Senior Cyber TPRM Consultant

MCS Group; Greater London; Remote; GBP 90,000 - 110,000; Full time

Benefits offered by this job

30 days annual leave

UK public holidays

5% matched pension

Private health insurance

Life insurance

Job summary

MCS Group is recruiting a Senior Cyber Risk & Third-Party Risk Consultant in the UK. The role focuses on cyber risk and third‑party risk for varied clients, delivering governance improvements and robust security controls.

You will own client engagements, assess risk across supplier relationships and help strengthen cyber resilience while building trusted relationships with senior stakeholders. Predominantly remote work with occasional office visits.

Qualifications

• Significant experience across cyber security and technology risk.
• Experience in consulting or professional services with client-facing engagements.
• Experience assessing cyber risk frameworks and third-party controls.
• Familiarity with ISO 27001, NIST and DORA requirements.
• Ability to communicate complex topics to senior stakeholders.

Responsibilities

• Take ownership of cyber and third-party risk consulting projects, from initial discussions to delivery.
• Help organisations understand exposure to third-party and supplier-related cyber risks.
• Advise clients on improving risk management processes, governance, and security controls.
• Develop practical recommendations to strengthen cyber resilience.
• Build strong relationships with senior stakeholders, acting as a trusted adviser on risk and security matters.
• Support development of new client relationships and expand existing partnerships.
• Provide guidance to junior consultants and help develop the wider team.
• Contribute ideas to improve the consultancy's services and delivery approach.

Skills

Cyber security

Third-party risk

Consulting experience

Stakeholder management

Regulatory knowledge

Job description

Senior Cyber Risk & Third-Party Risk Consultant

Location: London or Manchester | Predominantly Remote
Salary: Up to £100,000 DOE
Employment Type: Permanent, Full-Time

The Opportunity

MCS Group is working with an established and growing specialist consultancy to recruit a Senior Cyber Risk & Third-Party Risk Consultant.

This is an excellent opportunity for an experienced cyber risk professional who enjoys working closely with clients, solving complex challenges and having a genuine influence on how services are delivered.

Our client works with organisations across a range of sectors, helping them strengthen their approach to technology risk, cyber security and third-party assurance.

With continued investment in the business, they're looking for someone who can bring a combination of technical knowledge, consulting experience and commercial awareness to an already talented team.

It's a role that offers real variety, autonomy and the opportunity to contribute to the continued growth of a specialist consulting business.

What You'll Be Doing

• Take ownership of cyber and third-party risk consulting projects, working with clients from initial discussions through to delivery.

• Help organisations understand their exposure to third-party and supplier-related cyber risks.

• Advise clients on improving their risk management processes, governance arrangements and security controls.

• Develop practical recommendations that help businesses strengthen their cyber resilience.

• Build strong relationships with senior stakeholders, acting as a trusted adviser on risk and security matters.

• Support the development of new client relationships and identify opportunities to expand existing partnerships.

• Provide guidance and support to junior consultants, sharing knowledge and helping develop the wider team.

• Contribute ideas and expertise to improve the consultancy's services and delivery approach.

What We're Looking For

• Significant experience across cyber security, technology risk, third-party risk management or a related discipline.

• A strong background in consulting or professional services, with experience managing client-facing engagements.

• Practical experience assessing and improving cyber risk frameworks, governance processes and third-party controls.

• Familiarity with recognised security standards and regulatory requirements such as ISO 27001, NIST and DORA.

• Confidence working with senior stakeholders and communicating complex technical matters clearly.

• Experience taking ownership of projects, managing competing priorities and delivering high-quality outcomes.

• A relevant professional certification such as CISSP or CISM would be highly beneficial.

• An interest in mentoring others, developing client relationships and contributing to wider business growth.

Why Consider This Opportunity?

Beyond the technical work, this is an opportunity to join a specialist consultancy where your experience and ideas will genuinely make a difference.

You’ll have the chance to work on varied client challenges, build relationships with senior decision-makers and take on a position with real responsibility and autonomy.

There’s also the opportunity to help develop the wider team and contribute to the long-term direction of the business.

The package includes:

• Competitive salary up to £100,000, depending on experience.

• 30 days' annual leave plus UK public holidays.

• Option to buy or sell additional annual leave.

• 5% matched employer pension contribution.

• Private health insurance.

• Life insurance worth three times your annual salary.

• Two salary review rounds each year.

• Predominantly remote working, with occasional office attendance and client visits.

• Opportunities for continued professional development and career progression.

Disclaimer

If you have a disability which means you require assistance at any stage of the recruitment process, please contact us directly to discuss. We are committed to providing equality of opportunity to all.

Please note, this position is open to candidates currently based in the UK only. We are receiving an exceptionally high number of applications and will be unable to shortlist candidates who do not meet the location and technical requirements outlined above. Due to the volume of applications, we may be unable to provide individual feedback. We thank you in advance for your understanding