Data Protection and Cyber Security Consultant

NCC Group; United Kingdom; Remote; GBP 55,000 - 85,000; Full time

Job summary

Join a leading consulting firm as a Senior Data Protection and Cyber Security Consultant, focusing on building client relationships and delivering critical assessments in data protection and cyber assurance. This senior role requires a deep understanding of data legislation and strong client-facing skills to manage and remediate potential cybersecurity risks effectively.

Qualifications

• Experience in Data Protection Impact Assessments and handling data breaches.
• Deep understanding of GDPR and DPA 2018.
• Ability to deliver projects on time and maintain high customer satisfaction.

Responsibilities

• Build and maintain trusted client relationships.
• Conduct onsite and remote assessments for clients.
• Translate technical findings into actionable remediation plans.

Skills

Client-Focused

Analytical Thinking

Communication

Consulting

Reporting

Education

CIPP/E

Tools

NIST

ISO 27001

ISO 27701

FAIR

IRAM

Job description

The Opportunity

We have a fantastic new opportunity to join our UK Consulting and Implementation division as a Senior Data Protection and Cyber Security Consultant. The ideal candidate will have prior consulting experience and commercial exposure within the data protection, cyber, and assurance fields, gained from delivering a diverse range of services across a broad client base. Strong client-facing skills and the ability to engage with senior stakeholders are essential.

Key Accountabilities:

• Build and maintain trusted client relationships through high-quality delivery, exceeding expectations.
• Conduct onsite and remote assessments, advising, analyzing, and reporting according to client needs, including stakeholder meetings, documentation reviews, and system audits.
• Translate technical findings into actionable remediation plans for clients.
• Adhere to internal security and quality policies and engage with sales teams during project proposals.
• Assist with sales proposals, bids, and tenders for assurance and compliance services.

Minimum Requirements:

• Experience in Data Protection Impact Assessments, handling Data Subject Requests, data breaches, and privacy queries; familiar with privacy frameworks.
• Deep understanding of GDPR, DPA 2018, and other European privacy legislation.
• Privacy qualification such as CIPP/E.
• Knowledge of control frameworks like NIST, ISO 27001, ISO 27701, NIS, and CAF.
• Experience with risk assessment methodologies such as ISO 27005, IRAM, and FAIR.
• Ability to deliver projects on time and within budget, maintaining high customer satisfaction.
• Strong communication, consulting, and reporting skills.

Desirable Requirements:

• Experience as a DPO.
• Knowledge of Zero Trust, Privacy by Design, Security by Design, AI, and cloud certifications (AWS, GCP, Azure).

Behaviours:

• Client-Focused, Collaborates as ‘One NCC’, Adds Value, Enables and Empowers, Personal Responsibility, Communicates Openly and Respectfully, Open Mindset, Growth and Development, Analytical Thinking.

About NCC Group

The NCC Group has over 2,200 members worldwide, serving 15,000 customers. With origins in the UK, we now have offices across North America, Europe, Asia-Pacific, and the UAE. We are dedicated to helping clients protect their brand and reputation against evolving cyber threats, investing heavily in our people and business growth.