Cyber Security Consultant

Eames Consulting; England; On-site; GBP 60,000 - 80,000; Full time

Job summary

A consulting firm specializing in cyber security is seeking a skilled Cyber Security Consultant with healthcare experience, particularly in DSPT and CAF. The role includes leading security delivery, developing policies, and conducting assessments. Ideal candidates will have hands-on experience with EDRMS, strong communication skills, and regulatory knowledge concerning UK data protection. This opportunity offers a chance to work closely with healthcare clients and improve their cyber security frameworks.

Qualifications

• Proven healthcare sector experience and deep expertise in DSPT and CAF.
• Hands-on experience writing and implementing security policies.
• Solid grounding in security risk management and frameworks.

Responsibilities

• Lead cyber security delivery for healthcare clients.
• Produce high-quality policies and governance documentation.
• Conduct security assessments and audits for DSPT submissions.

Skills

Healthcare cyber security experience

DSPT and CAF assessments

Security documentation writing

Communication skills

Security risk management knowledge

Tools

EDRMS solutions

ISO 27001

NIST

Job description

Job Title: Cyber Security Consultant (Healthcare – DSPT / CAF Specialist)

Role Summary

We are looking for a highly skilled Cyber Security Consultant with proven healthcare sector experience and deep expertise in the DSPT and Cyber Assessment Framework (CAF). The successful candidate must have hands‑on experience writing and implementing policies aligned to DSPT/CAF. Experience with EDRMS solutions is strongly desirable.

Key Responsibilities

• Lead cyber security delivery for healthcare clients, ensuring full alignment with DSPT and CAF requirements.
• Produce high‑quality policies, procedures, and governance documentation mapped directly to DSPT/CAF controls.
• Conduct security assessments, audits, and evidence reviews to support DSPT submissions and CAF assurance.
• Provide clear, actionable security advice to technical and non‑technical stakeholders.
• Support security design, risk mitigation, and assurance activities across healthcare environments.
• Advise on secure configuration and governance for EDRMS platforms (desirable).
• Contribute to incident response planning and readiness activities.

Essential Experience

• Healthcare cyber security experience (NHS or wider healthcare ecosystem).
• Mandatory DSPT and CAF experience, including:
• Completing DSPT/CAF assessments
• Creating security evidence and documentation
• Writing DSPT/CAF‑aligned policies
• Strong working knowledge of healthcare regulatory/security requirements (NHS Digital, IG, UK data protection).
• Ability to produce concise, high‑quality security documentation and reports.
• Solid grounding in security risk management and common security frameworks (NCSC, ISO 27001, NIST, etc.).
• Excellent communication, advisory, and stakeholder engagement skills.

Desirable

• Experience with EDRMS implementation, security configuration, or governance.
• Relevant certifications (e.g., CISSP, CISM, ISO 27001 Lead Auditor / Implementer).
• Experience supporting DPIAs, cloud security assessments, or security architecture reviews.