Consultant

Cydea; United States; Remote; USD 48,000 - 59,000; Full time

Benefits offered by this job

25 days holiday, plus public holidays

Unlimited flexible days off

Cydea x Good Causes

Tax-free utility bill contribution

Pension scheme

Discretionary bonus scheme

Annual training funding

IT equipment for remote work

Job summary

You’ll join Cydea Ltd as a cyber risk consultant, working at the intersection of cyber security and business to assess security postures and conduct cyber risk assessments. You’ll listen to clients, ask questions, and develop pragmatic recommendations with the team using established methods and open-source tools.

You’ll work with senior leaders across security, IT, and board members, prioritising what to protect and weighing consequences.

Qualifications

• Couple of years of experience in consulting or cyber risk
• Aptitude for consulting and learning on the job
• Ability to communicate clearly in writing and verbally

Responsibilities

• Assess security posture and conduct cyber risk assessments
• Listen to clients and ask questions before assumptions
• Work with clients to share work-in-progress deliverables for feedback
• Develop practical, sustainable recommendations
• Lead interviews/workshops and analyze data for insights
• Communicate findings clearly to stakeholders, including board members
• Travel to client sites as needed and contribute to internal tools/projects

Skills

Consulting aptitude

Stakeholder communication

Analytical thinking

Job description

Who we are looking for

We’re looking for someone to join our team as a cyber risk consultant. They’ll have an inquisitive mind and want to improve the world around them. This will come across on a day to day basis as they work to understand our clients’ business and help them to make better decisions that improves their cyber security posture. They will have the ability to communicate clearly and concisely in both written and verbal form, and will have the confidence to question and challenge the status quo.

We don’t expect them to have loads of cyber certifications; though they will have a couple of years of experience, and we do need them to demonstrate an aptitude for consulting and a willingness to learn on the job.

Does this sound like you? Ok, then read on!

About the role

You’ll be working at the intersection of cyber security and ‘the business’ to assess security postures and conduct cyber risk assessments. Your ability to listen to our clients and ask questions before making an assumption is key. You’ll be working collaboratively with our clients - we share work in progress deliverables with them for feedback as we go - using internally developed methods and processes, industry practices and open-source tools.

You’ll be working with senior business leaders, both within the security and IT teams, as well as non-technical teams and board members. You’ll be helping them to identify what needs protecting and prioritising, and understanding what the consequences of risk events are to their operations.

You should be comfortable problem solving by breaking down challenges into small, more manageable parts, and documenting any assumptions or estimates that you make along the way. You may take the lead on carrying out and writing up interviews and workshops, analysing the data we have collected, and looking for patterns and insights to develop recommendations with others in the team.

The role will involve communicating our findings and recommendations in the most effective way possible, focusing on realistic, pragmatic and sustainable solutions that put user needs first and steers away from fear-mongering. This may involve managing exceptions and require you to influence clients and other stakeholders

You may be required to work autonomously and take the lead on completing smaller projects and individual tasks, as well as keeping our clients up to date. Some projects will require travel to client sites. That may be for the odd meeting or workshop, or it may be for multiple days over a few weeks. Most of our clients and meeting locations are in the South East.

Outside of the ‘billable’ client work you’ll also be contributing to our internal tools and processes and open-source projects. You’ll be expected to raise awareness of our services, to help propose new services to clients and (reverse) mentor colleagues.

Through our Cydea x Good Causes charitable programme you’ll spend five days every year on pro-bono engagements helping not-for-profit organisations to protect their incredible work.

Package and benefits

We think that we offer a competitive package, so we’re not afraid to tell you about it upfront.

The salary for this role is £40,000. We also like to look after our people and offer the following benefits:

• 25 days holiday, plus public holidays, per year to take time off and recharge, plus…

• Unlimited flexible days off: take individual days off for a long weekend, supporting family, or just getting on top of life admin, without eating into your holiday allowance

• Cydea x Good Causes (5 days every year helping not-for-profit organisations improve their cyber posture)

• Tax-free contribution towards your utility bills (£6/week)

• Pension scheme (5% company contribution)

• Discretionary bonus scheme (up to 10% of your salary)

• Annual funding for external training and professional qualification

• Decent IT equipment to enable remote and mobile working

About Cydea

We are a small, young, cyber security consultancy that welcomes challenge and values different perspectives. We’re not afraid to do things differently and our clients appreciate us for that.

We typically work with senior clients — like CIOs, CTOs, CISOs, plus CEOs and NEDs — over longer periods to deliver real and measurable outcomes, rather than one-off deliverables.

We work collaboratively and securely in the open with our clients using tools to automate tasks, track progress and responsibility, and share our findings. This ishow we like to work.

We work on interesting engagements where security meets ‘the business’ to better understand, communicate and manage cyber risk. That may involve helping to identify the sources of risk to an organisation, how frequently they face different types of risk events, and quantifying the consequences of these to their operations. It may be producing a light-touchCyber Scorecard or taking a deeper dive assessment into their security posture. We also help boards and leadership teams explore risk scenarios through cyber exercises (or ‘war games’).

We believe in making the world a better place and do that through two specific programmes. ThroughCydea x Good Causes you can expect to spend time supporting good causes on a pro-bono basis or helping them with grants to purchase security solutions. You’ll also be expected to contribute to open-source projects throughcydea.tools that provides any organisation with free tools to improve their security posture.

We’re a remote-first business so you’ll spend less time commuting and more time doing things that matter (client work, or perhaps doing the school run). That doesn’t mean you’ll be alone: we use collaboration tools to keep in touch day-to-day and have monthly Team Days in different locations to get together, celebrate successes and plan for the future. Often our clients drop by to share what they’re up to and the problems they’re facing.

We want you to succeed and will invest in your development through formal courses, online learning, career mentorship, on-the-job training and regular feedback. We budget for everyone to go on a training course every year and expect you to share what you’re learning. Every week we talk about what we’ve achieved, learned and reflect on a problem we’ll need to solve soon.

This is a UK-based, primarily work from home role, with some travel required to meetings and clients.