GRC Cyber Security Consultant

Airbus Protect; West of England; Hybrid; GBP 70.000 - 110.000; Vollzeit

Benefits dieser Stelle

Profit sharing

Private healthcare

Hybrid work with Bristol office 2-3 d/

Zusammenfassung

Airbus Protect seeks a Cyber Security Consultant to advise clients on security architecture, risk management, and regulatory compliance. You will handle strategic and technical work across sectors, ensuring secure, resilient solutions while navigating UK clearance requirements.

Hybrid role with regular presence in Bristol (2–3 days/week) and collaboration across client sites. Relevant certifications and strong communication are essential.

Qualifikationen

• 5–10 years of cyber security consulting or technical leadership experience.
• Proven ability to navigate regulatory frameworks and standards.
• Clearance eligibility for UK Government Security Clearance.

Aufgaben

• Strategic consulting on security architecture including zero-trust and Secure by Design.
• Lead engagements with high-level strategy and technical oversight on IDAM, PAM and DLP.
• Advise on ISO27001, ISA/IEC62443, NIST CSF, NIST 800-53, NCSC CAF, NIS2, AI Act for clients.
• Leverage AI tools for delivery while governance of AI security.
• Manage multiple client engagements with strong stakeholder relationships.

Kenntnisse

5–10 years cyber security consulting

UK Government Security Clearance

Excellent communication & stakeholder

Autonomous cross-team collaboration

AI literacy for security contexts

Ausbildung

CISSP / CISM / CCSP / CISA / ISO27001 / GICSP / ISA62443 certifications

Tools

IDAM

PAM

DLP

Jobbeschreibung

Company Statement

Job Description

Company Statement

Airbus Protect is a wholly owned subsidiary of Airbus Group. We are a risk management leader in safety, cybersecurity and sustainability.

We protect businesses and products from end-to-end, going beyond mere compliance to strengthen incident prevention and resilience at every level.

The Role

As a Cyber Security Consultant at Airbus Protect, you will act as a trusted advisor to our clients, delivering expert guidance across a diverse range of sectors. This is a multi-faceted role designed for someone who can help our customers navigate the increasingly complex threat and regulatory landscapes. You will be navigating both tactical and technical compliance challenges alongside high-level strategic risk management.

Due to the sensitive nature of the projects we deliver for our clients, it is an essential requirement that you currently hold, or meet the criteria to obtain, UK Government Security Clearance. This foundational requirement goes hand-in-hand with our need for a proven track record in cyber security consulting. We expect your practical experience navigating complex GRC challenges to be firmly underpinned by recognised industry certifications—such as CISSP, CISM, or ISO 27001—demonstrating your established capability to advise clients with authority and technical rigor.

Key Responsibilities May Include

Governance

• Strategic Consulting: Advise clients on sound security architecture principles, including Secure by Design, network segmentation, and zero-trust frameworks, ensuring technical solutions align with business priorities.
• Technical Advisory: Lead engagements on specialised areas providing both high-level strategy and technical oversight. Providing consultancy on complex technical topics such as IDAM, PAM, and DLP, translating these into clear, actionable business advice.
• Regulatory Guidance: Advise and assure compliance against current and emerging frameworks/standards and regulations such as ISO27001, ISA/IEC62443, NIST CSF, NIST 800-53, NCSC CAF, NIS2, the Cyber Resilience Act, the AI Act, EASA Part-IS.
• AI Integration: Leverage AI tools to optimise internal delivery while consulting customers on the secure adoption and governance of AI within their own environments and in regulatory compliance.
• Multi-Project Leadership: Efficiently manage and execute multiple client engagements simultaneously, prioritising deliverables, driving project timelines, and consistently delivering quality consulting outputs while maintaining strong customer relationships across various industry sectors.

Risk

• Risk Management: Produce high-quality risk assessments and assurance artefacts across the full system lifecycle, tailoring your approach to the client’s specific business context, including consideration of technical and human factors.
• Risk Mitigation & Guidance: Translate technical gaps and architectural risks into prioritised, actionable remediation plans, advising delivery teams and business stakeholders on achieving compliance and long-term cyber resilience.
• Gap assessment: Conduct comprehensive gap assessments against relevant cybersecurity standards, frameworks, and regulations (e.g., ISO27001, ISA/IEC62443, NIST CSF, NIST 800-53, NCSC CAF, NIS2, the Cyber Resilience Act, the AI Act, EASA Part-IS) to evaluate client security postures, identify control deficiencies, and deliver prioritised, actionable remediation roadmaps that guide clients toward full compliance readiness.

Compliance

• Cyber Resilience: Devise and test strategies that ensure clients can withstand and respond to cyber incidents.
• Secure Design & Baseline Assurance: Evaluate system architectures and technical configurations against established security baselines and Secure by Design principles. Identify design and configuration vulnerabilities early in the delivery lifecycle, providing actionable recommendations to guide customers toward secure, resilient, and compliant solutions.

Supporting New Business

Beyond technical delivery, you will play a supporting role in the growth and market presence of Airbus Protect:

• Content Creation: Authoring technical blogs, white papers, and insights on emerging security trends to enhance our brand authority.
• Sales and Marketing Support: Support to Sales and Marketing colleagues with technical representation at customer and marketing events. Developing compelling case studies and service descriptions aligned with our services portfolio. Representing Airbus at webinars, industry panels, and conferences to showcase our expertise.
• Business Development: Active participation in the bid process and supporting ongoing customer relationship management to identify new opportunities.

The Individual

We are seeking a proactive self-starter capable of taking a forward-looking approach to understanding customer requirements by providing effective inputs that add tangible benefit to the customer’s business.

Essential Requirements

• Experience: 5–10 years of experience in a cyber security consulting or technical leadership role
• Clearance: Must hold, or have the ability to obtain, UK Government Security Clearance.
• Qualifications: At least one of the following certifications (CISSP, CISM, CCSP, CISA, ISO 27001, GICSP, ISA62443) or equivalents.
• Frameworks and Standards: Demonstrable experience of regulatory compliance and Standards adherence.
• Mindset: A self-starter who stays ahead of the curve on threat intelligence and industry best practices.
• Communication: Exceptional presentation skills; able to communicate complex technical topics to non-technical stakeholders.
• Collaboration: Proven ability to work autonomously while contributing effectively to multiple virtual and transnational teams and customers across concurrent projects.
• AI Literacy: Demonstrable understanding of how to use AI tools for productivity and the principles of securing AI environments.
• Business Acumen: Demonstrable evidence of business support benefits undertaken and realised
• Mobility: Full UK Driving Licence.
• Locality: Whilst this is a Hybrid Role, you will be expected to be in our Bristol office for at least 2-3 days a week.

Remuneration & Benefits

• Competitive Salary
• Annual profit share scheme.
• Comprehensive company benefits and private healthcare options consistent with a market-leading transnational organisation.

Airbus Protect

Airbus Protect is an equal opportunities employer. At Airbus, inclusion means celebrating and valuing diversity in all its forms.. This commitment ensures every employee – irrespective of their socio-economic background, age, race, ethnicity, physical ability, neurodiversity, gender, sexual orientation, or any other characteristic – feels valued and included, empowering them to reach their full potential within a respectful environment.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company

Airbus Protect Limited

Contract Type

Permanent

Experience Level

Professional

Job Family

General Security

Airbus is committed to achieving workforce diversity and creating an inclusive working