Cyber Security Manager

Grant Thornton; London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Grant Thornton is seeking a Cyber Security Manager for its Cyber Advisory team. This role involves providing strategic cyber security guidance, conducting assessments, and developing actionable remediation plans. Ideal candidates will have extensive experience in cyber security, strong technical knowledge, and professional certifications. Join a collaborative team dedicated to exceeding client expectations while fostering personal growth and work-life balance.

Benefits

Flexible working options

Inclusive company culture

Work-life balance initiatives

Qualifications

• Strong experience in cyber security within a large commercial organisation or consulting firm.
• Ability to develop remediation roadmaps and deliver high-quality outputs.
• Solid understanding of cyber security frameworks such as ISO27001 and NIST.

Responsibilities

• Provide hands-on cyber security advisory services to clients.
• Conduct security assessments and develop recommendations to improve security posture.
• Deliver presentations to clients and stakeholders.

Skills

Gap assessments

Security assurance reviews

Compliance reviews

Risk identification

Reporting findings

Communication skills

Education

Professional security certification (CISSP, CISM, CEH, OSCP)

Job description

Social network you want to login/join with:

Grant Thornton's Cyber Advisory team provides cyber security assurance and advisory services to organisations to identify risks and assisting them in developing and implementing effective and pragmatic solutions. The team consists of specialists with backgrounds in either professional consultancy or who have worked in industry for a number of year and have gained experience through working in operational roles.

A look into the role

As a Cyber Security Manager within the Cyber Advisory team, you will:

Work as part of a team, providing hands-on advisory service that exceeds our clients’ expectations

Provide cyber security advisory and assurance services to the clients

Work on delivery of assignments such as gap assessments, maturity assessments, security assurance reviews, compliance reviews and third-party assurance reviews

Provide recommendations and build roadmaps to improve clients’ security posture

Writing up findings and drafting reports. Ensuring written work is of a high standard, is factually correct, recommendations are appropriate and tailored to the needs of the intended audience and the outputs require minimal director and partner input.

Support the delivery of client-facing projects of varying sizes

Deliver presentations to clients and stakeholders within Grant Thornton

Support the development of junior team members through guidance and timely feedback

Support the growth of the practice through:

Develop our client offerings to ensure quality and value

Managing and contributing to proposals and tenders

Researching and writing thought leadership

Knowing you’re right for us

Joining us as a Cyber Security Manager, the minimum criteria you’ll need is experience in cyber security ideally within a large commercial organisation or a Consulting Firm. It would be great if you had some of the following skills, but don’t worry if you don’t tick every box, we’ll help you develop along the way.

Strong experience of undertaking gap assessments, maturity assessments, security assurance reviews, compliance reviews and third-party assurance reviews

Strong experience of undertaking interviews, written analysis and reporting findings

Experience in developing remediation roadmap and providing recommendations to improve cyber resilience

Experience of taking ownership of assigned areas, and delivering high quality outputs, to time and budget

Ability to report, present and justify conclusions to project teams and business stakeholders

Strong technical knowledge of infrastructure components, security technologies and supporting processes

Solid understanding of cyber security concepts and technology controls

Strong technical understanding of both on-premise and cloud architectures

Experience of security testing principles, vulnerability scanning, risk identification, resolution, and reporting

Familiarity with penetration testing tools and methodologies

Ability to clearly communicate complex security concept and findings to clients, both technical and non-technical stakeholders

Experience of evaluating security polices, procedures, and controls to ensure they are effective and up-to-date

Understanding of cyber security frameworks such as ISO27001, NIST and NCSC CAF

Professional security certification such as CISSP, CISM, CEH or OSCP

Knowing we’re right for you

Embracing uniqueness, the culture at Grant Thornton thrives on the contributions of all our people, we never settle for what is easy, we look beyond to deliver the right thing, for everyone. Building an inclusive culture, where we value difference and respect our colleagues helps our people to perform at the best of their ability and realise their potential.

Our open and accessible culture means you’ll interact with leaders who are interested in you and everything you bring to our firm. The things that set you apart, we value them. That’s why we give you the freedom to bring your whole self to work and pursue your passions inside and outside of work.

Beyond the job

Life is more than work. The things you do, and the people you’re with outside of work matter, that’s why we’re happy to look at flexible working options for all our roles, and we’ll always do our best to keep your work and life in balance.

The impact you can make here will go far beyond your day job. From secondments, to fundraising for local charities, or investing in entrepreneurs in the developing world, you’ll be giving back to society . It’s that drive to do the right thing that runs through our every move, grounded in our firm’s values – purposefully driven, actively curious and candid but kind.

We’re looking for people who want to contribute, spark fresh ideas and go beyond expectations. People who want to be able to proudly do what’s right, for the firm, our clients, our people and themselves. It’s how it should be.