GRC Cyber Security Consultant

Airbus; West of England; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Annual profit share

Private healthcare

Company benefits

Job summary

Airbus Protect Limited in the United Kingdom seeks a proactive cyber security consultant with 5–10 years of experience to lead governance, risk and compliance engagements, advising on Secure by Design principles, zero-trust architectures, and regulatory frameworks.

The role requires UK government security clearance, a full UK driving licence, and a hybrid work arrangement with 2–3 days in the Bristol office, supporting new business, content creation, and client engagements across multiple

Qualifications

• 5–10 years of experience in cyber security consulting or technical leadership.
• Must hold, or be able to obtain, UK Government Security Clearance.
• Certifications such as CISSP, CISM, CCSP, CISA, ISO 27001, GICSP, ISA62443 or equivalents.
• Experience with regulatory compliance and standards in cyber security.

Responsibilities

• Advise clients on security architecture, Secure by Design, network segmentation, and zero-trust frameworks.
• Lead risk assessments and remediation roadmaps across client systems and teams.
• Ensure regulatory compliance with frameworks such as ISO27001, NIST CSF, NIS2, AI Act and related standards.
• Support business development with technical content, case studies, and client engagements.

Skills

Communication

Collaboration

AI literacy

Business acumen

Mobility

Driving licence

Job description

Job Description: Company Statement: Airbus Protect is a wholly owned subsidiary of Airbus Group. We are a risk management leader in safety, cybersecurity and sustainability. We protect businesses and products from end-to-end, going beyond mere compliance to strengthen incident prevention and resilience at every level.

Governance

• Strategic Consulting: Advise clients on sound security architecture principles, including Secure by Design, network segmentation, and zero-trust frameworks, ensuring technical solutions align with business priorities.
• Technical Advisory: Lead engagements on specialised areas providing both high-level strategy and technical oversight. Providing consultancy on complex technical topics such as IDAM, PAM, and DLP, translating these into clear, actionable business advice.
• Regulatory Guidance: Advise and assure compliance against current and emerging frameworks/standards and regulations such as ISO27001, ISA/IEC62443, NIST CSF, NIST 800-53, NCSC CAF, NIS2, the Cyber Resilience Act, the AI Act, EASA Part-IS.
• AI Integration: Leverage AI tools to optimise internal delivery while consulting customers on the secure adoption and governance of AI within their own environments and in regulatory compliance.
• Multi-Project Leadership: Efficiently manage and execute multiple client engagements simultaneously, prioritising deliverables, driving project timelines, and consistently delivering quality consulting outputs while maintaining strong customer relationships across various industry sectors.

Risk

• Risk Management: Produce high-quality risk assessments and assurance artefacts across the full system lifecycle, tailoring your approach to the client’s specific business context, including consideration of technical and human factors.
• Risk Mitigation & Guidance: Translate technical gaps and architectural risks into prioritised, actionable remediation plans, advising delivery teams and business stakeholders on achieving compliance and long-term cyber resilience.
• Gap assessment: Conduct comprehensive gap assessments against relevant cybersecurity standards, frameworks, and regulations (e.g., ISO27001, ISA/IEC62443, NIST CSF, NIST 800-53, NCSC CAF, NIS2, the Cyber Resilience Act, the AI Act, EASA Part-IS) to evaluate client security postures, identify control deficiencies, and deliver prioritised, actionable remediation roadmaps that guide clients toward full compliance readiness.

Compliance

• Cyber Resilience: Devise and test strategies that ensure clients can withstand and respond to cyber incidents.
• Secure Design & Baseline Assurance: Evaluate system architectures and technical configurations against established security baselines and Secure by Design principles. Identify design and configuration vulnerabilities early in the delivery lifecycle, providing actionable recommendations to guide customers toward secure, resilient, and compliant solutions.

Supporting New Business

• Content Creation: Authoring technical blogs, white papers, and insights on emerging security trends to enhance our brand authority.
• Sales and Marketing Support: Support to Sales and Marketing colleagues with technical representation at customer and marketing events. Developing compelling case studies and service descriptions aligned with our services portfolio. Representing Airbus at webinars, industry panels, and conferences to showcase our expertise.
• Business Development: Active participation in the bid process and supporting ongoing customer relationship management to identify new opportunities.

The Individual

We are seeking a proactive self-starter capable of taking a forward‑looking approach to understanding customer requirements by providing effective inputs that add tangible benefit to the customer’s business.

• Experience: 5-10 years of experience in a cyber security consulting or technical leadership role
• Clearance: Must hold, or have the ability to obtain, UK Government Security Clearance.
• Qualifications: At least one of the following certifications (CISSP, CISM, CCSP, CISA, ISO 27001, GICSP, ISA62443) or equivalents.
• Frameworks and Standards: Demonstrable experience of regulatory compliance and Standards adherence.
• Mindset: A self-starter who stays ahead of the curve on threat intelligence and industry best practices.
• Communication: Exceptional presentation skills; able to communicate complex technical topics to non-technical stakeholders.
• Collaboration: Proven ability to work autonomously while contributing effectively to multiple virtual and transnational teams and customers across concurrent projects.
• AI Literacy: Demonstrable understanding of how to use AI tools for productivity and the principles of securing AI environments.
• Business Acumen: Demonstrable evidence of business support benefits undertaken and realised
• Mobility: Full UK Driving Licence.
• Locality: Whilst this is a Hybrid Role, you will be expected to be in our Bristol office for at least 2-3 days a week.

Remuneration & Benefits

• Competitive Salary
• Annual profit share scheme.
• Comprehensive company benefits and private healthcare options consistent with a market-leading transnational organisation.

"Airbus Protect is an equal opportunities employer. At Airbus, inclusion means celebrating and valuing diversity in all its forms.. This commitment ensures every employee - irrespective of their socio-economic background, age, race, ethnicity, physical ability, neurodiversity, gender, sexual orientation, or any other characteristic - feels valued and included, empowering them to reach their full potential within a respectful environment."

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company: Airbus Protect Limited

Contract Type: Permanent

Experience Level: Professional

Job Family: General Security

By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.

Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to [e-mail].

At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.