Senior Cyber Security Consultant

QinetiQ Group plc; Malvern; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Matched contribution pension scheme

Generous holiday allowance

Private Medical Insurance

Dental Insurance

Employee discount portal

Armed Forces Covenant

Volunteer opportunities

Job summary

QinetiQ Group plc is seeking a Senior Cyber Security Consultant to lead risk modelling, audits, and vulnerability analysis with a focus on secure design and pragmatic mitigations. You will engage with customers across sectors, translating complex cyber risk into actionable plans and investment decisions.

The role involves developing risk cases, applying NIST and UK standards, and communicating outcomes to both technical teams and business leaders.

Qualifications

• Experience leading cyber security risk assessments using NIST and UK Government standards.
• Proven ability to deliver cyber security audits against ISO27001.
• Ability to develop pragmatic risk mitigation strategies for business needs.
• Strong stakeholder communication across technical and non-technical audiences.

Responsibilities

• Lead development of business risk models and documentation for cyber risks.
• Lead cyber security audits against ISO27001 and other standards.
• Conduct vulnerability assessments and cyber risk analyses.
• Identify and communicate mitigation strategies to reduce cyber risk.
• Develop robust cyber security risk cases for decision making and investment.
• Apply Secure by Design principles across projects to enhance resilience.
• Build relationships with customers and present complex information clearly.

Skills

Risk modelling

Audit leadership

Vulnerability analysis

Mitigation strategies

Stakeholder communication

NIST frameworks

ISO27001 knowledge

MITRE ATT&CK

Secure by Design

Business risk cases

Education

STEM degree or equivalent

Job description

As a Senior Cyber Security Consultant, you will have the opportunity to work with customers providing cyber security consultancy with business or operational impact amongst a strong collaborative supportive team of consultants. Day-to-day, you'll be involved in a multitude of cyber security activities including generating business risk models, leading cyber security audit processes, cyber security vulnerability analysis and identifying and articulating mitigations for cyber risk developing cyber security risk case to customers. Your responsibilities will include:

• Leading the development of business risk models and supporting documentation to assess cyber security risks, enabling informed operational decision making and business planning across a variety of sectors using recognised frameworks such as NIST and UK Government standards
• Leading and delivering cyber security audits against established standards, including ISO27001, to evaluate compliance, identify areas for improvement and support organisational security objectives
• Leading detailed vulnerability assessments and cyber risk analyses to provide a comprehensive understanding of security maturity, threat exposure and organisational resilience, leveraging frameworks such as NIST, MITRE ATT&CK and UK Government guidance
• Identifying, assessing and clearly communicating appropriate mitigation strategies to reduce cyber risk within specific business, operational and threat environments, ensuring recommendations align with organisational priorities
• Developing robust cyber security risk cases that articulate threats, vulnerabilities, business impacts and risk treatment options, supporting strategic decision making and investment planning
• Applying Secure by Design principles throughout business and operational activities, ensuring security considerations are embedded from the outset of projects, systems and processes to enhance overall cyber resilience
  A good understanding of cyber security risk and its impact on business operations, helping organisations make informed decisions and strengthen resilience
• Experience applying cyber security principles, standards and best practices to assess risk, improve compliance and support secure business outcomes
• The ability to develop pragmatic risk mitigation strategies that balance security requirements with operational and business needs
• Proven experience identifying and communicating security risks across technology, systems and business processes, providing clear recommendations to stakeholders
• The ability to build strong relationships with customers and stakeholders, confidently presenting complex information to both technical and non-technical audiences
• A good understanding of relevant NIST frameworks and ISO 27001 standards and how to apply in practice, STEM degree or equivalent or relevant experience

We value difference and we don't have a fixed idea when it comes to background or education, provided you can show the required level of experience and willingness to learn then we would like to hear from you. This role is 37 hours per week based at either our Portsmouth, Farnborough, Malvern, Amesbury, Lincoln or Bristol site with a minimum average site attendance of three days per week. Customer travel will be required.

Are you ready to be part of the future? At QinetiQ, we're not just imagining tomorrow we are creating it. From cutting-edge defence technology to ground-breaking innovations our mission is to empower and protect lives. Join us as a Senior Cyber Security Engineer at either our Portsmouth, Farnborough, Malvern, Amesbury, Lincoln or Bristol site, where you will have the opportunity to work with cutting-edge technology in partnership with some of the most brilliant minds., QinetiQ operates state-of-the-

Why Join QinetiQ?

As we continue to grow into new markets around the world, there's never been a more exciting time to join QinetiQ. The formula for success is our appetite for innovation and having the courage to take on a wide variety of complex challenges. As a QinetiQ employee, you'll experience a unique working environment where teams from different backgrounds, disciplines and experiences enjoy collaborating widely and openly as we undertake this exciting and rewarding journey. Through effective teamwork, and pulling together, you'll get to experience what happens when we all share different perspectives, blend disciplines, and link technologies; constantly discovering new ways of solving complex problems in a diverse and inclusive environment where you can be authentic, feel valued and realise your full potential. Visit our website to read more about our diverse and inclusive workplace culture. www.qinetiq.com/en/careers/life-at-qinetiq

Benefits

• Matched contribution pension scheme, with life assurance
• Generous holiday allowance, with the option to purchase additional days
• Options to join Health Cash Plan, Private Medical Insurance and Dental Insurance
• Employee discount portal: Personal Accident Insurance, Travel Insurance, Restaurants, Cinema Tickets and much more
• We are proud to support the Armed Forces community by honouring the Armed Forces Covenant and maintaining our Gold Award standard in the Defence Employer Recognition Scheme
• Volunteering Opportunities - helping charities and local community

Recruitment Process

We want to make sure that our recruitment process is as inclusive as possible and we aspire to bring out the best in our candidates by creating an environment where everyone feels valued, heard and supported. If you have a disability or health condition that may affect your performance in certain assessment types, please speak to your Recruiter about potential reasonable adjustments. Many roles in QinetiQ are subject to national security vetting being completed, applicants who already hold the appropriate level of vetting may be able to transfer it upon appointment. A number of roles are also subject to additional restrictions, which means factors such as nationality or previous nationalities may affect the roles that you can be employed in.