Cyber & Information Assurance Consultant​/Senior Consultant​/Principal Consultant

Cyber & Information Assurance Consultant / Senior Consultant / Principal Consultant
Defence | National Security | Cyber Security | Information Assurance
£65,000-£120,000 + benefits | UK Remote / Hybrid | SC Clearance, with ability to obtain DVHelp secure the information, systems and capabilities that matter most.

Are you a cyber security, information assurance, risk, security or systems professional looking to apply your expertise to some of the UK’s most complex Defence, Government and National Security challenges?

Perhaps you’re a Service Leaver, Veteran or Defence professional with experience of secure information systems, operational communications, cyber security, risk management, assurance or working in complex and highly controlled environments.

We are working with a specialist UK organisation delivering cyber-resilient systems and high-assurance digital services to Defence, Government and Critical National Infrastructure customers – environments where controlled, secure and reliable information flow is mission critical.

Due to continued growth, we are seeking talented professionals across three levels – Cyber & Information Assurance Consultant, Senior Consultant and Principal Consultant.

These are excellent opportunities for people who enjoy understanding complex risks, solving challenging problems, engaging with customers and helping organisations operate securely in demanding environments.

Your work could span a broad range of secure and high-assurance environments, including:

• Cyber security and information assurance
• Cyber risk management
• Security governance and assurance
• Secure-by-Design
• Security architecture
• Secure information exchange
• Cross-domain solutions
• Cloud security assurance
• Networks and communications
• Applications and data platforms
• Operational and mission-critical systems
• Defence and Government digital transformation
• High-assurance and regulated environments

You will help customers understand their security risks, assess the effectiveness of controls and evidence, and make informed decisions about how those risks should be treated and managed.

Depending on your level and experience, you could be involved in:

Cyber Risk & Assurance

• Conducting cyber security and information assurance risk assessments.
• Identifying threats, vulnerabilities, impacts and control requirements.
• Developing proportionate risk treatment recommendations.
• Maintaining cyber risk registers, assumptions, dependencies and residual risk positions.
• Supporting formal risk acceptance and escalation activity.
• Providing clear, practical advice to technical and non-technical stakeholders.

Information Assurance

• Supporting assurance of systems, services and information-handling arrangements.
• Assessing compliance against customer, contractual and regulatory requirements.
• Reviewing security documentation, technical evidence and control implementation.
• Supporting security case development and assurance planning.
• Contributing to accreditation, authorisation and approval activity.
• Maintaining traceability between security requirements, controls, evidence and risk decisions.

Security Governance & Secure-by-Design

• Supporting security policies, standards, procedures, governance frameworks and assurance plans.
• Contributing to security governance forums and assurance boards.
• Tracking security actions, risks, decisions and evidence.
• Working with architects, engineers and delivery teams to embed security throughout the lifecycle.
• Reviewing solution designs for security, privacy, resilience and assurance implications.
• Supporting identification of security and non-functional requirements.
• Applying principles including defence-in-depth, least privilege and Zero Trust.

Threat & Vulnerability Assessment

• Assessing credible threat scenarios relevant to customer environments.
• Reviewing vulnerability information and technical findings.
• Interpreting penetration testing, vulnerability scanning and security assessment outputs.
• Evaluating exploitability, business impact and operational consequence.
• Recommending remediation priorities and appropriate compensating controls.

Customer Engagement

• Customer security teams
• Senior risk owners
• Solution…