clients improve their security posture. Support organisations in achieving recognised security standards and regulatory compliance. Review and assure the quality of client reports, security policies and technical deliverables. Facilitate workshops, executive briefings and stakeholder meetings, translating complex technical topics into clear business outcomes. Provide guidance on security architecture, cloud security, vulnerability management and supplier assurance. Contribute to cyber resilience initiatives, incident preparedness and risk reduction programmes. Support business development through client meetings, proposals, tender responses and identifying new opportunities. Build long-term trusted relationships with clients and key stakeholders. Mentor and develop junior consultants while helping shape new service offerings and consulting methodologies. Main Skills Needed Significant experience delivering cyber security projects within an Technology Consultancy is essential. Background operating at a Senior or Principal level as preference. Strong pre-sales and delivery experience is essential. Proven track record delivering ISO 27001 Implementations within a consultancy to end client environments. Proven leadership experience managing client engagements and coaching or leading consulting teams. Strong knowledge of governance, risk management and cyber security best practice. Experience delivering projects aligned to frameworks including ISO 27001, NIST CSF, CIS Controls and Cyber Essentials. Ability to conduct and oversee security maturity assessments, risk assessments and compliance programmes. Excellent client-facing communication skills with the ability to engage technical and non-technical audiences. Strong project management, organisational and stakeholder management capabilities. Experience producing and reviewing high-quality consultancy reports and presenting recommendations to senior leadership. Experience working within regulated industries would be highly beneficial. Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer/Auditor are advantageous. What's in It for You Competitive salary with performance-based incentives. Private healthcare and healthcare cash plan. Life insurance and pension scheme. Flexible working arrangements that support a healthy work-life balance. Clearly defined career progression and ongoing professional development. Personalised learning pathways with access to continuous training resources. Opportunity to lead and mentor junior consultants while developing your own leadership skills. Join a collaborative, supportive team where your expertise and ideas will have genuine impact. Play a key role in the continued growth of an expanding cyber security consultancy. If you bring the spark, we'll give you the platform. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. By applying you are confirming you are happy to be added to the Addition Solutions mailing list regarding future suitable positions. You can opt out of this at any time simply by contacting one of our consultants.
Aug 21, 2026
Full time
Managing Cyber Security Consultant Join a fast-growing technology consultancy helping organisations strengthen their cyber resilience through expert advisory services. This is an opportunity to lead high-profile consulting engagements, mentor talented consultants, and play a key role in shaping the growth of an ambitious Cyber Security practice. Role Overview Location: Central London/Hybrid (2 days per week on site) Package: £75,000- £95,000pa & benefits Industry: Cyber Security / Consultancy What You'll Be Doing Lead the successful delivery of cyber security consulting engagements across a broad range of industries. Manage multiple client projects, ensuring high-quality delivery, commercial success and client satisfaction. Advise organisations on cyber security strategy, governance, risk management and compliance. Deliver security maturity assessments, gap analyses and cyber risk reviews. Develop practical security roadmaps and recommendations that help clients improve their security posture. Support organisations in achieving recognised security standards and regulatory compliance. Review and assure the quality of client reports, security policies and technical deliverables. Facilitate workshops, executive briefings and stakeholder meetings, translating complex technical topics into clear business outcomes. Provide guidance on security architecture, cloud security, vulnerability management and supplier assurance. Contribute to cyber resilience initiatives, incident preparedness and risk reduction programmes. Support business development through client meetings, proposals, tender responses and identifying new opportunities. Build long-term trusted relationships with clients and key stakeholders. Mentor and develop junior consultants while helping shape new service offerings and consulting methodologies. Main Skills Needed Significant experience delivering cyber security projects within an Technology Consultancy is essential. Background operating at a Senior or Principal level as preference. Strong pre-sales and delivery experience is essential. Proven track record delivering ISO 27001 Implementations within a consultancy to end client environments. Proven leadership experience managing client engagements and coaching or leading consulting teams. Strong knowledge of governance, risk management and cyber security best practice. Experience delivering projects aligned to frameworks including ISO 27001, NIST CSF, CIS Controls and Cyber Essentials. Ability to conduct and oversee security maturity assessments, risk assessments and compliance programmes. Excellent client-facing communication skills with the ability to engage technical and non-technical audiences. Strong project management, organisational and stakeholder management capabilities. Experience producing and reviewing high-quality consultancy reports and presenting recommendations to senior leadership. Experience working within regulated industries would be highly beneficial. Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer/Auditor are advantageous. What's in It for You Competitive salary with performance-based incentives. Private healthcare and healthcare cash plan. Life insurance and pension scheme. Flexible working arrangements that support a healthy work-life balance. Clearly defined career progression and ongoing professional development. Personalised learning pathways with access to continuous training resources. Opportunity to lead and mentor junior consultants while developing your own leadership skills. Join a collaborative, supportive team where your expertise and ideas will have genuine impact. Play a key role in the continued growth of an expanding cyber security consultancy. If you bring the spark, we'll give you the platform. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. By applying you are confirming you are happy to be added to the Addition Solutions mailing list regarding future suitable positions. You can opt out of this at any time simply by contacting one of our consultants.
Senior/Principal Penetration Tester / Experienced Red Team Consultant Testing Team United Kingdom Remote working options Full Time About the role Rootshell Security is seeking an experienced Senior / Principal Penetration Tester / Red Team Consultant to join our rapidly expanding Offensive Security team. This role is suited to a highly capable security professional with extensive experience delivering complex penetration testing and adversary simulation engagements across a range of sectors, including critical national infrastructure, financial services, and government organisations. You will be responsible for delivering advanced Red Team operations, intelligence-led security assessments, and bespoke attack simulations that help our clients understand their true resilience against modern threat actors. The position involves a combination of remote engagements and on site client activities across the United Kingdom. Rootshell Security is an equal opportunity employer. We welcome and encourage diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability or veteran status. Please do not apply if you are based outside the UK and/or are not eligible to apply for UK Security Clearance. Role responsibilities Lead and deliver advanced penetration testing and Red Team engagements Conduct intelligence-led adversary emulation and attack simulation exercises Deliver engagements aligned to recognised frameworks including TIBER-EU, CBEST, DORA, GBEST and STAR-FS Perform threat led security assessments against complex enterprise environments Develop Red Team infrastructure, tooling, attack paths and operational plans Conduct phishing, social engineering and physical assessment activities where authorised Support pre sales activities including technical scoping and solution design Produce high-quality technical reports and executive level findings Contribute to the development of Rootshell Security methodologies, research and innovation Skills we are looking for Mandatory Requirements Must be eligible to apply for UK Security Clearance Must be permanently based within the United Kingdom Must have several years of provable commercial experience delivering Red Team engagements Excellent working knowledge of the MITRE ATT&CK Framework Demonstrable experience delivering engagements aligned to TIBER-EU, CBEST, DORA and other threat led testing frameworks Strong knowledge of adversary emulation, attack path development and operational security Excellent report writing and client communication skills Strong network, infrastructure, Active Directory and cloud attack experience Experience operating against Azure, AWS and hybrid enterprise environments Certifications Must hold or have previously held a recognised Red Team certification demonstrating advanced offensive security capability, Typically CREST or CyberScheme Currently holds or has held Team Leader certifications in either Infrastructure and/or Applications Currently holds professional title of Principal / Chartered or would be eligible to apply Social engineering and phishing operation experience Physical intrusion testing experience Threat intelligence and Purple Team experience Malware analysis or custom tooling development Experience briefing senior stakeholders and board level audiences Proficiency in Python, PowerShell or C# development Company benefits Long-term career progression opportunities Continuous technical and non-technical training Regular attendance at industry conferences, events and community meetups Exposure to a diverse range of engagements across multiple sectors Dedicated research and innovation time Opportunity to influence Rootshell's offensive security capabilities and methodologies Mentoring and career development from senior leadership Recognition and reward for innovation, technical excellence and client impact Equality, Diversity, and Inclusion at Rootshell Security We are committed to fostering an inclusive and diverse workplace where everyone is valued and respected. We believe that a diverse team drives innovation and excellence, and we welcome applications from individuals of all backgrounds, experiences, and perspectives. As a proud holder of the Bronze Award under the Defence Employer Recognition Scheme (ERS), we actively support the Armed Forces community, aligning with the principles of the Armed Forces Covenant. We recognise the valuable skills and experiences that service personnel, reservists, and veterans bring to the workplace and encourage them to apply. Rootshell Security is an equal opportunities employer. We do not discriminate based on age, disability, gender, gender identity, marital or civil partnership status, pregnancy or maternity, race, religion or belief, sexual orientation, or any other characteristic protected by law. If you require any reasonable adjustments during the recruitment process, please let us know-we are happy to support you.
Aug 20, 2026
Full time
Senior/Principal Penetration Tester / Experienced Red Team Consultant Testing Team United Kingdom Remote working options Full Time About the role Rootshell Security is seeking an experienced Senior / Principal Penetration Tester / Red Team Consultant to join our rapidly expanding Offensive Security team. This role is suited to a highly capable security professional with extensive experience delivering complex penetration testing and adversary simulation engagements across a range of sectors, including critical national infrastructure, financial services, and government organisations. You will be responsible for delivering advanced Red Team operations, intelligence-led security assessments, and bespoke attack simulations that help our clients understand their true resilience against modern threat actors. The position involves a combination of remote engagements and on site client activities across the United Kingdom. Rootshell Security is an equal opportunity employer. We welcome and encourage diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability or veteran status. Please do not apply if you are based outside the UK and/or are not eligible to apply for UK Security Clearance. Role responsibilities Lead and deliver advanced penetration testing and Red Team engagements Conduct intelligence-led adversary emulation and attack simulation exercises Deliver engagements aligned to recognised frameworks including TIBER-EU, CBEST, DORA, GBEST and STAR-FS Perform threat led security assessments against complex enterprise environments Develop Red Team infrastructure, tooling, attack paths and operational plans Conduct phishing, social engineering and physical assessment activities where authorised Support pre sales activities including technical scoping and solution design Produce high-quality technical reports and executive level findings Contribute to the development of Rootshell Security methodologies, research and innovation Skills we are looking for Mandatory Requirements Must be eligible to apply for UK Security Clearance Must be permanently based within the United Kingdom Must have several years of provable commercial experience delivering Red Team engagements Excellent working knowledge of the MITRE ATT&CK Framework Demonstrable experience delivering engagements aligned to TIBER-EU, CBEST, DORA and other threat led testing frameworks Strong knowledge of adversary emulation, attack path development and operational security Excellent report writing and client communication skills Strong network, infrastructure, Active Directory and cloud attack experience Experience operating against Azure, AWS and hybrid enterprise environments Certifications Must hold or have previously held a recognised Red Team certification demonstrating advanced offensive security capability, Typically CREST or CyberScheme Currently holds or has held Team Leader certifications in either Infrastructure and/or Applications Currently holds professional title of Principal / Chartered or would be eligible to apply Social engineering and phishing operation experience Physical intrusion testing experience Threat intelligence and Purple Team experience Malware analysis or custom tooling development Experience briefing senior stakeholders and board level audiences Proficiency in Python, PowerShell or C# development Company benefits Long-term career progression opportunities Continuous technical and non-technical training Regular attendance at industry conferences, events and community meetups Exposure to a diverse range of engagements across multiple sectors Dedicated research and innovation time Opportunity to influence Rootshell's offensive security capabilities and methodologies Mentoring and career development from senior leadership Recognition and reward for innovation, technical excellence and client impact Equality, Diversity, and Inclusion at Rootshell Security We are committed to fostering an inclusive and diverse workplace where everyone is valued and respected. We believe that a diverse team drives innovation and excellence, and we welcome applications from individuals of all backgrounds, experiences, and perspectives. As a proud holder of the Bronze Award under the Defence Employer Recognition Scheme (ERS), we actively support the Armed Forces community, aligning with the principles of the Armed Forces Covenant. We recognise the valuable skills and experiences that service personnel, reservists, and veterans bring to the workplace and encourage them to apply. Rootshell Security is an equal opportunities employer. We do not discriminate based on age, disability, gender, gender identity, marital or civil partnership status, pregnancy or maternity, race, religion or belief, sexual orientation, or any other characteristic protected by law. If you require any reasonable adjustments during the recruitment process, please let us know-we are happy to support you.
Principal Security Consultant Travel to UK Client sites and home working (Hybrid) Travel to UK Client Sites 70,000- 80,000 + Bonus + Benefits Looking to influence security across some of the UK's most critical Defence and Government programmes? We're recruiting a Principal Security Consultant to lead Security Assurance and Secure by Design activities across complex client environments. You'll act as a trusted advisor, working with senior stakeholders to embed security throughout the system lifecycle while helping shape secure, resilient solutions. You'll have experience in: Security Assurance and Secure by Design Defence, Government or Critical National Infrastructure Security governance, risk management and accreditation Building trusted client relationships and influencing stakeholders Producing high-quality assurance documentation Desirable experience includes: JSP 440 / JSP 604 NIST, CAF, ISO 27001 or Cyber Essentials Active SC Clearance (DV advantageous) Professional certifications such as CISSP, CISM or CRISC are highly desirable. Chartered Cyber Security Professional (or working towards Chartered status) would be a significant advantage. Join a growing cyber consultancy where you'll work on genuinely meaningful programmes, collaborate with experienced consultants and have the opportunity to shape both client outcomes and the future of the business. If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
Jul 30, 2026
Full time
Principal Security Consultant Travel to UK Client sites and home working (Hybrid) Travel to UK Client Sites 70,000- 80,000 + Bonus + Benefits Looking to influence security across some of the UK's most critical Defence and Government programmes? We're recruiting a Principal Security Consultant to lead Security Assurance and Secure by Design activities across complex client environments. You'll act as a trusted advisor, working with senior stakeholders to embed security throughout the system lifecycle while helping shape secure, resilient solutions. You'll have experience in: Security Assurance and Secure by Design Defence, Government or Critical National Infrastructure Security governance, risk management and accreditation Building trusted client relationships and influencing stakeholders Producing high-quality assurance documentation Desirable experience includes: JSP 440 / JSP 604 NIST, CAF, ISO 27001 or Cyber Essentials Active SC Clearance (DV advantageous) Professional certifications such as CISSP, CISM or CRISC are highly desirable. Chartered Cyber Security Professional (or working towards Chartered status) would be a significant advantage. Join a growing cyber consultancy where you'll work on genuinely meaningful programmes, collaborate with experienced consultants and have the opportunity to shape both client outcomes and the future of the business. If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
A cybersecurity firm in the United Kingdom seeks a Principal Consultant, IGA to lead Identity Governance solutions and mentor a team. The role requires extensive experience in IAM and SailPoint, focusing on delivering high-quality outcomes, customer engagement, and strategic project leadership. The ideal candidate will have solid technical skills, excellent communication abilities, and a history of successful project implementations. This position offers an opportunity to contribute to innovative cybersecurity solutions.
Jul 29, 2026
Full time
A cybersecurity firm in the United Kingdom seeks a Principal Consultant, IGA to lead Identity Governance solutions and mentor a team. The role requires extensive experience in IAM and SailPoint, focusing on delivering high-quality outcomes, customer engagement, and strategic project leadership. The ideal candidate will have solid technical skills, excellent communication abilities, and a history of successful project implementations. This position offers an opportunity to contribute to innovative cybersecurity solutions.
We help the world Be Everyday Ready . Today's threatscape is relentless. So are we. At Cyderes, we specialize in building practical IAM, exposure management, and risk programs, and stopping active threats fast with MDR that works with your existing security tools - all augmented by AI and driven by seasoned operators. Our tireless global team is laser-focused on cybersecurity, arming organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way. About the Role The Principal Consultant, IGA will play a critical leadership role in delivering Identity Governance and Administration (IGA) solutions while guiding and mentoring a team of consultants across multiple client engagements. The successful candidate will serve as a trusted advisor to customers, providing strategic guidance and subject matter expertise across the broader Identity and Access Management (IAM) domain. You will work closely with client stakeholders, security leaders, and technical teams to design, architect, and implement scalable identity governance solutions that align with business objectives and security best practices. The Principal Consultant will also be responsible for mentoring junior consultants, reviewing solution designs, and ensuring project teams follow best practices throughout the delivery lifecycle. Excellent communication skills-both written and verbal-are essential, as the role involves presenting solutions to technical and executive stakeholders, documenting architectures, and facilitating workshops with clients. In addition to technical expertise, the Principal Consultant will contribute to thought leadership, delivery excellence, and continuous improvement within the practice by sharing knowledge, refining methodologies, and helping drive innovation across identity governance services. Responsibilities Serve as a product and domain expert in Identity & Access Management (IAM), with a strong focus on SailPoint solutions. Lead the technical delivery of IAM implementation projects, ensuring successful deployment and high-quality outcomes. Drive strategic IAM assessments and roadmap discussions with customers and internal stakeholders at Cyderes. Ensure technical designs align with customer requirements, use cases, and best practices. Support pre sales activities, including developing client focused proposals and leading technical proofs of concept (PoCs). Collaborate closely with Project Services and/or Engagement Managers to identify, prioritize, and catalog technical requirements, and map them to project use cases and sprint plans. Identify, qualify, and help develop new and existing customer opportunities. Build and maintain strong relationships with both technical and business stakeholders. Mentor and coach junior consultants, supporting their professional growth and project success. Share best practices and knowledge with the team to strengthen and evolve the IAM Center of Excellence. Requirements 10+ years of experience in consulting and Identity & Access Management (IAM). 6+ years of hands on experience designing and deploying SailPoint solutions. Experience with large scale implementations supporting 50K+ users. Strong experience developing complex lifecycle workflows and custom connectors. Experience onboarding applications with automated provisioning. Skilled in configuring custom reports and dashboards. Experience with role mining and implementing RBAC/ABAC models. 4+ years of experience leading large, strategic projects or programs in a technical leadership capacity. Experience with web technologies such as XML, SPML, Web Services (SOAP/REST), and web/application servers. Experience working with databases such as Oracle, Sybase, MSSQL, and MySQL. Bachelor's degree in IT or a related field, or equivalent technical and business experience. Strong customer engagement and technical leadership skills. Excellent problem solving and analytical abilities. Proven team player with strong interpersonal and communication (written and verbal) skills. Ability to motivate and guide teams to achieve high performance. Experience working remotely and leading virtual project teams. Ability to manage multiple projects and workstreams simultaneously. SailPoint Engineer Certification preferred; CISSP or CISM is a plus. Willingness to travel up to 30% annually. Cyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status. Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.
Jul 29, 2026
Full time
We help the world Be Everyday Ready . Today's threatscape is relentless. So are we. At Cyderes, we specialize in building practical IAM, exposure management, and risk programs, and stopping active threats fast with MDR that works with your existing security tools - all augmented by AI and driven by seasoned operators. Our tireless global team is laser-focused on cybersecurity, arming organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way. About the Role The Principal Consultant, IGA will play a critical leadership role in delivering Identity Governance and Administration (IGA) solutions while guiding and mentoring a team of consultants across multiple client engagements. The successful candidate will serve as a trusted advisor to customers, providing strategic guidance and subject matter expertise across the broader Identity and Access Management (IAM) domain. You will work closely with client stakeholders, security leaders, and technical teams to design, architect, and implement scalable identity governance solutions that align with business objectives and security best practices. The Principal Consultant will also be responsible for mentoring junior consultants, reviewing solution designs, and ensuring project teams follow best practices throughout the delivery lifecycle. Excellent communication skills-both written and verbal-are essential, as the role involves presenting solutions to technical and executive stakeholders, documenting architectures, and facilitating workshops with clients. In addition to technical expertise, the Principal Consultant will contribute to thought leadership, delivery excellence, and continuous improvement within the practice by sharing knowledge, refining methodologies, and helping drive innovation across identity governance services. Responsibilities Serve as a product and domain expert in Identity & Access Management (IAM), with a strong focus on SailPoint solutions. Lead the technical delivery of IAM implementation projects, ensuring successful deployment and high-quality outcomes. Drive strategic IAM assessments and roadmap discussions with customers and internal stakeholders at Cyderes. Ensure technical designs align with customer requirements, use cases, and best practices. Support pre sales activities, including developing client focused proposals and leading technical proofs of concept (PoCs). Collaborate closely with Project Services and/or Engagement Managers to identify, prioritize, and catalog technical requirements, and map them to project use cases and sprint plans. Identify, qualify, and help develop new and existing customer opportunities. Build and maintain strong relationships with both technical and business stakeholders. Mentor and coach junior consultants, supporting their professional growth and project success. Share best practices and knowledge with the team to strengthen and evolve the IAM Center of Excellence. Requirements 10+ years of experience in consulting and Identity & Access Management (IAM). 6+ years of hands on experience designing and deploying SailPoint solutions. Experience with large scale implementations supporting 50K+ users. Strong experience developing complex lifecycle workflows and custom connectors. Experience onboarding applications with automated provisioning. Skilled in configuring custom reports and dashboards. Experience with role mining and implementing RBAC/ABAC models. 4+ years of experience leading large, strategic projects or programs in a technical leadership capacity. Experience with web technologies such as XML, SPML, Web Services (SOAP/REST), and web/application servers. Experience working with databases such as Oracle, Sybase, MSSQL, and MySQL. Bachelor's degree in IT or a related field, or equivalent technical and business experience. Strong customer engagement and technical leadership skills. Excellent problem solving and analytical abilities. Proven team player with strong interpersonal and communication (written and verbal) skills. Ability to motivate and guide teams to achieve high performance. Experience working remotely and leading virtual project teams. Ability to manage multiple projects and workstreams simultaneously. SailPoint Engineer Certification preferred; CISSP or CISM is a plus. Willingness to travel up to 30% annually. Cyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status. Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.
The Company Cognizant (NASDAQ:CTSH) is a leading provider of information technology, consulting, and business process outsourcing services, dedicated to helping the world's leading companies build stronger businesses. Headquartered in Teaneck, New Jersey (U.S.), Cognizant has over 350,000 employees as of January 2025. Cognizant is a member of the NASDAQ-100, the S&P 500, the Forbes Global 1000, and the Fortune 500 and is ranked among the top performing and fastest growing companies in the world. Cognizant Consulting At Cognizant, our consultants orchestrate the capabilities to truly change the game across strategy, design, technology and industry/functional knowledge to deliver insight at speed and solutions at scale. Our consulting services elevate the unique abilities and business aspirations of customers and employees and build relationships based on trust and value. Water Utilities Consulting We are seeking a highly skilled Cyber Assurance Lead with in-depth knowledge of the water domain and expertise in water network management. This role is pivotal in driving operational efficiency optimizing water networks and delivering transformative solutions to stakeholders in the water utilities sector. The ideal candidate will bridge the gap between business needs and technical solutions ensuring alignment with organizational goals and regulatory compliance. Role Overview We are seeking an exceptional Cyber Assurance Lead who brings CISO-level expertise and deep CNI sector experience to guide our organisation through a comprehensive cyber maturity transformation. This senior role is accountable for defining and driving the cyber assurance strategy, overseeing the cyber maturity roadmap, and providing best-practice leadership across the full spectrum of cyber security governance, risk, and compliance (GRC). The successful candidate will have either served as a CISO or worked extensively at CISO advisory level within CNI environments, with the credibility and authority to influence at Board and Executive Committee level whilst translating strategy into operational delivery. Key Responsibilities Lead the design and delivery of an enterprise-wide Cyber Maturity Assessment, benchmarking the organisation against NIST CSF, NCSC CAF, ISO 27001, and IEC 62443. Develop and own a multi-year Cyber Maturity Roadmap, prioritising investments and improvements based on risk appetite, regulatory obligations, and operational impact. Define and implement a comprehensive Cyber Assurance Framework covering governance, policy, risk management, third-party assurance, and technical control validation. Act as the principal cyber security advisor to the CISO, Executive Committee, and Board, providing clear, risk-informed reporting and strategic recommendations. Oversee second-line cyber assurance activities: control effectiveness testing, penetration testing governance, audit management, and exception handling. Lead engagement with regulators including the NCSC, OFWAT, and Defra on cyber resilience obligations, CAF submissions, and improvement plans. Drive the development and embedding of cyber security best practices across IT, OT, and supply chain domains. Establish cyber security KPIs and metrics, developing dashboards and reporting mechanisms for Board, CISO, and operational audiences. Manage and develop the cyber assurance team, fostering a culture of continuous improvement and learning. Support procurement and contract assurance, ensuring cyber security requirements are embedded in vendor and supply chain arrangements. Essential Experience & Skills Previous CISO experience, or extensive advisory / Deputy CISO experience at an equivalent level within a CNI organisation. Demonstrable track record of developing and delivering cyber maturity strategies and roadmaps in complex, regulated environments. Deep expertise in cyber security frameworks: NIST CSF, NCSC CAF, ISO 27001/27002, IEC 62443. Strong understanding of the UK CNI regulatory landscape: NIS Regulations, OFWAT security requirements, NCSC guidance, and emerging NIS2-aligned obligations. Experience designing and overseeing Cyber Assurance Frameworks including GRC, third party risk, policy governance, and audit management. Proven ability to communicate cyber risk in business terms at Board and Executive level. Knowledge of both IT and OT security environments, appreciating the distinct risk profiles of operational technology in water or utilities. Experience managing and developing high performing cyber security teams. Strong interpersonal, leadership, and influencing skills across technical and non technical stakeholders. Desirable Experience CISO experience specifically within the UK water sector or equivalent regulated utility. Experience leading or responding to NCSC CAF assessments or formal NIS regulatory audits. Exposure to OT/SCADA cyber security assurance in water treatment or distribution environments. Non executive advisory or board level cyber governance experience. Published thought leadership or active participation in water sector cyber security forums (e.g. Water Industry Cyber Security). CISSP, CISM, SABSA (CSA), or equivalent senior security certifications. Qualifications Degree in Cyber Security, Information Security, Computer Science, or equivalent (Masters preferred). CISSP, CISM, or SABSA Chartered Security Architect certification strongly preferred. SC / DV security clearance required or eligible.
May 30, 2026
Full time
The Company Cognizant (NASDAQ:CTSH) is a leading provider of information technology, consulting, and business process outsourcing services, dedicated to helping the world's leading companies build stronger businesses. Headquartered in Teaneck, New Jersey (U.S.), Cognizant has over 350,000 employees as of January 2025. Cognizant is a member of the NASDAQ-100, the S&P 500, the Forbes Global 1000, and the Fortune 500 and is ranked among the top performing and fastest growing companies in the world. Cognizant Consulting At Cognizant, our consultants orchestrate the capabilities to truly change the game across strategy, design, technology and industry/functional knowledge to deliver insight at speed and solutions at scale. Our consulting services elevate the unique abilities and business aspirations of customers and employees and build relationships based on trust and value. Water Utilities Consulting We are seeking a highly skilled Cyber Assurance Lead with in-depth knowledge of the water domain and expertise in water network management. This role is pivotal in driving operational efficiency optimizing water networks and delivering transformative solutions to stakeholders in the water utilities sector. The ideal candidate will bridge the gap between business needs and technical solutions ensuring alignment with organizational goals and regulatory compliance. Role Overview We are seeking an exceptional Cyber Assurance Lead who brings CISO-level expertise and deep CNI sector experience to guide our organisation through a comprehensive cyber maturity transformation. This senior role is accountable for defining and driving the cyber assurance strategy, overseeing the cyber maturity roadmap, and providing best-practice leadership across the full spectrum of cyber security governance, risk, and compliance (GRC). The successful candidate will have either served as a CISO or worked extensively at CISO advisory level within CNI environments, with the credibility and authority to influence at Board and Executive Committee level whilst translating strategy into operational delivery. Key Responsibilities Lead the design and delivery of an enterprise-wide Cyber Maturity Assessment, benchmarking the organisation against NIST CSF, NCSC CAF, ISO 27001, and IEC 62443. Develop and own a multi-year Cyber Maturity Roadmap, prioritising investments and improvements based on risk appetite, regulatory obligations, and operational impact. Define and implement a comprehensive Cyber Assurance Framework covering governance, policy, risk management, third-party assurance, and technical control validation. Act as the principal cyber security advisor to the CISO, Executive Committee, and Board, providing clear, risk-informed reporting and strategic recommendations. Oversee second-line cyber assurance activities: control effectiveness testing, penetration testing governance, audit management, and exception handling. Lead engagement with regulators including the NCSC, OFWAT, and Defra on cyber resilience obligations, CAF submissions, and improvement plans. Drive the development and embedding of cyber security best practices across IT, OT, and supply chain domains. Establish cyber security KPIs and metrics, developing dashboards and reporting mechanisms for Board, CISO, and operational audiences. Manage and develop the cyber assurance team, fostering a culture of continuous improvement and learning. Support procurement and contract assurance, ensuring cyber security requirements are embedded in vendor and supply chain arrangements. Essential Experience & Skills Previous CISO experience, or extensive advisory / Deputy CISO experience at an equivalent level within a CNI organisation. Demonstrable track record of developing and delivering cyber maturity strategies and roadmaps in complex, regulated environments. Deep expertise in cyber security frameworks: NIST CSF, NCSC CAF, ISO 27001/27002, IEC 62443. Strong understanding of the UK CNI regulatory landscape: NIS Regulations, OFWAT security requirements, NCSC guidance, and emerging NIS2-aligned obligations. Experience designing and overseeing Cyber Assurance Frameworks including GRC, third party risk, policy governance, and audit management. Proven ability to communicate cyber risk in business terms at Board and Executive level. Knowledge of both IT and OT security environments, appreciating the distinct risk profiles of operational technology in water or utilities. Experience managing and developing high performing cyber security teams. Strong interpersonal, leadership, and influencing skills across technical and non technical stakeholders. Desirable Experience CISO experience specifically within the UK water sector or equivalent regulated utility. Experience leading or responding to NCSC CAF assessments or formal NIS regulatory audits. Exposure to OT/SCADA cyber security assurance in water treatment or distribution environments. Non executive advisory or board level cyber governance experience. Published thought leadership or active participation in water sector cyber security forums (e.g. Water Industry Cyber Security). CISSP, CISM, SABSA (CSA), or equivalent senior security certifications. Qualifications Degree in Cyber Security, Information Security, Computer Science, or equivalent (Masters preferred). CISSP, CISM, or SABSA Chartered Security Architect certification strongly preferred. SC / DV security clearance required or eligible.
Have you previously served in the military, blue light services or currently as a serving reservist or military spouse? Do you have demonstrable experience in Data, Analytics, or related technology roles? Are you ready to transition into a new career with upskilling and career coaching included? Then you'll want to hear about our award-winning Ex-Forces Programme - designed to help service leavers, veterans and former blue light personnel transition into a new civilian career in our Data and Analytics Practice. Since 2012, FDM's Ex-Forces Programme has provided a next step for over 1,100 people globally, offering opportunities for personnel from all ranks across the three services into a new career in business and technology consultancy. No university degree required. Delivering industry recognised coaching, our Ex-Forces programme provides a soft landing into a meaningful second career as an FDM Consultant with renowned businesses, and in an ever-growing industry. You'll be joining FDM as a Consultant within our Data and Analytics Practice , where you will be delivering large-scale projects for our clients across a wide range of sectors and specialist areas. Depending on your background and experience, you could take on the role of: BI Developer Data Engineer Data Scientist Machine learning Engineer Robotic Process Automation Consultant Within the FDM Skills Lab you'll receive upskilling in: Business intelligence and advanced analytics Diverse data modelling, engineering and warehousing Automation and machine learning Modern data platforms and tools used to forecast, analyse and unlock business value This structured learning is designed to complement your prior experience, helping you gain momentum and confidence while staying aligned with the current market. There are progression opportunities towards Principal Consultant level and the opportunity to explore diverse roles and assignments for a range of global companies. About You Open to UK service leavers, veterans, reservists, former Blue light Personnel and eligible military spouses who have experience in analytical, technical or data-focused roles. Suitable backgrounds include intelligence, signals, cyber, information systems, engineering, operational planning, capability analysis, logistics or technical trades where analysing data, producing reports, working with complex systems or supporting decision-making was part of your role and responsibilities. This programme supports transition into civilian careers in Data and Analytics, with structured training, coaching and no degree requirement. Minimum qualifications Previous career in the military, blue light services or as a serving reservist Experience in service within data analytics, technology or a related field A strong aptitude and interest in business and technology as well as data driven problem solving Commitment to at least two years of full-time employment with FDM The right to work in the UK Why join us? Support from the Ex-Forces network within FDM Two days per annum allocated to support military charities of your choice Career coaching, mentoring and access to upskilling throughout your entire FDM career Initial upskilling pre-assignment that has been accredited by TechSkills Assignments with global companies and opportunities to work abroad Opportunity to obtain certifications from Microsoft, Salesforce, Cisco and more About Us FDM is an award-winning global leader in tech and business talent solutions, backed by more than 35 years of industry experience. We have centres across Europe, North America, and Asia-Pacific, and a global workforce of over 2500 employees. FDM has shown exponential growth throughout the years, firmly establishing itself as an award-winning employer, currently listed on the FTSE4Good Index and as a 2026 Financial Times UK 'Best Employer'. Diversity and Inclusion FDM Group is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, national origin, age, disability, veteran status or any other status protected by federal, provincial or local laws.
May 19, 2026
Full time
Have you previously served in the military, blue light services or currently as a serving reservist or military spouse? Do you have demonstrable experience in Data, Analytics, or related technology roles? Are you ready to transition into a new career with upskilling and career coaching included? Then you'll want to hear about our award-winning Ex-Forces Programme - designed to help service leavers, veterans and former blue light personnel transition into a new civilian career in our Data and Analytics Practice. Since 2012, FDM's Ex-Forces Programme has provided a next step for over 1,100 people globally, offering opportunities for personnel from all ranks across the three services into a new career in business and technology consultancy. No university degree required. Delivering industry recognised coaching, our Ex-Forces programme provides a soft landing into a meaningful second career as an FDM Consultant with renowned businesses, and in an ever-growing industry. You'll be joining FDM as a Consultant within our Data and Analytics Practice , where you will be delivering large-scale projects for our clients across a wide range of sectors and specialist areas. Depending on your background and experience, you could take on the role of: BI Developer Data Engineer Data Scientist Machine learning Engineer Robotic Process Automation Consultant Within the FDM Skills Lab you'll receive upskilling in: Business intelligence and advanced analytics Diverse data modelling, engineering and warehousing Automation and machine learning Modern data platforms and tools used to forecast, analyse and unlock business value This structured learning is designed to complement your prior experience, helping you gain momentum and confidence while staying aligned with the current market. There are progression opportunities towards Principal Consultant level and the opportunity to explore diverse roles and assignments for a range of global companies. About You Open to UK service leavers, veterans, reservists, former Blue light Personnel and eligible military spouses who have experience in analytical, technical or data-focused roles. Suitable backgrounds include intelligence, signals, cyber, information systems, engineering, operational planning, capability analysis, logistics or technical trades where analysing data, producing reports, working with complex systems or supporting decision-making was part of your role and responsibilities. This programme supports transition into civilian careers in Data and Analytics, with structured training, coaching and no degree requirement. Minimum qualifications Previous career in the military, blue light services or as a serving reservist Experience in service within data analytics, technology or a related field A strong aptitude and interest in business and technology as well as data driven problem solving Commitment to at least two years of full-time employment with FDM The right to work in the UK Why join us? Support from the Ex-Forces network within FDM Two days per annum allocated to support military charities of your choice Career coaching, mentoring and access to upskilling throughout your entire FDM career Initial upskilling pre-assignment that has been accredited by TechSkills Assignments with global companies and opportunities to work abroad Opportunity to obtain certifications from Microsoft, Salesforce, Cisco and more About Us FDM is an award-winning global leader in tech and business talent solutions, backed by more than 35 years of industry experience. We have centres across Europe, North America, and Asia-Pacific, and a global workforce of over 2500 employees. FDM has shown exponential growth throughout the years, firmly establishing itself as an award-winning employer, currently listed on the FTSE4Good Index and as a 2026 Financial Times UK 'Best Employer'. Diversity and Inclusion FDM Group is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, national origin, age, disability, veteran status or any other status protected by federal, provincial or local laws.
Principal Security Consultant - Defence & National Security Hybrid / Remote with client travel Up to £80,000 + Bonus + Excellent Benefits SC or DV Clearance Required A growing cyber security consultancy delivering high-impact work across Defence, Government and National Security is looking to hire a Principal Security Consultant to join its expanding consulting team click apply for full job details
May 18, 2026
Full time
Principal Security Consultant - Defence & National Security Hybrid / Remote with client travel Up to £80,000 + Bonus + Excellent Benefits SC or DV Clearance Required A growing cyber security consultancy delivering high-impact work across Defence, Government and National Security is looking to hire a Principal Security Consultant to join its expanding consulting team click apply for full job details
Cyber Security GRC Consultant (DV Cleared) Location: Cambridgeshire / London, Hybrid - c. 3 days minimum on-site presence required Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within MOD and Public Sector environments. You'll collaborate with multi-disciplinary teams to define and implement security risk assessments and best practice solutions, ensuring alignment with business risk appetites and transformation goals. You'll be part of a knowledge-sharing culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD/Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce clear reporting on vulnerabilities, risks, controls, and treatment activities. Provide pragmatic remediation and risk management guidance. Support secure design across technology platforms including cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC and UK Cyber Security Council professional registration at either Chartered or Principal for Risk Management. Active DV clearance required Strong working knowledge of: Security Assurance Coordinator or Delivery Team Security Lead roles JSP440, JSP604/453 & JSP490 Working with system secure design MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups, Host based firewalls, Web Application Firewalls Physical Network Infrastructure, Anti-Patterns, Network Firewalls, IDS/IPS, DMZs AI use cases, secure configuration (ISO42001 knowledge preferable), ITHC scoping and remediation action plans. HLD and LLD reviews and analysis. Working knowledge and experience of tooling relating to cloud security posture management offerings, cloud native security (AWS/Azure) and endpoint security. Proficient in Public Key Infrastructure, Data at Rest/inTransit, Cryptography, Privileged User Access Management, Zero Trust, Cross Domain Solutions and Role-based Access Controls. Thrives on tackling challenges with creative solutions, challenging the normal. What's in it for You Hybrid Working: c. 3 days onsite per week. Career Development: Continuous learning and professional growth. Interested? Submit your application to learn more about this exciting opportunity Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.
May 04, 2026
Full time
Cyber Security GRC Consultant (DV Cleared) Location: Cambridgeshire / London, Hybrid - c. 3 days minimum on-site presence required Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within MOD and Public Sector environments. You'll collaborate with multi-disciplinary teams to define and implement security risk assessments and best practice solutions, ensuring alignment with business risk appetites and transformation goals. You'll be part of a knowledge-sharing culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD/Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce clear reporting on vulnerabilities, risks, controls, and treatment activities. Provide pragmatic remediation and risk management guidance. Support secure design across technology platforms including cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC and UK Cyber Security Council professional registration at either Chartered or Principal for Risk Management. Active DV clearance required Strong working knowledge of: Security Assurance Coordinator or Delivery Team Security Lead roles JSP440, JSP604/453 & JSP490 Working with system secure design MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups, Host based firewalls, Web Application Firewalls Physical Network Infrastructure, Anti-Patterns, Network Firewalls, IDS/IPS, DMZs AI use cases, secure configuration (ISO42001 knowledge preferable), ITHC scoping and remediation action plans. HLD and LLD reviews and analysis. Working knowledge and experience of tooling relating to cloud security posture management offerings, cloud native security (AWS/Azure) and endpoint security. Proficient in Public Key Infrastructure, Data at Rest/inTransit, Cryptography, Privileged User Access Management, Zero Trust, Cross Domain Solutions and Role-based Access Controls. Thrives on tackling challenges with creative solutions, challenging the normal. What's in it for You Hybrid Working: c. 3 days onsite per week. Career Development: Continuous learning and professional growth. Interested? Submit your application to learn more about this exciting opportunity Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.
Principal Consultant - Incident Response Salary: Up to £85,000 + cash benefits Location: London, Cardiff, Manchester, Birmingham or Edinburgh Working pattern: Hybrid - 2-3 days per week in the office About the Role Our client is seeking an experienced Principal Consultant to join their Incident Response practice. This is a senior, client-facing role within a highly regarded cyber security team, delivering proactive incident readiness engagements. You will work closely with organisations to strengthen their preparedness. This includes reviewing and developing incident response plans, facilitating tabletop exercises, running simulated attack scenarios, and advising on preventative engineering and operational readiness. The focus is on ensuring clients are not only able to respond effectively in a crisis, but are proactively building resilience into their environments. This role offers the opportunity to work on complex and high-profile cyber incidents, while also shaping how organisations think about planning, governance and technical response capability. The Role As a Principal Consultant, you will: Lead and deliver technical incident response engagements, helping clients respond, remediate and recover from cyber security incidents. Conduct high-quality forensic and technical analysis to determine root cause, scope and impact of security breaches. Produce clear, well-structured outputs ranging from executive briefings to detailed technical investigation reports. Act as the technical lead on small to medium-sized incidents, overseeing team members and ensuring technical excellence throughout delivery. Support detection engineering and SecOps enhancement initiatives, including identifying coverage gaps in EDR/SIEM tooling and contributing to orchestration and automation playbooks. Work directly with client technical teams, acting as a trusted advisor and primary point of contact during engagements. Scope and design both emergency response and preparatory readiness engagements. In addition to reactive incident work, you will: Assess and improve clients' incident response plans and protocols. Facilitate tabletop exercises and simulated attack scenarios to test organisational readiness. Deliver incident preparedness services, including playbook development, runbook design and capability gap analysis. Provide threat briefings and strategic guidance to help organisations strengthen their preventative and detection capabilities. Mentor and develop junior consultants within the practice. About You Our client is looking for an experienced incident responder with strong technical depth and the ability to engage confidently with stakeholders at all levels. You will have recent hands-on experience in at least two of the following areas: Digital forensics and technical incident response Enterprise security operations tooling and processes Detection engineering within EDR/SIEM environments, including addressing ATT&CK TTP coverage gaps Enterprise IT networks and Active Directory Cloud platforms such as Microsoft 365, Azure, AWS or GCP You will also demonstrate: A strong understanding of threat actors and the techniques used to compromise organisations. The ability to analyse complex technical problems and communicate findings clearly to both technical and non-technical audiences. Experience leading investigations and managing client-facing engagements. Familiarity with incident readiness and preparedness services, including tabletop exercises, playbook development and response planning. The ability to build strong working relationships with clients and internal stakeholders. A commitment to mentoring and developing others within the team. This is an excellent opportunity for an experienced incident response professional who enjoys both the intensity of live incident work and the strategic value of helping organisations strengthen their cyber resilience before an attack occurs. Apply now for immediate review! Principal Consultant Incident Response, Incident Response Manager, Principal Consultant Incident Response, Incident Response Consultant, Principal Consultant Incident Response, Incident Response, Principal Consultant Incident Response, Incident Readiness Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter and LinkedIn - Circle Recruitment.
May 03, 2026
Full time
Principal Consultant - Incident Response Salary: Up to £85,000 + cash benefits Location: London, Cardiff, Manchester, Birmingham or Edinburgh Working pattern: Hybrid - 2-3 days per week in the office About the Role Our client is seeking an experienced Principal Consultant to join their Incident Response practice. This is a senior, client-facing role within a highly regarded cyber security team, delivering proactive incident readiness engagements. You will work closely with organisations to strengthen their preparedness. This includes reviewing and developing incident response plans, facilitating tabletop exercises, running simulated attack scenarios, and advising on preventative engineering and operational readiness. The focus is on ensuring clients are not only able to respond effectively in a crisis, but are proactively building resilience into their environments. This role offers the opportunity to work on complex and high-profile cyber incidents, while also shaping how organisations think about planning, governance and technical response capability. The Role As a Principal Consultant, you will: Lead and deliver technical incident response engagements, helping clients respond, remediate and recover from cyber security incidents. Conduct high-quality forensic and technical analysis to determine root cause, scope and impact of security breaches. Produce clear, well-structured outputs ranging from executive briefings to detailed technical investigation reports. Act as the technical lead on small to medium-sized incidents, overseeing team members and ensuring technical excellence throughout delivery. Support detection engineering and SecOps enhancement initiatives, including identifying coverage gaps in EDR/SIEM tooling and contributing to orchestration and automation playbooks. Work directly with client technical teams, acting as a trusted advisor and primary point of contact during engagements. Scope and design both emergency response and preparatory readiness engagements. In addition to reactive incident work, you will: Assess and improve clients' incident response plans and protocols. Facilitate tabletop exercises and simulated attack scenarios to test organisational readiness. Deliver incident preparedness services, including playbook development, runbook design and capability gap analysis. Provide threat briefings and strategic guidance to help organisations strengthen their preventative and detection capabilities. Mentor and develop junior consultants within the practice. About You Our client is looking for an experienced incident responder with strong technical depth and the ability to engage confidently with stakeholders at all levels. You will have recent hands-on experience in at least two of the following areas: Digital forensics and technical incident response Enterprise security operations tooling and processes Detection engineering within EDR/SIEM environments, including addressing ATT&CK TTP coverage gaps Enterprise IT networks and Active Directory Cloud platforms such as Microsoft 365, Azure, AWS or GCP You will also demonstrate: A strong understanding of threat actors and the techniques used to compromise organisations. The ability to analyse complex technical problems and communicate findings clearly to both technical and non-technical audiences. Experience leading investigations and managing client-facing engagements. Familiarity with incident readiness and preparedness services, including tabletop exercises, playbook development and response planning. The ability to build strong working relationships with clients and internal stakeholders. A commitment to mentoring and developing others within the team. This is an excellent opportunity for an experienced incident response professional who enjoys both the intensity of live incident work and the strategic value of helping organisations strengthen their cyber resilience before an attack occurs. Apply now for immediate review! Principal Consultant Incident Response, Incident Response Manager, Principal Consultant Incident Response, Incident Response Consultant, Principal Consultant Incident Response, Incident Response, Principal Consultant Incident Response, Incident Readiness Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter and LinkedIn - Circle Recruitment.
Lead Cyber Security Consultant (Defence) UK Remote (travel required approx. 60% / 3 days onsite per week) Full-time & Permanent Consultancy Competitive salary + Excellent benefits About the Opportunity We're working with an established and growing UK cybersecurity consultancy expanding its Defence and Public Sector practice. This is a great opportunity for an experienced security professional to lead high-impact programmes, influence senior stakeholders, and shape security outcomes across MOD and wider Defence environments. The Role As a Lead Cyber Security Consultant, you'll take ownership of multiple client engagements, delivering expert advice across governance, risk, compliance, and Secure by Design practices. You'll work closely with senior stakeholders to assess risk, define security controls, deliver assurance activities, and support secure architecture across complex, high-profile systems. This is a hands-on, strategic role that combines leadership, client engagement, and technical depth. Key Responsibilities Lead Secure by Design and security assurance activities across MOD and Public Sector programmes Support and guide the application of risk management frameworks, ISMS, and Enterprise Security Risk Management Conduct and lead workshops with technical and business stakeholders Produce clear, actionable reporting on risk, vulnerabilities, and remediation Provide pragmatic, proportionate recommendations aligned to business goals Support secure design across cloud and on-premise platforms Contribute to internal knowledge sharing and thought leadership Experience & Expertise Strong background in Technical/Security Architecture or Governance, Risk & Compliance Experience working in Defence / MOD environments Strong analytical and communication skills, with the ability to influence senior stakeholders Passion for continuous learning and high-quality security outcomes Desirable Knowledge SAC (Security Assurance Coordinator) or Delivery Team Security Lead experience MOD/GDS Secure by Design Familiarity with: JSP440, JSP604/453, JSP490 Supplier Chain Assurance GDPR, PCI DSS, ICO ISO 27001, NIST CSF, CIS Controls v8 Skills in: Threat modelling (kill chain, attack trees, etc.) Cloud security (AWS, Azure), containerisation, firewalls Secure SDLC HLD/LLD review ITHC scoping and remediation Certifications (Highly Desirable) CIISEC UK Cyber Security Council registration (Chartered or Principal) AWS/Azure Security (Professional) CCSP, CISSP, CISM ISO 27001 Lead Auditor Security Vetting / Clearance Active and transferable DV clearance is essential Must be a sole British National and UK-based Benefits Competitive salary and benefits package Private healthcare & wellbeing support Flexible working (remote with travel) Career pathways, mentoring and continuous learning Inclusive, supportive culture Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.
May 03, 2026
Full time
Lead Cyber Security Consultant (Defence) UK Remote (travel required approx. 60% / 3 days onsite per week) Full-time & Permanent Consultancy Competitive salary + Excellent benefits About the Opportunity We're working with an established and growing UK cybersecurity consultancy expanding its Defence and Public Sector practice. This is a great opportunity for an experienced security professional to lead high-impact programmes, influence senior stakeholders, and shape security outcomes across MOD and wider Defence environments. The Role As a Lead Cyber Security Consultant, you'll take ownership of multiple client engagements, delivering expert advice across governance, risk, compliance, and Secure by Design practices. You'll work closely with senior stakeholders to assess risk, define security controls, deliver assurance activities, and support secure architecture across complex, high-profile systems. This is a hands-on, strategic role that combines leadership, client engagement, and technical depth. Key Responsibilities Lead Secure by Design and security assurance activities across MOD and Public Sector programmes Support and guide the application of risk management frameworks, ISMS, and Enterprise Security Risk Management Conduct and lead workshops with technical and business stakeholders Produce clear, actionable reporting on risk, vulnerabilities, and remediation Provide pragmatic, proportionate recommendations aligned to business goals Support secure design across cloud and on-premise platforms Contribute to internal knowledge sharing and thought leadership Experience & Expertise Strong background in Technical/Security Architecture or Governance, Risk & Compliance Experience working in Defence / MOD environments Strong analytical and communication skills, with the ability to influence senior stakeholders Passion for continuous learning and high-quality security outcomes Desirable Knowledge SAC (Security Assurance Coordinator) or Delivery Team Security Lead experience MOD/GDS Secure by Design Familiarity with: JSP440, JSP604/453, JSP490 Supplier Chain Assurance GDPR, PCI DSS, ICO ISO 27001, NIST CSF, CIS Controls v8 Skills in: Threat modelling (kill chain, attack trees, etc.) Cloud security (AWS, Azure), containerisation, firewalls Secure SDLC HLD/LLD review ITHC scoping and remediation Certifications (Highly Desirable) CIISEC UK Cyber Security Council registration (Chartered or Principal) AWS/Azure Security (Professional) CCSP, CISSP, CISM ISO 27001 Lead Auditor Security Vetting / Clearance Active and transferable DV clearance is essential Must be a sole British National and UK-based Benefits Competitive salary and benefits package Private healthcare & wellbeing support Flexible working (remote with travel) Career pathways, mentoring and continuous learning Inclusive, supportive culture Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.
Our client, a leading consultancy in the cyber security sector, specialising in defence & security, is currently seeking a talented Cyber Security Consultant to join their team on a permanent basis. This role involves delivering specialist cyber security professional services, helping businesses and organisations to understand the value of their information assets, assess associated security risks, and develop technical and procedural controls to protect them. About the Role: As a Cyber Security Consultant, you will be responsible for providing expert cyber security technical advice, guidance and support. Specific responsibilities include: Advising and supporting companies, organisations, programmes or projects on all aspects of cyber security Producing formal deliverables such as security policies, operating procedures, risk assessments, security assurance management plans, and audits Liaising and working closely with customers to meet project/programme deadlines Understanding, assessing, and articulating business and information security risk at a technical and business process level Reviewing the effectiveness of existing security controls and proposing proportionate security improvements Supporting business development by developing and managing relationships with existing and new customers Job Requirements: Essential Skills & Experience: Recognised industry cyber security certifications or qualifications (e.g., CISSP, CISM, CISA) Relevant experience in a cyber security role Knowledge of cyber security industry standards and good practices Baseline knowledge of information systems (e.g., cloud, access control, networking) Experience in a customer-facing role Good understanding and working knowledge of Governance, Risk & Compliance Strong written, verbal, and interpersonal communication skills Ability to work independently, manage own time and work to deadlines Desirable Skills & Experience: UK Cyber Security Council - Professional Registration Title (e.g., Chartered, Principal, Practitioner) Knowledge and understanding of HMG and MoD cyber security policies, standards, guidance, security processes, and organisation Experience implementing the Secure by Design principles-based approach Previous experience as a Security Manager or Security Lead on a MoD, HMG, or industry project/programme Knowledge and understanding of MOD cyber security policy (e.g., JSP440), standards, and guidance Chairing and participation in HMG/MoD Security Working Groups Experience with the NCSC Cyber Assurance Framework (CAF) and GovAssure audits Knowledge and experience of NIST standards, e.g., the Cyber Security Framework, Risk Assessment Cyber security audit skills, knowledge and experience (e.g., ISO/IEC 27001 audit) Experience of Supplier Assurance and security of the supply chain Experience of scoping and assessing output from IT Health Checks, Penetration Tests, and Vulnerability Assessments Requirements: Ideally National Security Vetted, SC or DV, if not, willing to undergo government security vetting process Eligible to work in the UK and have the appropriate right to work documents Willing to travel as necessary Benefits: Opportunity to work on a variety of interesting and challenging projects Professional development and training opportunities Supportive and collaborative work environment Employee benefits package If you are an experienced Cyber Security Consultant looking for a new opportunity to further develop your career, we would love to hear from you. Apply now to join our client's dynamic and talented team.
Apr 30, 2026
Full time
Our client, a leading consultancy in the cyber security sector, specialising in defence & security, is currently seeking a talented Cyber Security Consultant to join their team on a permanent basis. This role involves delivering specialist cyber security professional services, helping businesses and organisations to understand the value of their information assets, assess associated security risks, and develop technical and procedural controls to protect them. About the Role: As a Cyber Security Consultant, you will be responsible for providing expert cyber security technical advice, guidance and support. Specific responsibilities include: Advising and supporting companies, organisations, programmes or projects on all aspects of cyber security Producing formal deliverables such as security policies, operating procedures, risk assessments, security assurance management plans, and audits Liaising and working closely with customers to meet project/programme deadlines Understanding, assessing, and articulating business and information security risk at a technical and business process level Reviewing the effectiveness of existing security controls and proposing proportionate security improvements Supporting business development by developing and managing relationships with existing and new customers Job Requirements: Essential Skills & Experience: Recognised industry cyber security certifications or qualifications (e.g., CISSP, CISM, CISA) Relevant experience in a cyber security role Knowledge of cyber security industry standards and good practices Baseline knowledge of information systems (e.g., cloud, access control, networking) Experience in a customer-facing role Good understanding and working knowledge of Governance, Risk & Compliance Strong written, verbal, and interpersonal communication skills Ability to work independently, manage own time and work to deadlines Desirable Skills & Experience: UK Cyber Security Council - Professional Registration Title (e.g., Chartered, Principal, Practitioner) Knowledge and understanding of HMG and MoD cyber security policies, standards, guidance, security processes, and organisation Experience implementing the Secure by Design principles-based approach Previous experience as a Security Manager or Security Lead on a MoD, HMG, or industry project/programme Knowledge and understanding of MOD cyber security policy (e.g., JSP440), standards, and guidance Chairing and participation in HMG/MoD Security Working Groups Experience with the NCSC Cyber Assurance Framework (CAF) and GovAssure audits Knowledge and experience of NIST standards, e.g., the Cyber Security Framework, Risk Assessment Cyber security audit skills, knowledge and experience (e.g., ISO/IEC 27001 audit) Experience of Supplier Assurance and security of the supply chain Experience of scoping and assessing output from IT Health Checks, Penetration Tests, and Vulnerability Assessments Requirements: Ideally National Security Vetted, SC or DV, if not, willing to undergo government security vetting process Eligible to work in the UK and have the appropriate right to work documents Willing to travel as necessary Benefits: Opportunity to work on a variety of interesting and challenging projects Professional development and training opportunities Supportive and collaborative work environment Employee benefits package If you are an experienced Cyber Security Consultant looking for a new opportunity to further develop your career, we would love to hear from you. Apply now to join our client's dynamic and talented team.
Technical Account Manager (Cyber Security) Remote UK Based Up to £60,000 per annum plus additional benefits Additional: Due to security clearance required candidates wishing to apply must be based in the UK Our client, a leading UK Based MSSP, are looking for an experienced Cyber Security specialist to join their solutions team working as the dedicated Technical Account Manager. As the Technical Account Manager, you will bring your technical know-how, MDR/SOC, and act as the first point of call for customer service improvements Assist with the onboarding and building an understanding of customer business risks Work with the onboarding consultants to build Threat Models and maintain them during live service Allocated Technical Account Manager to act as a first point of contact for operational matters and proactive management of high priority and ongoing incidents Act as Customer advocate within the team Own the operational relationship between customers and the Team Assist the operational teams in fixing issues that arise during the operation of services Identify and implement, with the assistance of engineers and architects, technical enhancements to the services that drive value for customers Act as the Subject matter Expert to improve the quality of service and maintain a roadmap for those customers Core experience Previous experience and understanding of the operation of Security Operation Centres(SOC) and detection/response A strong understanding of basic cyber security principals Ability to manage time effectively and deliver tasks independently together with excellent interpersonal and communication skills. Any experience of working in/around Security Operation Centres, using and/or managing SIEM/EDR/SOAR platforms, a good understanding of cloud platforms, and a basic ability to script would all be advantageous. Certification - Advantageous but not essential General security (CREST CPSA / CPIA / CRIA / CMRE / CNIA / CHIA • CompTIA Security+, CompTIA Network+)
Apr 30, 2026
Full time
Technical Account Manager (Cyber Security) Remote UK Based Up to £60,000 per annum plus additional benefits Additional: Due to security clearance required candidates wishing to apply must be based in the UK Our client, a leading UK Based MSSP, are looking for an experienced Cyber Security specialist to join their solutions team working as the dedicated Technical Account Manager. As the Technical Account Manager, you will bring your technical know-how, MDR/SOC, and act as the first point of call for customer service improvements Assist with the onboarding and building an understanding of customer business risks Work with the onboarding consultants to build Threat Models and maintain them during live service Allocated Technical Account Manager to act as a first point of contact for operational matters and proactive management of high priority and ongoing incidents Act as Customer advocate within the team Own the operational relationship between customers and the Team Assist the operational teams in fixing issues that arise during the operation of services Identify and implement, with the assistance of engineers and architects, technical enhancements to the services that drive value for customers Act as the Subject matter Expert to improve the quality of service and maintain a roadmap for those customers Core experience Previous experience and understanding of the operation of Security Operation Centres(SOC) and detection/response A strong understanding of basic cyber security principals Ability to manage time effectively and deliver tasks independently together with excellent interpersonal and communication skills. Any experience of working in/around Security Operation Centres, using and/or managing SIEM/EDR/SOAR platforms, a good understanding of cloud platforms, and a basic ability to script would all be advantageous. Certification - Advantageous but not essential General security (CREST CPSA / CPIA / CRIA / CMRE / CNIA / CHIA • CompTIA Security+, CompTIA Network+)
