Lead Cyber Security Advisor

Consult; Greater London; Hybrid; GBP 92,000 - 129,000; Full time

Job summary

Consult is seeking a Lead Cyber Security Advisor on a 6-month contractor basis in London or Glasgow with hybrid working. The role requires SC security clearance and will support change programmes, projects, and procurement with expert cyber security guidance.

You will work with Delivery Managers, Product Owners and Solutions Architects on security risks, deliver risk assessments to the Security Governance Authority, and justify high-risk decisions across multiple initiatives.

Qualifications

• CISSP/CISM/CRISC certification required or equivalent.
• Strong risk management knowledge using NIST/ISO standards.
• Experience handling system, operational, and strategic risk levels.

Responsibilities

• Provide cyber security and risk management guidance for change programmes, projects, and procurement; handle customer inquiries.
• Collaborate with Delivery Managers, Product Owners and Solutions Architects on security risks in projects.
• Deliver and present risk assessments and documentation to the Security Governance Authority.

Skills

CISSP/CISM/CRISC

Risk management

NIST/ISO standards

Threat modelling

Threat intelligence to reports

Information security basics

Security standards docs

Stakeholder communication

Tools

Microsoft Visio

Jira/Confluence

Microsoft Office

Job description

Sector: Public Sector / Government

Job Title: Lead Cyber Security Advisor

Type: Contractor

Location: London or Glasgow (hybrid initially)

Duration: 6 months initial

Vetting: SC security clearance

Providing cyber security and risk management advice and guidance to support change programmes, projects, procurement of services, and general customer cyber security enquiries

• Working closely with the Delivery Managers, Product Owner and Solutions Architects on Security Risks within technical solution projects.
• Delivering and presenting high-quality risk assessments and supporting documentation to the Security Governance Authority.
• Justifying decisions characterised by high levels of risk, impact and complexity.

Essential Skills

• Will have either CISSP, CISM or CRISC qualification.
• Comprehensive knowledge of risk management, specifically around information security. With experience in recognised methodologies such as NIST 800-30/37, ISO 31000 etc.
• Experience of working with system, operational and strategic level risk.
• Demonstrable experience of threat modelling system solutions.
• Demonstrable experience of working with different cyber threat intelligence feeds and turning the intelligence into actionable reports.
• Working knowledge of information security.
• Demonstrable experience of providing advice, guidance and assuring documentation against security standards such as NIST, ISO27001, CIS, CAF, HMG GovS 007 and NPSA.
• Experience of working in multiple projects and initiatives with limited supervision; working effectively across multiple internal and external stakeholders groups including senior officials, customers, and suppliers; and demonstrating good written and verbal communication skills.
• Demonstrable experience of managing the internal and external cyber security risks to IT systems, services and data storage, particularly within Digital Cloud services.

Desirable Skills

• Microsoft Visio, Atlassian Jira / Confluence, Standard Microsoft Office applications (PowerPoint, Word, Excel, Outlook)
• Broad understanding of a wide range of industry standard IT technologies across Business, Data, Application, Technology, and associated security risks.