Cyber Security Risk Consultant

ZipRecruiter; Belfast; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

A leading company in the cyber security field is hiring a Cyber Security Risk Consultant. The role involves conducting risk assessments, audits, and providing expert advice to clients, with a focus on compliance and risk management. Ideal candidates will possess a strong understanding of cyber security principles and relevant certifications while enjoying flexible working arrangements and generous leave benefits.

Benefits

Hybrid & flexible working

33 days leave (23 annual + 10 public)

Comprehensive pension & sick pay

Private healthcare

Monthly team lunches & quarterly team days out

Professional development & certification support

Qualifications

• Minimum of 2-3 years in security vulnerability, risk, audit & compliance.
• Proven track record of Cyber Security compliance audits.
• Eligibility to obtain UK security clearance.

Responsibilities

• Create business risk models for operational cyber security.
• Lead and deliver cyber security audits and risk reviews.
• Produce high-quality risk reports and advisory outputs.

Skills

Security vulnerability

Risk management

Cyber security compliance

Cloud security

Third-party risk management

Data analysis

Presentation skills

Education

ISO 27001 Lead Auditor

ISACA Certified Information Systems Auditor (CISA)

Certified Information Systems Security Professional (CISSP)

Job description

Job Description

As a Cyber Security Risk Consultant, you will join our Information Assurance and Cyber Risk team that provides expert risk assessments, audits, analysis and advice to our clients.

Applicants must be currently residing in Northern Ireland due to the role’s requirement for client site attendance

Your responsibilities will include:

• Creating business risk models and associated material, in support of operational cyber security and business planning activity across a range of different domains or sectors against recognised standards (e.g. ISO27001, NCSC CAF, NIS Directive, UK GovAssure)
• Identify mitigations for cyber risk in a given business or operational scenario and threat environment
• Lead and deliver cyber security audits, risk reviews and control assessments
• Identify control weaknesses, assess risks, and present actionable recommendations
• Produce high-quality risk reports, advisory outputs and client presentations

Essential experience of the Cyber Security Risk Consultant:

• Minimum of 2-3 years of experience in security vulnerability, risk, audit & compliance
• Proven track record of Cyber Security compliance audits, managing regulatory engagements and working with external and internal regulatory bodies
• Strong understanding of Cyber security principles, cloud security, and third-party risk management; Ability to analyse complex IT risks and provide strategic risk mitigation recommendations
• Ability to challenge, influence, and collaborate at all levels, including senior leadership
• Data driven with eye for the detail
• Eligibility to obtain UK security clearance (requires 5 years continuous UK address history)

Desirable qualification(s) for the Cyber Security Risk Consultant:

• ISO 27001 Lead Auditor or Implementer
• ISACA Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Principle or above in UKCSC Specialism ‘Governance & Risk Management’ or ‘Audit & Assurance’

What we offer:

Hybrid & flexible working

33 days leave (23 annual + 10 public)

Comprehensive pension & sick pay

Private healthcare

Monthly team lunches & quarterly team days out.

Professional development & cert support

Please note: only shortlisted applicants will be contacted.