Principal Cyber Security Auditor

Frontier Resourcing; West of England; Hybrid; GBP 85,000 - 110,000; Full time

Benefits offered by this job

Car allowance

Discretionary bonus

Private healthcare

Pension scheme

Hybrid working

Job summary

Frontier Resourcing is seeking a Principal Cyber Security Auditor to lead client engagements, deliver independent security assessments and provide practical recommendations to improve security posture and compliance. The role involves working across multiple projects, engaging with technical teams and senior stakeholders.

You will specialise in assurance against CAF and related standards, with a mix of client site visits and Bristol office collaboration, and opportunities to contribute to bids

Qualifications

• Proven experience leading cyber security audits and assurance engagements.
• Strong knowledge of CAF, ISO 27000-series, NIST frameworks and risk management.
• Familiarity with legacy information assurance standards and guidance.

Responsibilities

• Lead cyber security audits and assessments against recognised frameworks including CAF.
• Evaluate security controls, resilience and compliance across the system lifecycle.
• Identify vulnerabilities and risks, producing actionable reports for clients.

Skills

Lead cyber security audits

Stakeholder management

Security assessments

Education

CISA

CISSP

CISM

Tools

NCSC CAF

ISO 27001

NIST

Job description

Principal Cyber Security Auditor

Hybrid | With travel to client sites and offices in Bristol

Frontier Resourcing is working with a growing technology and cyber security consultancy to recruit an experienced Cyber Security Auditor to join as a Managing Consultant and support a range of public and private sector clients.

Specialising in assurance against Cyber Assurance Framework (CAF), this is an opportunity to lead security audits and assurance activities, helping organisations strengthen their cyber resilience, assess risk and ensure effective security controls across complex systems.

The Role

You will lead client engagements, deliver independent security assessments and provide practical recommendations to improve security posture and compliance. You'll work across multiple projects, engaging with technical teams and senior stakeholders, with opportunities to contribute to bids and business development.

Key responsibilities

• Lead cyber security audits and assessments against recognised frameworks, including the NCSC Cyber Assessment Framework (CAF).
• Evaluate security controls, organisational resilience and compliance throughout the system lifecycle.
• Identify vulnerabilities, risks and areas for improvement, producing clear, actionable reports.
• Facilitate assurance workshops and engage with stakeholders at all levels.
• Advise clients on secure system design, risk management and security best practice.
• Support bid development and pre-sales activities where required.

Essential Experience

• Proven experience leading cyber security audits and assurance engagements.
• Strong knowledge of the NCSC CAF, ISO 27000-series standards, NIST frameworks and associated risk management practices.
• Understanding of legacy information assurance standards and NCSC guidance.
• Familiarity with MOD security frameworks, such as JSP 453, JSP 440, JSP 902 and DEFCON 659A.
• Technical knowledge spanning defensive cyber security, enterprise architecture, secure systems, network and cloud security, system hardening, cryptographic controls and protective monitoring.
• Confident stakeholder management skills, with the ability to communicate complex findings clearly to technical and non-technical audiences.

Qualifications

Essential: CISA, CISSP, CISM or another recognised cyber security certification.

Desirable: Membership of CIISec at an appropriate level, or professional registration with the UK Cyber Security Council in audit and assurance.

Package & Working Arrangements

• Competitive salary, dependent on experience.
• Car allowance and discretionary performance bonus.
• Competitive pension scheme and private healthcare.
• Hybrid working, with occasional travel to client sites and offices in Bristol.
• Professional development and clear career progression opportunities.
• Additional paid leave provisions for eligible Reservists and Cadet Force Adult Volunteers.

Security Clearance

Successful candidate will need to be eligible for SC Clearance - requires minimum 5 years' continuous UK residency and British passport holder.

Interested?

If you have a strong background in cyber security audit, assurance and risk management, and want to work on challenging engagements across government and commercial environments, we'd welcome a confidential conversation.