Cyber Security Consultant

Consult; Hereford; Hybrid; GBP 70,000 - 80,000; Full time

Benefits offered by this job

Bonus

Job summary

Consult in Hereford is seeking a Senior / Principal Cyber Security Consultant to advise defence and critical national infrastructure clients and ensure security is central to ICT initiatives. You will own the Secure by Design function, write practical risk assessments, and produce security assurance documents that are actually read by stakeholders.

This role requires clear communication with technical teams and senior stakeholders, and offers hybrid working in Hereford with a path toward

Qualifications

• 5+ years of experience with complex ICT systems.
• Ability to engage with stakeholders including MOD and defence clients.
• Knowledge of Secure by Design / CSMv4.
• Understanding of System/Security architecture and acronyms such as TOGAF, SABSA, NIST.
• Solid grasp of Information Assurance and Risk Advisory concepts.

Responsibilities

• Advising defence and critical national infrastructure clients; ensuring security is central, not an afterthought.
• Working on mission-critical projects where security is integrated, not bolted on.
• Own the Secure by Design function and drive security outcomes.
• Write risk assessments and security assurance documentation that stakeholders will actually read.

Skills

Security

Stakeholder management

Security architecture

Information Assurance

Risk advisory

Job description

Job Title: Senior / Principal Cyber Security Consultant

Location: Hereford / Hybrid

Salary: £70,000 - £80,000

Bonus: Absolutely

Another day, another vague “Cyber Security Consultant” job ad full of buzzwords, written by someone who thinks CISSP is a personality type.

This isn’t that ad.

This isn’t a paper-pushing compliance gig either. You’ll be advising defence and critical national infrastructure clients - the sort of places where “oops” isn’t an acceptable incident response plan.

You’ll be helping these organisations protect their ICT investments and defend against the kind of threats that don’t usually make the news (and shouldn’t).

And yes, that means you’ll need to have or be eligible for UK Government Security Clearance. If you hold Green Badge / DV clearance, we definitely need to talk.

What you’ll actually be doing (instead of pretending to on PowerPoint):

• Helping public defence and critical national infrastructure organisations not get pwned.
• Working on projects where security isn’t a bolt-on - it’s mission-critical.
• Owning the Secure by Design function
• Writing risk assessments and security assurance documentation people will actually read.

You’ll fit in if you:

• Have 5+ years of experience working with complex ICT systems
• Can hold your own in a room full of stakeholders, whether they’re techies, suits, or someone from MOD who’s still using Windows 7.
• Know what Secure by Design / CSMv4 is without having to Google it mid-meeting.
• Understand System/Security architecture and aren’t allergic to acronyms like TOGAF, SABSA or NIST.
• Have a solid understanding of the likes of Information Assurance and Risk Advisory

What we’re really looking for:

• You’ve worked in Defence or Critical Infrastructure. And you didn’t just drop in for a 2-week discovery workshop.
• You understand that cyber risk isn’t just about patching stuff - it’s about understanding mission impact.
• You’re a grown-up. You can work independently and still be part of a team. You get the job done, even when it’s messy.

What’s in it for you:

• Interesting work that actually matters.
• Training that actually leads to certifications, not just a dusty Udemy login.
• Routes into Principal / Chartered status with the UK Cyber Security Council, and support for accreditations like CISSP, CISM, SABSA, TOGAF, CREST and so on.

The bottom line:

If your idea of a “cyber security role” involves shouting “have you tried turning it off and on again?” then this isn’t for you.

You will sometimes need to be on site 4 days a week and will need to be minimum SC cleared with eligibility for DV clearance.

But if you’re serious about securing the systems that keep the UK running - from defence comms to critical national infrastructure.