Senior Cyber Risk & TPRM Consultant — Remote

MCS Group; Greater London; Remote; GBP 90,000 - 110,000; Full time

Benefits offered by this job

30 days annual leave

UK public holidays

5% matched pension

Private health insurance

Life insurance

Job summary

MCS Group is recruiting a Senior Cyber Risk & Third-Party Risk Consultant in the UK. The role focuses on cyber risk and third‑party risk for varied clients, delivering governance improvements and robust security controls.

You will own client engagements, assess risk across supplier relationships and help strengthen cyber resilience while building trusted relationships with senior stakeholders. Predominantly remote work with occasional office visits.

Qualifications

• Significant experience across cyber security and technology risk.
• Experience in consulting or professional services with client-facing engagements.
• Experience assessing cyber risk frameworks and third-party controls.
• Familiarity with ISO 27001, NIST and DORA requirements.
• Ability to communicate complex topics to senior stakeholders.

Responsibilities

• Take ownership of cyber and third-party risk consulting projects, from initial discussions to delivery.
• Help organisations understand exposure to third-party and supplier-related cyber risks.
• Advise clients on improving risk management processes, governance, and security controls.
• Develop practical recommendations to strengthen cyber resilience.
• Build strong relationships with senior stakeholders, acting as a trusted adviser on risk and security matters.
• Support development of new client relationships and expand existing partnerships.
• Provide guidance to junior consultants and help develop the wider team.
• Contribute ideas to improve the consultancy's services and delivery approach.

Skills

Cyber security

Third-party risk

Consulting experience

Stakeholder management

Regulatory knowledge

Job description

MCS Group is recruiting a Senior Cyber Risk & Third-Party Risk Consultant in the UK. The role focuses on cyber risk and third‑party risk for varied clients, delivering governance improvements and robust security controls.

You will own client engagements, assess risk across supplier relationships and help strengthen cyber resilience while building trusted relationships with senior stakeholders. Predominantly remote work with occasional office visits.