Cyber Security Consultant

Investigo; Gloucester; Hybrid; GBP 50,000 - 80,000; Full time

Benefits offered by this job

Employer pension contribution up to 12%

Bonus scheme up to 24%

Job summary

Investigo is seeking a Cyber Security Consultant in Gloucester with a hybrid work model (3 days in the office). The ideal candidate will interact effectively with stakeholders and provide clear cybersecurity insights.

Responsibilities include risk assessment of business projects, overseeing vulnerability tests, managing third-party risks, and mentoring junior team members. A strong background in cyber security is essential, with a focus on communication, vulnerability management, and cloud security.

Attractive benefits including up to 12% pension contribution and a bonus scheme up to 24% await the right fit.

Qualifications

• 5+ years of experience in cyber security work.
• Strong grasp of security principles and cloud security.
• Ability to communicate complex threats clearly.

Responsibilities

• Support business projects by assessing security.
• Oversee vulnerability and pen testing activities.
• Manage third-party risk processes.
• Conduct procurement due diligence.
• Mentor junior security team members.

Skills

Cyber Security Experience

Communication Skills

Enterprise ICT Knowledge

Vulnerability Management

Cloud Security Understanding

Job description

Gloucester / Hybrid (3 days per week in office)

Most job ads for cyber roles read like someone emptied a bucket of buzzwords onto a page and hoped for the best. This isn’t that.

My client is looking for a Cyber Security Consultant who can do more than point at a risk register and nod thoughtfully. We want someone who can actually talk to people - the kind who can explain a real‑world cyber threat to a stakeholder without them needing a translator or a stiff drink.

If you’re the sort of person who enjoys telling a project team “it depends” and then actually explaining what it depends on, keep reading.

What you’ll actually be doing

• Supporting business projects - You’ll be the person people come to when they want to know whether their bright idea is secure, sensible, or a future headline waiting to happen.
• Vulnerability & Pen Testing oversight - You’ll be the escalation point when tools, scanners, and vendors start shouting about things that may or may not matter. You’ll help the business figure out which fires are real.
• Third‑Party Risk Management - You’ll own the process. Yes, own. Not “support”, not “assist”, not “be aware of”.
• Procurement support - Sometimes you’ll be doing deep‑dive due diligence yourself. Sometimes you’ll just be the adult in the room.
• Team development - You’ll mentor junior team members, helping them grow into confident, capable security professionals rather than human ticket‑closing machines.

What you’ll need

• 5+ years doing real cyber security work - not just watching dashboards.
• A strong grasp of enterprise ICT, security principles, and cloud security.
• Good knowledge around Vulnerability Management and working with Testing teams
• Understanding of CI/CD and how security fits into it without being the department of “no”.
• Communication skills that don’t require subtitles.

If you’re the sort of person who can explain a vulnerability without turning it into a TED Talk, you’ll fit in fine.

What’s in it for you

• Up to 12% employer pension contribution.
• A bonus scheme up to 24% - yes, really.

Why this role matters

Cyber security only works when the business understands it. You’ll be the person who makes that happen - translating risk into reality, guiding decisions, and shaping how the organisation protects itself.

If you want a role where you can influence, mentor, and actually make things better - not just tick boxes - this is it.