Cyber Advisory - Senior Consultant

Mazars; Leeds; On-site; GBP 40,000 - 60,000; Full time

Job summary

A global professional services network is seeking a candidate for a cyber security role focused on delivering internal audits and consulting engagements. The ideal candidate should have over 3 years of experience in security risk management and a strong understanding of compliance with regulations like NIS2 and DORA. This position involves mentoring junior consultants and managing client communication. The company offers a diverse and inclusive work environment with support for professional certifications.

Qualifications

• 3+ years of varied experience in information security or risk management.
• Full understanding of DORA regulation & NIS2 Directive.
• Experience working with regulated financial services entities.

Responsibilities

• Support the team in delivering internal audits and advisory engagements.
• Act as a subject matter expert in security and risk management.
• Manage and mentor junior consultants.
• Contribute to the development of project management methodologies.

Skills

Cyber security

Security risk management

Regulatory compliance (NIS2, DORA)

Communication skills

Project management

Education

CompTIA Security +, CRISC, CISM or CISSP certification

Job description

Job Purpose

The role is to support the team in delivering internal audits but also larger scale advisory engagements. This means assisting in all aspects of the project lifecycle primary execution of fieldwork and preparation of deliverables including actively contributing to final recommendations.

Your responsibilities include :

• Actively involve in the delivery of our Internal Audit / Consulting engagements.
• Act a subject matter expert in various security and risk management domains (e.g., IT risk management, cyber risk, security target operating model, governance, compliance, cyber security maturity assessment, metrics and C-level dashboards…) and leading industry-based practices (e.g. NIST CSF, ISO 2700x…)
• Managing the coordination and communication of key findings and results of engagements, producing written reports and supporting oral presentations to senior client management and key senior stakeholders
• Maintaining an expertise and currency in industry trends
• Managing and mentoring junior consultants assigned as members of engagements
• Contributing to the development of project management, quality assurance and professional consulting and auditing approaches / methodologies.

The Candidate

We're looking for someone who is seriously interested in the cyber security area and wants to get first‑hand experience in working in multiple industries with companies who need our help. We will help support you in every step of the way with on the job training as well as support for attaining industry professional certifications which will enhance your career in this field.

Skill, Knowledge & Experience

The candidate will be expected to use their technical expertise to delivery projects and to ensure that our clients comply with their regulatory obligations including NIS2 or DORA.

You will need to have a broad experience of security risk management and have evidence of experience in a number of the following fields of expertise :

• Full understanding of the DORA regulation & NIS2 Directive and experience in implementing the regulations
• Experience working with regulated financial services entities
• 3+ years' variedexperience in information security, risk management
• Strongunderstanding of security governance, risk, and compliance frameworks such as ISO 27001, NIST 800-53 / CSF, NIS2 and DORA
• Hands-onexperience building credibility with external stakeholders
• Provenability to guide and collaborate with senior stakeholders in a similar GRC, security, or risk management role
• Excellentcommunication skills, with the ability to present complex information clearly and effectively to non-technical stakeholders
• Theability to explain complex topics to a diverse range of audiences
• Strong attention to detail and theability to deliver high quality work
• CompTia Security +, CRISC, CISM or CISSP certification advantageous.

About Forvis Mazars

Forvis Mazars is a leading global professional services network. The network operates under a single brand worldwide, with just two members : Forvis Mazars LLP in the United States and Forvis Mazars Group SC, an internationally integrated partnership operating in over 100 countries and territories.

Both member firms share a commitment to providing an unmatched client experience, delivering audit & assurance, tax and advisory services around the world. Together, our strategic vision strives to move our clients, people, industry and communities forward. Through our reach and areas of expertise, we help organisations respond to emerging sustainability issues in the global marketplace including human rights, climate change, environmental impacts and culture.

We are one diverse, multicultural, multi-generational team with a huge sense of connection and belonging. This is a place where you can take ownership of your career, get involved, believe in yourself and put your ideas into action.

At Forvis Mazars, we empower our people and celebrate individuality. We thrive on teamwork and are agile. We have bold foresight and give people the freedom to make a personal contribution to our shared purpose. We support one another to deliver quality, create change and have a deeper understanding, to help make an impact so that everyone can reach their full potential.

Being inclusive is core to our culture at Forvis Mazars; we want to ensure everyone, whether in the recruitment process or beyond is fully supported to be their unique self. To read more about our approachclick here.

Our aim is to make the recruitment process as accessible and inclusive as possible - please contact us to discuss any changes you may require so we can work with you to support you throughout your application.

Visit forvismazars.com / uk to learn more.