Cyber Security Consultant

Department: Cyber

Employment Type: Permanent - Full Time

Location: London, London, City, London, Hybrid

Key Responsibilities

• Lead and support the delivery of cyber and information security assessments, audits, and control reviews across diverse industries.
• Identify and assess security control weaknesses, articulate associated risks, and provide pragmatic recommendations tailored to client environments.
• Produce high-quality, concise documentation including audit reports, risk assessments, and advisory outputs.
• Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials.
• Maintain up-to-date knowledge of cyber threats, mitigation strategies, regulatory requirements, and industry best practices.
• Contribute to the continuous improvement of internal methodologies and security services.
• Build and maintain strong client relationships with a service-focused mindset.
• Identify client challenges and future needs that may lead to service expansion opportunities.
• Contribute to business development and client growth by supporting proposal creation, project scoping, thought leadership (e.g., blogs, webinars), and collaborating on presentations, tenders, and workshops with senior team members.
• A proactive, client-oriented mindset with a passion for continuous learning and improving security outcomes.

Skills, Knowledge and Expertise

• Experience within cyber security consulting, security auditing, or risk advisory roles.
• Experience in delivering client-facing cyber risk advisory services.
• Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR.
• Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. 
• Experience planning and delivering engagements independently and as part of a team, within tight timescales, to budget and a high level of quality. 
• Competent in working with a range of clients, from SMEs to large enterprise environments.
• Experience preparing, supporting, or auditing certification audits (e.g., ISO 27001, SOC 2, Cyber Essentials)

• Industry-recognised certifications such as ISO 27001 Lead Auditor/Implementer, CISSP, CISA, CISM, or similar.
• Exposure to penetration testing, or hands-on vulnerability assessment (even if not a primary role).
• Experience with public cloud platforms (e.g., AWS, Azure, GCP, MS365) and understanding of cloud security principles.
• Experience in Operational Technology (OT) and understanding of SANS standards.
• Familiarity with modern security technology and tools, SIEM, and security automation.
• Hands-on experience in security or IT engineering, including implementing technical controls, hardening systems, securing networks, or supporting secure architecture design.

Benefits