Are you an experienced Cyber Risk Consultant with a passion for helping organisations understand, manage and reduce cyber risk? Do you enjoy working with stakeholders to deliver pragmatic, risk-based security advice that supports secure digital transformation and operational resilience?
We're looking for an SC-cleared Cyber Risk Consultant to join a high-profile client programme. Working predominantly remotely, you'll play a key role in identifying, assessing and managing cyber risks across digital services, applications and technology platforms. You'll provide expert guidance, support assurance activities and help ensure security risks are effectively managed across complex environments.
Location: Remote (occasional office attendance as required)
Full Time / Permanent
Salary: Up to £55,000 per annum + competitive benefits package
Security Clearance: Active SC clearance required
Providing expert advice on cyber risk management, assessment methodologies and recognised frameworks including ISO 27005 and the NIST Risk Management Framework.
Managing and supporting risk identification, assessment, treatment and remediation activities across digital systems, applications and infrastructure.
Facilitating cyber risk workshops, risk assessments and threat modelling exercises to identify and evaluate security risks.
Identifying and validating technical, procedural, physical and personnel security controls and recommending improvements to address vulnerabilities and control weaknesses.
Supporting the scoping and planning of IT Health Checks (ITHCs) and other assurance activities.
Reviewing ITHC outcomes and vulnerability assessments, providing clear guidance and developing pragmatic remediation plans.
Producing concise and informative reports that clearly communicate vulnerabilities, associated risks, control effectiveness and risk treatment activities.
Maintaining and managing residual risk registers and supporting risk governance processes.
Conducting security gap assessments against recognised control frameworks and monitoring remediation activities.
Evaluating third-party suppliers to provide assurance on the design and effectiveness of security controls.
Producing security audit reports, checklists, briefings and governance documentation.
Working closely with technical teams, architects, project managers and stakeholders to ensure security risks are appropriately managed throughout the lifecycle of systems and services.
Supporting continuous improvement initiatives that enhance cyber risk management, governance and security assurance practices.
We're looking for a proactive and collaborative cyber security professional with a strong background in governance, risk and compliance. You'll be comfortable engaging with a wide range of stakeholders, translating complex security concepts into practical guidance and delivering high-quality consultancy outputs.
You'll have a pragmatic approach to risk management, strong analytical skills and the ability to balance security requirements with business objectives.
Have a current Active Security Clearance.
Demonstrable experience delivering cyber security consultancy services within complex, highly regulated environments.
Strong hands-on experience in cyber risk management, governance and assurance.
Experience conducting risk assessments, security reviews, gap analyses and remediation planning.
Good understanding of modern technologies and services, including:
Microsoft Azure and Microsoft 365
AWS and Google Cloud
Mobile Computing
Infrastructure Technologies
Zero Trust Architectures
Security Architecture Principles
Strong working knowledge of:
GDPR and UK data protection requirements
PCI DSS
ICO guidance and requirements
Experience working with security standards and frameworks including:
ISO 27001
ISO 27005
NIST Cyber Security Framework (CSF)
NIST Risk Management Framework (RMF)
NCSC Cyber Assessment Framework (CAF)
CIS Controls
Understanding of HMG and NCSC security policies, standards and guidance.
Experience reviewing security testing outputs and supporting vulnerability remediation activities.
Ability to produce high-quality reports, risk registers, audit documentation and management briefings.
Excellent stakeholder engagement, workshop facilitation and communication skills.
Strong written communication skills with the ability to present technical findings to both technical and non-technical audiences.
Self-motivated, organised and comfortable working independently within a remote environment.
CISSP certification.
CISM certification.
CRISC certification.
SIRA Practitioner certification.
Full Membership of CIISec.
Registration with the UK Cyber Security Council at Chartered or Principal level in Cyber Security Governance & Risk Management.
BCS Chartered IT Professional (CITP).
Engineering Council Chartered Engineer (CEng).
Experience undertaking supplier assurance and third-party risk assessments.
Experience supporting security audits and compliance programmes.
Knowledge of secure-by-design principles and security architecture methodologies.
Previous experience mentoring colleagues or contributing to governance and assurance best practices.
At Cyberfort, we're committed to creating an environment where our people can do their best work, develop their careers and feel part of something meaningful. Alongside a supportive culture and opportunities to grow, we've offer a package that supports your health, wellbeing, finances, development and work-life balance, helping you feel your best both inside and outside of work. Our benefits include:
25 days annual leave, plus bank holidays, and your birthday day off
The option to buy and sell annual leave
Hybrid and flexible working opportunities (where applicable)
Enhanced family-friendly policies
Company pension scheme
Life assurance
Private Medical Insurance and wellbeing support
Professional training, certifications and learning opportunities
Employee referral bonus scheme
Recognition and reward programmes
Electric Car & Cycle to Work scheme
Discounts and savings through our employee benefits platform
At Cyberfort, we believe that diverse perspectives make us stronger. We're committed to creating an environment where everyone feels respected, supported and able to be themselves at work.
We know that talent comes in many forms, and we're dedicated to ensuring our recruitment process is accessible and inclusive for all. If there's anything we can do to support you during your application or interview experience, we'd encourage you to let us know.
We're proud to champion inclusion through our partnerships and commitments, including:
Signatories of the Armed Forces Covenant
Corporate Members of Neurodiversity in Business
A Disability Confident Employer
Supporters of the CyberFirst initiative
We're continually learning, listening and evolving to build a workplace where everyone has the opportunity to thrive, grow and make a meaningful impact.
Cyberfort helps organisations stay ahead of cyber threats. We work alongside businesses and public sector organisations to strengthen their security, identify vulnerabilities and respond to threats before they become incidents.
Our expertise spans cyber security consultancy, penetration testing and managed detection and response (MDR). From helping customers understand their cyber risks and improve their security posture, to testing critical systems and providing 24/7 threat monitoring, we deliver practical solutions that help organisations operate with confidence.
What makes Cyberfort different is our people. We combine deep technical expertise with a collaborative, customer-first approach, building trusted partnerships and helping our customers navigate an ever-changing threat landscape.
At Cyberfort, how we work is just as important as what we do. Our culture is built around five core values: being curious, working as a team, staying agile, taking ownership, and thinking innovatively.
We’re looking for individuals who are naturally inquisitive, collaborative, and adaptable people who take pride in their work, are open to learning, and are always looking for ways to improve both themselves and the way we deliver for our customers.
Supports Cyberfort's mission to make the world safer, one business at a time.
Delivers high-quality cyber risk and assurance services into a strategically important client engagement.
Helps strengthen cyber resilience through effective governance, risk management and security assurance.
Supports informed decision-making through clear, pragmatic and risk-based security advice.
Builds trusted relationships with stakeholders and contributes to the continued growth and reputation of Cyberfort's consultancy team.
We review applications on a rolling basis and aim to move quickly through our selection process, so we encourage you to apply as soon as possible. If you would like to apply for this role, we'd like to see your CV and a cover letter.
At Cyberfort we are passionate about the cyber security services we deliver for our customers which keeps their people, data, systems and technology infrastructure secure, resilient and compliant.
Our business offers National Cyber Security Centre assured Consultancy services, Identification and Protection against cyber-attacks, proactive Detection and Response to security incidents through our security operations centre and a Secure and Recover set of Cloud solutions which keeps data safely stored, managed and available 24/7/365.
Over the past 20 years we have combined our market leading accreditations, peerless cyber security expertise, strong technology partnerships, investment in our future cyber professionals and secure locations to deliver a cyber security experience for customers which enables them to achieve their business and technology goals in an ever-changing digital world.
