Junior Cyber Security Auditor

CBSbutler Ltd.; Corsham; On-site; GBP 65,000 - 90,000; Full time

Job summary

CBSbutler Ltd. is seeking a Cyber Security Auditor to lead audits across UK Government and Defence programmes in a hybrid Corsham-based role. You will drive audits against CAF, DCC and GovAssure, delivering clear reports and recommendations to improve cyber resilience.

Ideal candidates have 3+ years in cyber auditing, active NCSC-aligned qualifications, and UK SC or DV clearance. You will engage stakeholders, maintain documentation to regulatory standards, and stay current with evolving NCSC

Qualifications

• ISO27001 Lead Auditor qualification (or equivalent) required.
• Chartered Auditor and Assessor accreditation required.
• Active presence on the NCSC Assured Service Provider / Auditor register required.
• 3+ years' experience in cyber auditing, preferably in Public Sector/Defence.

Responsibilities

• Lead end-to-end cyber security audits across client environments.
• Assess compliance against CAF (v3.2 / v4.0) and GovAssure.
• Produce high-quality audit reports with actionable recommendations.
• Engage with stakeholders to support remediation and continuous improvement.
• Maintain audit documentation and evidencing to regulatory standards.
• Stay current with evolving NCSC guidance, standards, and best practice.

Skills

ISO27001 Lead Auditor

Chartered Auditor

NCSC Assured Service Provider auditor

NCSC CAF audits

Job description

Cyber Security Auditor

+Permanent opportunity

+Hybrid working - Corsham / West Country

+SC / DV clearance is essential

We are looking for Cyber Security Auditors to join a growing team delivering high-impact assurance services across UK Government and Defence programmes.

This role is suited to auditors already operating within NCSC-aligned frameworks, with the ability to lead and deliver audits across nationally significant cyber assurance schemes.

Essential Requirements (Must Have)

• ISO27001 Lead Auditor qualification (or equivalent)
• Chartered Auditor and Assessor accreditation
• Active presence on the NCSC Assured Service Provider / Auditor register
• Proven experience delivering NCSC-aligned audits

The Role

You will lead the delivery of cyber security audits across frameworks such as CAF, DCC, and GovAssure, supporting government-led cyber resilience initiatives.

Key responsibilities include:

• Leading end-to-end cyber security audits across client environments
• Assessing compliance against frameworks such as CAF (v3.2 / v4.0) and GovAssure
• Producing high-quality audit reports with clear, actionable recommendations
• Engaging with stakeholders to support remediation and continuous improvement
• Maintaining audit documentation and evidencing to regulatory standards
• Staying current with evolving NCSC guidance, standards, and best practice

What We're Looking For

• Minimum 3+ years' experience in cyber auditing, compliance, or risk (Public Sector / Defence preferred)
• Strong working knowledge of NCSC CAF frameworks
• Experience leading audit engagements and managing audit teams
• Excellent stakeholder engagement and report writing skills
• Ability to operate independently in client-facing environments

Due to the nature of the roles, applicants must be UK sole nationals and hold UK Security Clearance to SC level, or preferably DV.