NCSC Cyber Consultant Ref. 3811

Job description

GCHQ is an intelligence, cyber and security agency with a mission to keep the UK safe. We use cutting‑edge technology, ingenuity and partnerships to identify, analyse and disrupt threats. Working with our intelligence partners, MI5 and MI6, we protect the UK from terrorism, cyber‑attacks and espionage.

At GCHQ, you’ll do varied and fascinating work in a supportive and inclusive environment that places a strong emphasis on teamwork.

The National Cyber Security Centre (NCSC), part of GCHQ, is the UK Government’s lead authority on cyber security. The organisation is at the heart of the Government’s cyber security strategy and aims to make the UK the safest place to live and work online.

We are recruiting cyber consultants across various departments within the NCSC to help the UK remain cyber resilient in the AI (Artificial Intelligence) age. Sitting within the National Resilience Directorate, these roles will support organisations across the public and private sectors to prepare for increasingly capable AI‑powered cyber‑attacks, while also helping them adopt AI safely, securely and with confidence.

You’ll work at the intersection of cyber security, emerging technology and national resilience, translating complex AI and cyber risks into practical guidance, support and action. Whether engaging with government, regulators, critical sectors or businesses across the UK, you’ll help organisations understand what AI means for their security, resilience and future readiness.

This is an opportunity to shape a nationally significant area of work at a pivotal moment. AI is transforming both offensive and defensive cyber capabilities, and we need people who can think strategically, collaborate widely and turn uncertainty into practical resilience.

If you are motivated by emerging technology, public purpose and the opportunity to make a real national impact, this role offers the chance to join us in securing the UK’s future in an era of rapid technological change.

Supporting the NCSC’s role in building resilience across the public and private sectors, the role involves extensive engagement with colleagues across the NCSC, GCHQ and wider government to understand the threats facing critical national infrastructure and the wider private sector, including those from AI. Working closely with government departments, regulators and other arm’s‑length bodies, you’ll help identify and develop the technical, legislative, operational and other measures needed to strengthen national resilience.

You’ll also be expected to take ownership of significant areas of work, leading delivery and ensuring outcomes are achieved in complex and often ambiguous environments. The role also provides opportunities to represent the NCSC externally, engaging with industry stakeholders, attending meetings, and supporting briefings for a range of audiences.

Success in the role will depend on the ability to build strong relationships, influence across sectors, and translate emerging cyber and AI challenges into practical resilience outcomes. You’ll be trusted to exercise a high degree of judgement and autonomy, taking responsibility for progressing work, managing priorities and delivering outcomes. There will also be opportunities to continue developing your cyber knowledge and expertise while contributing to the development of others in a rapidly evolving threat landscape.

Depending on your background, experience, skills and interests, you may contribute to a broad range of activities designed to strengthen national cyber resilience. In many cases, you’ll be responsible for owning and delivering pieces of work from inception through to implementation, working with stakeholders to achieve lasting impact. This could include working directly with critical national infrastructure (CNI) regulators, providing access to NCSC insight and advice to help drive their mission forward.

You may also promote the effective use of NCSC guidance, tools, services, and frameworks, including the Cyber Assessment Framework.

Opportunities may include contributing to the development and implementation of national cyber resilience legislation and…