Senior Cyber Security Consultant — Risk & Audit Leader

QinetiQ Limited; Malvern; On-site; GBP 66,000 - 73,000; Full time

Benefits offered by this job

Matched pension

Holiday allowance

Private medical insurance

Dental insurance

Employee discounts

Armed Forces Covenant

Volunteering opportunities

Job summary

QinetiQ Limited in Malvern, England, is seeking a Senior Cyber Security Consultant to deliver consultancy with business impact across multiple UK sites.

You will lead the development of risk models, conduct cyber security audits against ISO 27001, perform vulnerability assessments, and articulate mitigations to stakeholders.

The role requires Secure by Design thinking, strong communication with technical and non-technical audiences, and travel to customer sites as needed.

Qualifications

• Good understanding of cyber security risk and its impact on business operations.
• Experience applying cyber security principles, standards and best practices to assess risk, improve compliance and support secure business outcomes.
• Ability to develop pragmatic risk mitigation strategies balancing security with operational needs.
• Proven experience communicating security risks across technology, systems and business processes to stakeholders.
• Ability to build relationships with customers and stakeholders, presenting complex information clearly.
• Strong knowledge of NIST frameworks and ISO 27001 and how to apply in practice.

Responsibilities

• Leading the development of business risk models and supporting documentation to assess cyber security risks across sectors.
• Leading and delivering cyber security audits against ISO27001 and other standards to evaluate compliance.
• Conducting vulnerability assessments and cyber risk analyses to assess maturity and resilience.
• Identifying and communicating mitigations to reduce cyber risk in business contexts.
• Developing robust cyber security risk cases to support decision making and investment planning.
• Applying Secure by Design principles across projects to enhance resilience.

Skills

Cyber security risk

Risk assessment

Audit processes

NIST frameworks

ISO 27001

Stakeholder communication

Education

STEM degree

Tools

MITRE ATT&CK

Audit tools

Job description

QinetiQ Limited in Malvern, England, is seeking a Senior Cyber Security Consultant to deliver consultancy with business impact across multiple UK sites.

You will lead the development of risk models, conduct cyber security audits against ISO 27001, perform vulnerability assessments, and articulate mitigations to stakeholders.

The role requires Secure by Design thinking, strong communication with technical and non-technical audiences, and travel to customer sites as needed.