Cyber Security Auditor

Experis UK; Corsham; On-site; GBP 50,000 - 70,000; Full time

Job summary

Experis UK is seeking a Cyber Security Auditor to join a team delivering assurance and risk assessments across Defence and Government programmes. You'll support audits against CAF, DCC, and ISO27001, and engage with senior client stakeholders.

The role offers a path to becoming a Cyber Audit Consultant with ownership of assessments, strong report writing, and the opportunity to work in highly regulated environments.

Qualifications

• Extensive experience with cyber security audits and assurance.
• Familiarity with CAF, DCC, ISO27001 and related standards.
• Ability to gather evidence and produce formal audit reports.
• Strong communication with stakeholders.
• Experience in Defence or government environments preferred.

Responsibilities

• Plan and execute cyber security audits and compliance assessments.
• Review processes and controls against CAF, DCC and standards.
• Gather evidence from client stakeholders and document findings.
• Draft high-quality audit reports and recommendations.
• Maintain audit records and support client workshops.
• Stay updated on cyber security regulations and best practices.

Skills

Cyber security governance

Audit and assurance

Stakeholder engagement

Report writing

Regulatory compliance

Problem solving

Independent work

Team collaboration

Defence/Government experience

Education

Bachelor's degree in a relevant field

Job description

Cyber Security Auditor (SC Clearance required)

We're supporting a leading Defence and Cyber Security consultancy in the search for Cyber Security Auditors to join a growing team delivering assurance, compliance, and cyber risk assessments across high-profile Defence and Government programmes.

This is an excellent opportunity for consultants with experience in cyber compliance, audit, risk management, or information assurance who are looking to build a long-term career within the Defence and National Security sector.

The Opportunity

You’ll initially work alongside experienced Cyber Audit Consultants, supporting the delivery of assessments against frameworks including:

• NCSC Cyber Assessment Framework (CAF)
• Defence Cyber Certification (DCC)
• Government assurance standards
• ISO27001 and related security frameworks

Successful candidates will be given the opportunity to develop into fully-fledged Cyber Audit Consultants, taking ownership of assessments and engaging directly with senior client stakeholders.

Key Responsibilities

• Support the planning and execution of cyber security audits and compliance assessments.
• Review organisational processes, procedures, and technical controls against CAF, DCC, and relevant regulatory requirements.
• Gather and assess audit evidence from client stakeholders.
• Produce high-quality audit reports, findings, and recommendations.
• Document risks, observations, and corrective actions.
• Support senior consultants in client workshops and assurance activities.
• Maintain accurate audit documentation and assessment records.
• Stay up to date with cyber security regulations, compliance requirements, and industry best practice.
• Active security clearance
• Experience within cyber security, governance, risk, compliance, assurance, or audit.
• Strong report-writing and documentation skills.
• Excellent analytical and problem-solving ability.
• Strong stakeholder engagement and communication skills.
• Ability to work both independently and within a collaborative team environment.
• Experience working within Defence, Government, or highly regulated environments.
• Knowledge of NCSC Cyber Assessment Framework (CAF) v3.2/v4.0.
• Awareness of Defence Cyber Certification (DCC).
• Experience supporting audits, compliance reviews, or risk assessments.
• Understanding of ISO27001 principles and controls.