Location: Remote, occasional travel as required to meet client/business needs
Department: Private Sector Cyber Consultancy
Contract Type: Full-time
Salary: Competitive + Benefits
At Cyberfort, we’re securing the digital future. As a leading UK provider of cybersecurity solutions, we deliver cutting-edge services in Managed Detection & Response (MDR), Penetration Testing, Security Operations, and Strategic Consulting.
We’re large enough to offer exciting opportunities, yet agile enough to ensure every voice is heard. At Cyberfort, you’re not just joining a company, you’re becoming part of a mission-driven team.
As a Security Consultant, you will support client engagements across a range of security frameworks, helping organisations assess, improve, and evidence their security posture. You’ll work independently and alongside senior consultants to deliver gap analyses, remediation plans, and assurance activities across ISO standards, NIST, CAF, Cyber Essentials, CSA CCM and related frameworks.
This role combines structured advisory work with hands‑on delivery, offering exposure to varied industries and maturity levels while developing your consulting and technical security skills.
Support delivery of security assessments and improvement programmes across ISO, NIST, CAF, Cyber Essentials, CSA CCM and similar frameworks
Conduct gap analysis aligned to client risk appetite, sector expectations, and regulatory context
Assist with risk assessments using recognised methodologies (e.g. ISO 27005, NIST RMF, FAIR or equivalents)
Draft, review, and maintain information security documentation including policies, standards, procedures, and guidance
Support implementation of technical, administrative, and physical controls mapped to applicable frameworks such as ISO 27001:2022
Contribute to internal audits, external assurance activities, and certification readiness engagements
Assist clients in tracking security metrics, evidence, and ongoing compliance obligations
Help deliver workshops, awareness sessions, and practical guidance to embed good security practices
Hands‑on experience working with one or more security frameworks such as ISO 27001, NIST CSF, CAF, Cyber Essentials or CSA CCM
A solid understanding of information security principles, risk management, and control design
Experience contributing to security assessments, audits, or compliance initiatives
Strong written and verbal communication skills, with confidence working directly with clients
A proactive, structured approach to problem‑solving and documentation
Relevant certifications or working towards them (e.g. ISO 27001 Implementor or auditor)
Familiarity with AI Risk Management Frameworks and Ethical use of AI protocols (e.g. NIST AIRMF, ISO42001)
Familiarity with tooling for risk registers, audit management, or GRC platforms e.g. Vanta / OneTrust
Working knowledge of M365, Google workspace environments
Strong MS office capabilities specifically Excel and Word
We understand that one size doesn’t fit all. If you need adjustments during the recruitment process, we’re here to support you. Cyberfort is proud to be a Disability Confident Employer, a CyberFirst partner, and a signatory of the Armed Forces Covenant.
Purpose-Driven Work – Help protect businesses and communities from evolving cyber threats.
Growth & Development – Access mentoring, apprenticeships, graduate schemes, and continuous learning platforms.
Inclusive Culture – We champion diversity through our Women’s Network, Neurodiversity Awareness, and Inclusion Committee.
Flexible Working – Hybrid and remote options to support work-life balance.
Top-Tier Benefits – Competitive salary, private healthcare, wellbeing support, generous holiday allowance, and more.
If you’re passionate about cybersecurity and want to make a real impact, we’d love to hear from you.
Cyberfort Careers Page: https://careers.cyberfortgroup.com/
Working at Cyberfort: https://cyberfortgroup.com/about-us/careers-working-at-cyberfort/
At Cyberfort we are passionate about the cyber security services we deliver for our customers which keeps their people, data, systems and technology infrastructure secure, resilient and compliant.
Our business offers National Cyber Security Centre assured Consultancy services, Identification and Protection against cyber-attacks, proactive Detection and Response to security incidents through our security operations centre and a Secure and Recover set of Cloud solutions which keeps data safely stored, managed and available 24/7/365.
Over the past 20 years we have combined our market leading accreditations, peerless cyber security expertise, strong technology partnerships, investment in our future cyber professionals and secure locations to deliver a cyber security experience for customers which enables them to achieve their business and technology goals in an ever-changing digital world.
