AVP/VP Cyber Audit

Eames Consulting; London; On-site; GBP 80,000 - 120,000; Full time

Job summary

A prominent consulting firm is seeking a Cyber Audit professional at the VP level to join their Internal Audit team. You will assess risks, evaluate controls, and provide assurance around cybersecurity governance and risk management. The ideal candidate has solid experience in cyber security auditing and relevant certifications such as CISA or CISSP. This opportunity is based in London with a focus on enhancing the organization's overall cyber risk posture.

Qualifications

• Solid experience in risk and control assessments, particularly in cyber security.
• Hands-on knowledge in areas including data security, network configuration, and cyber resilience.
• Practical experience with cybersecurity frameworks.

Responsibilities

• Plan and conduct audits, assess risks, evaluate controls.
• Offer actionable recommendations to strengthen business processes.

Skills

Risk and control assessments

Data security and cryptography

Cyber incident response

Threat and vulnerability management

Identity and access management

Cloud platform security

Education

Relevant certifications like CISA, CISM, CISSP

Technical graduate degree

Tools

NIST

CIS

ISO

Job description

Overview

AVP/VP - Cyber Audit (Internal Audit). We\'re looking for a Cyber Audit professional at the VP level to join our Internal Audit team. In this role, you\'ll work closely with different teams across the organization to deliver independent, reliable assurance to senior leadership and the Board around cybersecurity governance, risk management, and internal controls.

Responsibilities

• Plan and conduct audits, assess risks, evaluate controls, and help resolve issues to provide independent, reliable assurance to senior leadership and the Board around cybersecurity governance, risk management, and internal controls.
• Offer actionable recommendations to strengthen business processes and improve overall cyber risk posture.

What we\'re looking for

• Solid experience in risk and control assessments, particularly in cyber security, either within internal audit or a control testing function.
• Hands-on knowledge in areas such as:
  • Data security and cryptography
  • Network and system configuration
  • Cyber incident response
  • Threat and vulnerability management
  • Identity and access management
  • Data loss prevention
  • Cyber resilience strategies
• Familiarity with emerging technologies and the evolving landscape of cyber threats.
• Relevant certifications like CISA, CISM, CISSP, or a technical graduate degree.
• Understanding of applicable regulations and compliance standards.
• Practical experience with cybersecurity frameworks like NIST, CIS, or ISO.
• Strong grasp of threat analysis models like the Cyber Kill Chain and MITRE ATT&CK, as well as threat modelling techniques.
• Deep technical knowledge of cloud platforms (AWS, Azure), including potential security gaps such as misconfigurations, container vulnerabilities (Kubernetes/Docker), and serverless risks.

Eames Consulting is acting as an Employment Agency in relation to this vacancy.