Technical Cyber Security Consultant

Salary: £48,000 - 88,000 per year

Requirements

• Proven experience in cyber / information security risk management and control assurance roles.
• Strong analytical skills with the ability to evaluate technical, procedural and design evidence.
• Excellent written and verbal communication skills, with experience presenting to senior and non-technical audiences.
• Experience working collaboratively with multidisciplinary teams across business and technology functions.
• Familiarity with recognised security frameworks and standards (ISO 27001, NIST, CIS Controls).
• Highly organised with strong attention to detail and a commitment to high-quality, auditable documentation.
• Candidates must hold government security vetting at SC level and be able to meet UK residency requirements.

Responsibilities

• Deliver security risk identification, assessment, analysis and logging activities, ensuring risks are clearly articulated, consistently scored and recorded in approved Information Security Risk Management (ISRM) tools.
• Perform control assurance activities to validate how control objectives are being met in practice, working closely with technical delivery teams to understand design and implementation.
• Identify and document control gaps, assess residual risk, and clearly articulate outcomes within control and assurance artefacts.
• Support the delivery, rollout and continuous improvement of Information Security Risk Management methodologies, including the discovery, review and transformation of historic risk assessments into an updated, consistent approach.
• Manage allocated assignments end-to-end, ensuring all control, assurance and risk outputs are delivered accurately and in a timely manner.
• Maintain oversight of risk remediation activities, tracking actions through to implementation and ensuring ongoing risk treatment and control effectiveness.
• Provide advice, guidance and intelligent challenge on enterprise control alignment during reviews of solution designs, security documentation and architecture artefacts.
• Lead and facilitate collaborative control and risk workshops with business and technical stakeholders to drive shared understanding, surface key risks and agree appropriate outcomes.
• Contribute to post-incident and remedial assurance activities, ensuring lessons learned are captured and embedded into control improvements.
• Provide input into formal scoping, ensuring key security risks are reflected in test scope and that critical controls are robustly assessed against expected security outcomes.
• Prepare clear, concise risk summary statements and assurance outputs for senior stakeholders and risk owners, translating technical issues into business-focused language to enable effective information risk decisions.
• Present assurance findings and risk positions at governance forums and stakeholder meetings, representing the security assurance function with credibility.
• Ensure effective knowledge transfer on key assignments, building capability and understanding across business and technical stakeholders.
• Contribute to the continuous improvement of assurance practices, maintaining awareness of emerging threats, vulnerabilities and industry best practice.

Technologies

• Embedded
• Support
• Security

More

We are a leading organisation in our field, committed to supporting the digital security risk management capability through comprehensive cybersecurity solutions. Our Cyber Security Consultant will play a critical role in identifying, assessing, and managing information and cyber security risks. We offer a competitive salary and a flexible remote-first working environment, with opportunities for career development and continuous learning. Our benefits package includes Private Health Care, Cash Back Plan, Buy/Sell Holiday Options, Life Assurance, and more. We pride ourselves on fostering a diverse and inclusive community and encourage applications from all backgrounds.

last updated 26 week of 2026