- Security Assessments & Risk Management: Conduct security assessments, risk analysis, and provide incident response guidance. Identify and prioritise remediation actions.
- Security Solution Design: Design and implement bespoke cyber security solutions using both commercial and custom-built tools.
- Regulatory Compliance: Support clients in meeting standards such as ISO 27001, NIST, GDPR, Cyber Essentials, and NIS. Offer guidance on legal and regulatory data protection requirements.
- Incident Response: Develop, maintain, and test incident response plans. Support clients during security incidents, including delivery of tabletop exercises.
- Stakeholder Engagement: Act as a trusted advisor to both technical and non-technical stakeholders, translating security concepts into business-aligned outcomes.
- Security Awareness Training: Deliver security awareness and training sessions for both internal and client teams.
- Documentation & Reporting: Produce clear, business-focused security reports, policies, and incident documentation.
- Continuous Learning: Stay informed of evolving threats and solutions through regular training and industry engagement.
- Degree in Information Security, Computer Science, or equivalent experience.
- Industry certifications such as CISSP, CISM, CEH, or similar.
- 3+ years in a cyber security consulting role.
- Strong knowledge of UK information security frameworks and compliance requirements.
- Proven ability to lead client engagements and deliver tailored security advice.
- Excellent written and verbal communication skills.
- Strong analytical thinking and attention to detail.
- Self-motivated, ethical, and professional approach to consulting.