Cybersecurity - Manager

CFGI; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

CFGI, a global consulting firm with a strong UK presence, seeks a cybersecurity consultant to help clients navigate complex security challenges in risk, cyber operations and governance. You will perform maturity and risk assessments, design and implement controls, and provide strategic metrics and reporting to boards.

The role values practical, hands-on cybersecurity expertise gained in consultancy or in-house settings.

Qualifications

• Minimum 5 years of technology and security-related experience.
• Experience delivering practical security controls and advisory services.
• Ability to work with executives and cross-functional teams in a consultancy setting.

Responsibilities

• Conduct cybersecurity maturity and risk assessments for clients.
• Implement security controls (MDR, IAM, Network Security, Cloud deployments).
• Advise on cybersecurity strategy, metrics, and reporting for stakeholders including Audit Committees and Boards.
• Build risk management practices, including policies and Risk Registers.

Skills

Risk assessment

Security maturity

MDR

IAM

Network security

Cloud deployments

Security metrics

Policy development

Training & awareness

Penetration testing

Security events analysis

OS hardening

Network design

Cross-team collaboration

Leadership

Tools

CISSP

CISM

Job description

About CFGI

CFGI is a global consulting firm that helps organisations navigate complex business challenges with confidence. With a strong presence in the UK, we partner with companies across industries to deliver best-in-class advisory services in accounting, risk, cyber security, technology, and business transformation.

We pride ourselves on combining technical expertise with a practical, hands‑on approach, helping our clients strengthen resilience, meet regulatory requirements, and stay ahead in an increasingly digital and risk‑driven landscape.

Technical and Domain Experience

• Conduct cybersecurity maturity and risk assessment and for clients.
• Practical experience implementing security controls, in areas such as MDR, IAM, Network Security, Cloud Deployments.
• Advise clients on cybersecurity strategy, metrics and reporting for various levels of stakeholders, including Audit Committees and Board of Directors.
• Build risk management practices for clients, including policies, procedures, Risk Register, etc.
• Previous experience as a systems administrator, systems engineer, or security analyst.
• Understanding of operating system hardening principles, network design principles, and systems security.
• Guide clients in establishing cybersecurity policies, standards, and procedures.
• Manage cybersecurity training & awareness services for clients from design to implementation.
• Understanding of security analysis, security events, and penetration testing.

Soft Skills

• Strong interpersonal and communication skills; experience with cross‑cultural communications.
• Calmness and clarity of thought under pressure and ability to maintain positive attitude.
• Agile and flexible, capable of dealing with ambiguity, and confronting challenges and opportunities with speed, endurance, and decisiveness.
• Confidence to manage upwards, provide forward thinking ideas and actively participate in improving CFGI’s cyber offering.

Technical Qualifications and Certifications

• Industry certifications are preferred, but not required: CISSP, CISM, etc.
• Technology specific qualifications in technology or security solutions.

Experience

• Whilst we will judge the quality of candidates not their time‑served in the industry, a good gauge for this role would be around 5 years’ experience in technology and security related fields.
• Your experience does not have to be purely cyber security consulting. We believe individuals with practical skillsets from in‑house roles, broader technology management or GRC, for example, would be well placed in our team.
• We know great candidates bring a mix of skills and experiences, you don’t need to have done everything listed in this job description to apply.