Senior Cyber Security Consultant

About you

• Experience of delivering technical cyber security consultancy in multi-disciplined environments, with proven ability to work both independently and collaboratively. Strong background in information assurance, including developing Information Security Management Systems (ISMS), conducting risk assessments, and deploying appropriate security controls.

• Excellent verbal and written communication skills, with the ability to engage effectively with stakeholders at all levels. Proven ability to work both independently and collaboratively within a multi-discipline, matrix organisation. Strong organisational skills, with experience managing multiple projects and tasks concurrently. Ability to deliver security outcomes to tight deadlines while maintaining quality and managing stakeholder expectations.

• Willingness and flexibility to travel throughout the UK (and occasionally overseas) as required.

• Relevant professional certifications (e.g., ISO27000, NIST Cyber Security Professional, CISMP, CISM, CISSP, CCSP, Chartered Cyber Security Professional) are highly desirable. Solid understanding of 'Secure by Design' methodology. Commitment to ongoing professional development and willingness to learn new frameworks and technologies.

• Experience in the UK Defence sector, including knowledge of MoD security policies and processes (e.g., HMG Information Assurance Policies, Security Policy Framework, JSP440, JSP604/JSP453).

• Experience conducting and managing security assurance and accreditation activities for Defence capabilities or experience delivering cyber security consultancy in OT environments (e.g., energy, utilities, transportation). Be able to apply knowledge, with creative and innovative thinking, in a broad range of complex and non-routine contexts covering people, process and technology relating to the cyber risk management of OT/ICS.

• Experience with SCADA, PLC and RTU packages and understanding how they integrate with field devices, historians, and corporate IT networks. Facilitate Cyber Security risk assessments and determine the most cost-effective deployment of security controls and solutions in line with the client's business risk appetite to protect OT/ICS environments.

• Select appropriate technology to meet clients' security requirements and help them deploy that technology in live OT/ICS environments. Familiarity with OT cyber security standards or regulatory frameworks (e.g., IEC 62443, NIST CSF, NIS Regulations, HSE OG-0086).

• Relevant OT cyber security qualifications (e.g., GICSP, IEC/ISA 62443). Membership of recognised security professional bodies (e.g., IISP, IS2, BCS, CIISEC).

• Ability to create client policies and procedures to meet corporate and regulatory requirements in OT environments. Experience selecting and deploying appropriate technology in live CNI environments.