IT Security Auditor

RightCue; Basingstoke; Hybrid; GBP 60,000 - 80,000; Full time

Benefits offered by this job

Hybrid in-office (2 days)

Funded professional qualifications &

Career progression to senior/lead aud

Job summary

RightCue Consulting Services Ltd is hiring an IT Security Auditor for a UK-based hybrid role. You will audit across Cyber Essentials, IASME, ISO 27001, and related frameworks, lead essential assessments, and perform technical reviews of networks and cloud controls.

You will produce audit documentation and maintain client relationships. The ideal candidate has 3+ years in IT security auditing, familiar with CAF, DSPT, and Defence Cyber Cert, and holds or pursues certifications like CISSP, CISA,

Qualifications

• 3+ years of IT/information security audit, technical assurance, or security engineering experience.
• Knowledge of network and cloud security controls.
• ISO 27001 Lead Auditor and Cyber Essentials/IASME assessor credentials.
• Experience with CAF, DSPT, and Defence Cyber Cert.
• Strong attention to detail and communication skills.

Responsibilities

• Audit across Cyber Essentials, IASME, ISO 27001, and other frameworks.
• Lead or support Cyber Essentials and Cyber Plus assessments.
• Technical auditing for networks, cloud platforms (AWS/Azure/GCP), and ISMS controls.
• Produce high-quality audit documentation and maintain client relationships.
• Contribute to methodology improvements and stay updated with standards.

Skills

IT security audit

Technical assurance

Security engineering

Compliance knowledge

Communication skills

Education

IT degree or equivalent

Job description

IT Security Auditor – UK (Hybrid) RightCue Consulting Services Ltd

Join our expert Audit & Assurance Practice at RightCue, a leading UK cyber security consultancy. Grow your technical and audit skillset while delivering high-impact information security assurance across diverse UK clients.

Key Responsibilities:

• Auditing across regulatory, compliance, and certification frameworks such as Cyber Essentials, IASME Cyber Assurance, ISO 27001, Defence Cyber Certification, DSPT, and CAF-based schemes as well as additional frameworks encountered across client engagements.
• Lead/support for Cyber Essentials & Plus, evidence review, remediation recommendations, and reporting
• Technical auditing for network security (firewall review, network configuration), cloud platforms (AWS/Azure/GCP), and ISMS controls
• Producing high-quality audit documentation and maintaining client relationships
• Staying updated with industry standards and contributing to methodology improvements

Requirements:

• 3+ years of IT/information security audit, technical assurance, or security engineering experience.
• Technical knowledge of network and cloud security controls; experience in IT audit environments.
• ISO 27001 Lead Auditor and Cyber Essentials/IASME assessor or assessment credentials.
• Experience with regulatory frameworks (CAF, DSPT, Defence Cyber Cert)
• High attention to detail, professional independence, and strong communication skills.
• Right to work in the UK, and eligible for UK security clearance (no visa sponsorship).
• Cyber Essentials Plus Assessor, CIISec membership, or UK Cyber Security Council registration.
• Professional certifications (CISSP, CISA, or CISM) or actively working towards them.
• Relevant IT degree or equivalent experience.

What We Offer:

• Hybrid working (minimum 2 days in-office)
• Funded professional qualifications & renewals* Terms 7 conditions apply
• Clear progression to senior/lead auditor roles
• Supportive, diverse team culture