Cyber Security Consultant

CBSbutler Holdings Limited trading as CBSbutler; Greater London; Hybrid; GBP 91,000 - 119,000; Full time

Job summary

CBSbutler is recruiting a Cyber Security Consultant to join a major Defence programme. The role focuses on security governance, supplier integration, and operational readiness within a complex SIAM / multi-supplier environment.

The position is hybrid, with work locations including Preston, London, or Birmingham, and requires up to two days per week onsite. The daily rate is £570 inside IR35.

Experience in governance, risk management, and working in government or defence contexts is preferred.

Qualifications

• Active SC clearance
• Sole UK national
• Experience in cyber security governance, GRC, or security assurance
• Strong experience in SIAM / multi-supplier environments
• Good understanding of security and service management processes
• Experience with supplier onboarding, transition, or transformation programmes
• Strong stakeholder management and documentation skills
• Experience supporting compliance, audit, and assurance activities
• Knowledge of NIST CSF, Secure by Design, and NCSC guidance advantageous
• Defence or higher-security government experience desirable

Responsibilities

• Develop supplier onboarding packs covering security processes, policies, governance, and reporting
• Align incoming suppliers with established Incident Management, Vulnerability Management, and Security Assurance processes
• Define supplier roles, responsibilities, and interaction models across the SIAM/OI environment
• Identify and manage gaps between supplier capabilities and existing security requirements
• Support Security Management Plans, compliance reporting, audit, and assurance activities
• Support Operational Readiness Reviews (ORR) and Service Commencement activities
• Produce clear, reusable security and service management documentation
• Coordinate with incoming and incumbent suppliers, transition teams, and client stakeholders
• Support operational readiness across incident management, vulnerability management, monitoring, backup/recovery, access control, and service reporting

Skills

Security governance

GRC

Stakeholder management

Documentation

SIAM / multi-supplier

Compliance & audits

NIST CSF knowledge

Defence/government experience

Job description

Salary: £? - ? per year

Requirements

• Active SC clearance
• Sole UK National
• Experience in Cyber Security Governance, GRC, or Security Assurance
• Strong experience within SIAM / multi-supplier environments
• Good understanding of security and service management processes
• Experience with supplier onboarding, transition, or transformation programmes
• Strong stakeholder management and documentation skills
• Experience supporting compliance, audit, and assurance activities
• Knowledge of NIST CSF, Secure by Design, and NCSC guidance would be advantageous
• Defence or wider Government/high-security experience is highly desirable

Responsibilities

• Develop supplier onboarding packs covering security processes, policies, governance, and reporting
• Align incoming suppliers with established Incident Management, Vulnerability Management, and Security Assurance processes
• Define supplier roles, responsibilities, and interaction models across the SIAM/OI environment
• Identify and manage gaps between supplier capabilities and existing security requirements
• Support Security Management Plans, compliance reporting, audit, and assurance activities
• Support Operational Readiness Reviews (ORR) and Service Commencement activities
• Produce clear, reusable security and service management documentation
• Coordinate with incoming and incumbent suppliers, transition teams, and client stakeholders
• Support operational readiness across incident management, vulnerability management, monitoring, backup/recovery, access control, and service reporting

Technologies

• Incident Management
• Support
• Security

More

We are recruiting an experienced Cyber Security Consultant to join a major Defence programme, supporting the onboarding of new service providers into a complex SIAM / multi-supplier environment. This is a security governance, supplier integration, and operational readiness role rather than a hands-on technical security position. The role is hybrid, based in Preston, London, or Birmingham, with 2 days per week onsite. The day rate is £570 inside IR35.

last updated 38 week of 2026