Cyber Essentials & Cyber Essentials Plus Assessor

TwentyFour IT Services Ltd; Doncaster; Hybrid; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Hybrid working

Company pension

Professional development

Training funding

Diverse client exposure

Collaborative team

Job summary

TwentyFour IT Services Ltd in Doncaster is seeking an experienced Cyber Essentials and Cyber Essentials Plus Assessor to join our growing security team. You will deliver CE/CE+ assessments for diverse clients across the UK, applying IASME and NCSC guidelines.

The role requires current IASME CE and CE+ assessor qualifications, hands-on vulnerability testing, and clear reporting. We offer hybrid working, ongoing training, and the chance to contribute to trusted security certifications.

Qualifications

• Current IASME Cyber Essentials Assessor qualification.
• Current IASME Cyber Essentials Plus Assessor qualification or recognised authorisation.
• Practical experience delivering CE and CE+ assessments.
• Strong understanding of the five Cyber Essentials technical control areas.
• Vulnerability assessments and interpreting scanning results.
• Knowledge of Microsoft 365, Entra ID, Windows OS and endpoint security.
• Understanding of networking, firewalls, TCP/IP and remote access.
• Experience with patch management, MFA and malware protection.
• Ability to manage assessments from scoping to reporting.
• Excellent written communication and technical documentation.

Responsibilities

• Independently conduct Cyber Essentials assessments and validate compliance.
• Deliver CE+ assessments according to IASME/NCSC methodologies.
• Perform vulnerability assessments using scanning tools.
• Assess Windows, macOS, cloud services, endpoints and network infra.
• Evaluate firewalls, secure configuration, access management and updates.
• Identify vulnerabilities and non-compliance issues.
• Produce comprehensive, accurate assessment reports.
• Communicate findings to technical and non-technical stakeholders.
• Maintain assessment evidence and testing records.
• Coordinate assessment activities and customer communications.
• Stay updated on scheme changes and best practices.
• Collaborate with internal cyber security teams while remaining independent.

Skills

IASME CE Assessor

CE+ Assessor

Vulnerability assessment

Microsoft 365

Windows OS

Networking

Education

IASME CE Assessor qualification

IASME CE+ Assessor qualification

Tools

Nessus

Qualys

Job description

Salary: Depending on experience

Job Type: Permanent, Full-Time

Company: TwentyFour IT Services Ltd

About TwentyFour IT

TwentyFour IT is an established and growing Managed IT Services and Cyber Security provider, headquartered in Doncaster, supporting organisations across Yorkshire and throughout the UK.

We specialise in delivering secure, reliable IT services alongside comprehensive cyber security solutions, helping businesses strengthen their security posture, manage cyber risks and achieve recognised security certifications.

As we continue to expand our cyber security and compliance services, we are looking for an experienced Cyber Essentials and Cyber Essentials Plus Assessor to join our team.

This is an excellent opportunity for a technically capable cyber security professional who enjoys working directly with customers, conducting security assessments and helping organisations improve their cyber resilience.

We're Hiring: Cyber Essentials & Cyber Essentials Plus Assessor

Location: Doncaster, South Yorkshire (Hybrid Working)

The Role

You will be responsible for delivering Cyber Essentials (CE) and Cyber Essentials Plus (CE+) assessments for organisations across a variety of sectors.

Working as part of our cyber security team, you will undertake technical assessments, review security controls, identify vulnerabilities and produce clear, accurate assessment reports in accordance with IASME and NCSC scheme requirements.

You will work with customers ranging from small businesses to larger organisations with more complex IT environments.

You must already hold current qualifications enabling you to conduct both Cyber Essentials and Cyber Essentials Plus assessments. Lead CE+ Assessor status is not required.

Key Responsibilities

• Independently conduct Cyber Essentials assessments, reviewing submissions and validating compliance with scheme requirements.
• Deliver Cyber Essentials Plus technical assessments in accordance with current IASME and NCSC methodologies.
• Perform internal and external vulnerability assessments using appropriate scanning and testing tools.
• Assess Windows, macOS, Microsoft 365, cloud services, endpoints and network infrastructure against the relevant security requirements.
• Evaluate security controls covering firewalls, secure configuration, access management, malware protection and security update management.
• Identify technical vulnerabilities, configuration weaknesses and non-compliance issues.
• Produce comprehensive, accurate and professional assessment reports.
• Clearly communicate assessment findings to technical and non-technical stakeholders.
• Manage assessment evidence, documentation and testing records in line with scheme requirements.
• Coordinate assessment activities, testing schedules and customer communications.
• Maintain current knowledge of Cyber Essentials scheme changes, emerging vulnerabilities and cyber security best practices.
• Collaborate with our internal cyber security and technical teams whilst maintaining the independence and impartiality required for certification assessments.

Essential Skills and Qualifications

Applicants must have:

• Current IASME Cyber Essentials Assessor qualification.
• Current IASME Cyber Essentials Plus Assessor qualification or recognised authorisation to conduct CE+ assessments.
• Practical experience delivering Cyber Essentials and Cyber Essentials Plus assessments.
• Strong understanding of the five Cyber Essentials technical control areas.
• Hands‑on experience conducting vulnerability assessments and interpreting scanning results.
• Good working knowledge of Microsoft 365, Entra ID, Windows operating systems and endpoint security.
• Sound understanding of networking, firewalls, TCP/IP, remote access and security configurations.
• Experience assessing patch management, user access controls, multifactor authentication and malware protection.
• Ability to independently manage assessments from initial scoping through to reporting and completion.
• Excellent written communication and technical documentation skills.
• Strong analytical and problem-solving abilities.
• A professional, customer-focused approach.
• Full UK driving licence and willingness to attend customer sites when required.

Desirable Skills and Experience

The following would be advantageous, but are not essential:

• Cyber Scheme Vulnerability Assessment Plus (VA+) qualification.
• CREST, Cyber Scheme, CompTIA Security+ or equivalent cyber security certifications.
• Experience working within a Managed Service Provider (MSP), Managed Security Service Provider (MSSP) or security consultancy.
• Knowledge of Microsoft Intune, Conditional Access and endpoint management.
• Experience with vulnerability management platforms such as Nessus, Qualys or similar tools.
• Familiarity with ISO 27001, IASME Cyber Assurance or other security assurance frameworks.
• Experience with penetration testing methodologies or technical security validation.
• Understanding of cloud security across Microsoft Azure and Microsoft 365.
• PowerShell or other scripting experience.

You do not need to be a Lead Cyber Essentials Plus Assessor to apply.

What We Offer

• Competitive salary, dependent on qualifications and experience.
• Hybrid working arrangements if required.
• Company pension scheme.
• Ongoing professional development and funded training.
• Opportunities to develop broader cyber security assurance and consultancy skills.
• Exposure to varied customer environments and security technologies.
• A collaborative technical team with access to experienced cyber security professionals.
• The opportunity to play an important role in expanding an established cyber security and certification service.

Why Join TwentyFour IT?

At TwentyFour IT, cyber security is at the heart of what we do.

Our services extend beyond traditional IT support to include managed security, threat detection and response, vulnerability management, Zero Trust security, business continuity and cyber security compliance.

You'll be joining a business that takes cyber security seriously, invests in modern technologies and recognises the importance of technically competent professionals.

Unlike roles focused exclusively on repetitive assessments, this position offers the opportunity to work across a wide range of technologies, customer environments and security challenges.

You'll have the support of an established technical team whilst retaining ownership of your assessments and professional judgement.

Interested?

If you're a qualified Cyber Essentials and Cyber Essentials Plus Assessor looking for your next opportunity, we'd love to hear from you.