Cyber Security Consultant

Anson McCade; West of England; On-site; GBP 70,000 - 95,000; Full time

Benefits offered by this job

25 days' vacation

Private medical insurance

3 extra days leave for charitable work

Job summary

A growing cyber security consultancy in the West of England is seeking a Cyber Security Consultant to join their team. The ideal candidate will possess strong consultancy experience and a comprehensive understanding of security frameworks. Key responsibilities include developing security policies, providing expert advice to clients, and conducting compliance audits. A competitive salary package and extensive benefits, including private medical insurance and additional leave for charitable work, are offered.

Qualifications

• Proven experience in a cyber security role, focusing on consultancy.
• Understanding of security principles, techniques, and technologies.
• Experience with security frameworks and standards, including GDPR.

Responsibilities

• Develop and maintain security policies and compliance.
• Support SecOps strategies and perform threat hunting.
• Provide expert advice and deliver training to clients.

Skills

Cyber security consultancy experience

Knowledge of security frameworks and standards

Analytical and problem-solving skills

Excellent communication skills

Education

Bachelor's degree in Cyber Security or related field

Tools

SIEM

IDS/IPS

Vulnerability scanners

Job description

Salary: £70,000 - £95,000 (depending on experience) + £5,750 Car Allowance + 10% Bonus

Candidates must be sole British nationals and be eligible to go through DV Clearance

About the Role

Join a fast-growing Cyber Practice community of industry-leading experts. We're looking for a cyber security generalist consultant with experience in solving complex cyber security problems utilizing your technical expertise and learned experience.

As a cyber generalist, we expect you to demonstrate advanced skills and a high level of expertise across multiple facets of the cyber security domain. We don't expect any candidate to have experience in all areas, but you should align your work with responsibilities that include influencing policy, overseeing complex projects, and delivering high-quality security solutions.

Key Responsibilities

Security Governance and Compliance

• Develop, implement, and maintain security policies, standards, and guidelines to ensure organisational security objectives are met
• Ensure compliance with relevant legal and regulatory requirements
• Conduct regular security audits and assessments to ensure compliance with internal policies and external regulatory requirements
• Ensure adherence to industry best practices and frameworks, such as ISO 27001, NIST, and COBIT

Security Operations

• Provide best practice advice for SecOps/SOC teams
• Support the establishment and delivery of SecOps strategies
• Perform SOC Maturity Assessments via SOC-CMM framework
• Perform threat hunting and vulnerability management

Security Architecture

• Design and review security architectures for new and existing systems
• Provide security input during project design and implementation phases
• Ensure that security architecture aligns with business objectives and compliance requirements
• Define the Security Architecture roadmap
• Investigate and thoroughly understand applications and systems

Security Strategy

• Develop security practice strategy in alignment with corporate strategy
• Evolve current, retiring, and developing new services in conjunction with practice owners and aligned to corporate strategy
• Work with business development as the "voice of the customer"
• Work with suppliers to maintain relationships and develop new services
• Monitor emerging trends

Consultancy and Advice

• Provide expert advice on security best practices to clients
• Assist clients in developing and enhancing their security posture
• Deliver security awareness training and workshops

Essential Skills and Knowledge

This is a generalist role, but key skills we're looking for include:

• Proven experience in a cyber security role, with a focus on consultancy
• Comprehensive understanding of security principles, techniques, and technologies
• Experience with security frameworks and standards (e.g., ISO 27001, NIST, GDPR, CAF)
• Knowledge of Incident response and management frameworks such as NCSC, NIST, and CREST
• Experience performing maturity assessments and utilizing their outcomes to drive security strategy
• Strong analytical and problem-solving skills
• Excellent communication and interpersonal skills, with the ability to convey complex security concepts to non-technical stakeholders
• Proficiency in security tools and technologies, such as SIEM, IDS/IPS, and vulnerability scanners
• Autonomy: Works under broad direction. Work is often self-initiated
• Influence: Influences organisation, customers, suppliers, partners, and peers on the contribution of own specialism. Builds appropriate and effective business relationships
• Complexity: Performs an extensive range and variety of complex technical and professional work activities
• Business Skills: Advises on available standards, methods, tools, and applications relevant to own specialism. Analyses, designs, plans, executes, and evaluates work to time, cost, and quality targets

Desirable Qualifications

• Bachelor's degree in Cyber Security, Information Technology, or a related field
• Professional certifications (e.g., CISSP, CISM, CEH, CompTIA Network+, CompTIA Security+, SANS certifications)
• NCSC CCP Scheme

What's in it For You

In addition to a competitive salary package, you'll receive an extensive benefits package including:

• 25 days' vacation per year
• Private medical insurance
• 3 extra days leave per year for charitable work of your choice