Cyber GRC Consultant (DV Cleared)

Sanderson Government & Defence; Greater London; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading technology consulting firm is seeking a Cyber Security GRC Consultant to ensure effective risk management and security assurance within Public Sector settings. The ideal candidate will have proven cybersecurity expertise, active DV clearance, and knowledge of risk management frameworks. Responsibilities include leading security assessments and collaborating with teams to ensure secure technology implementations. This role offers a competitive salary and a hybrid working model, with around three days of on-site presence required.

Benefits

Hybrid working

Career development opportunities

Qualifications

• Proven experience in cybersecurity and security architecture.
• Active DV clearance required.
• Experience within Public Sector and MOD.

Responsibilities

• Deliver Secure by Design risk and security assurance functions.
• Lead risk management frameworks and advisory services.
• Facilitate security and risk workshops.

Skills

Cybersecurity expertise

Knowledge of JSP440, JSP604/453 & JSP490

Cloud security knowledge

Public Key Infrastructure

Risk management frameworks knowledge

Education

Membership of CIISEC

Tools

Security frameworks (ISO 27001, NIST CSF)

Tooling for cloud security posture management

Job description

Cyber Security GRC Consultant (DV Cleared)

Location: Cambridgeshire / London, Hybrid - c. 3 days minimum on-site presence required
Contract Type: Permanent & Full-time
Salary: Competitive + Benefits

About the Role

As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within MOD and Public Sector environments. You'll collaborate with multi‑disciplinary teams to define and implement security risk assessments and best practice solutions, ensuring alignment with business risk appetites and transformation goals. You'll be part of a knowledge‑sharing culture, working alongside expert peers in Secure Architecture and Risk Planning.

Key Responsibilities

• Deliver Secure by Design risk and security assurance functions within MOD/Public Sector.
• Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management.
• Facilitate security and risk workshops with Authority departments.
• Produce clear reporting on vulnerabilities, risks, controls, and treatment activities.
• Provide pragmatic remediation and risk management guidance.
• Support secure design across technology platforms including cloud infrastructures.
• Contribute to blogs and research within the business community.

Experience Required

The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC and UK Cyber Security Council professional registration at either Chartered or Principal for Risk Management.

• Active DV clearance required
• Strong working knowledge of:
  • Security Assurance Coordinator or Delivery Team Security Lead roles
  • JSP440, JSP604/453 & JSP490
  • Working with system secure design
  • MOD/GDS Secure by Design Principles
  • Supplier Chain Assurance and Risks
  • Security related legislation (e.g. GDPR, PCI DSS, ICO requirements)
  • Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8
  • HMG, NPSA and NCSC security policies, standards and guidance
  • Experience building and implementing secure by design principals within the SDLC
  • Threat Modelling – Kill Chain – Attack tree analysis
• Working understanding of:
  • Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups, Host‑based firewalls, Web Application Firewalls
  • Physical Network Infrastructure, Anti‑Patterns, Network Firewalls, IDS/IPS, DMZs
  • AI use cases, secure configuration (ISO42001 knowledge preferable)
  • ITHC scoping and remediation action plans
  • HLD and LLD reviews and analysis
• Working knowledge and experience of tooling relating to cloud security posture management offerings, cloud native security (AWS/Azure) and endpoint security
• Proficient in Public Key Infrastructure, Data at Rest/Transit, Cryptography, Privileged User Access Management, Zero Trust, Cross‑Domain Solutions and Role‑based Access Controls
• Thrives on tackling challenges with creative solutions, challenging the normal

What's in it for You

• Hybrid Working: c. 3 days onsite per week
• Career Development: Continuous learning and professional growth

Interested?

Submit your application to learn more about this exciting opportunity

Reasonable Adjustments:

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.

If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.