Senior Cyber Security Strategist & Risk Advisor

QinetiQ Group plc; Malvern; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Matched contribution pension scheme

Generous holiday allowance

Private Medical Insurance

Dental Insurance

Employee discount portal

Armed Forces Covenant

Volunteer opportunities

Job summary

QinetiQ Group plc is seeking a Senior Cyber Security Consultant to lead risk modelling, audits, and vulnerability analysis with a focus on secure design and pragmatic mitigations. You will engage with customers across sectors, translating complex cyber risk into actionable plans and investment decisions.

The role involves developing risk cases, applying NIST and UK standards, and communicating outcomes to both technical teams and business leaders.

Qualifications

• Experience leading cyber security risk assessments using NIST and UK Government standards.
• Proven ability to deliver cyber security audits against ISO27001.
• Ability to develop pragmatic risk mitigation strategies for business needs.
• Strong stakeholder communication across technical and non-technical audiences.

Responsibilities

• Lead development of business risk models and documentation for cyber risks.
• Lead cyber security audits against ISO27001 and other standards.
• Conduct vulnerability assessments and cyber risk analyses.
• Identify and communicate mitigation strategies to reduce cyber risk.
• Develop robust cyber security risk cases for decision making and investment.
• Apply Secure by Design principles across projects to enhance resilience.
• Build relationships with customers and present complex information clearly.

Skills

Risk modelling

Audit leadership

Vulnerability analysis

Mitigation strategies

Stakeholder communication

NIST frameworks

ISO27001 knowledge

MITRE ATT&CK

Secure by Design

Business risk cases

Education

STEM degree or equivalent

Job description

QinetiQ Group plc is seeking a Senior Cyber Security Consultant to lead risk modelling, audits, and vulnerability analysis with a focus on secure design and pragmatic mitigations. You will engage with customers across sectors, translating complex cyber risk into actionable plans and investment decisions.

The role involves developing risk cases, applying NIST and UK standards, and communicating outcomes to both technical teams and business leaders.