Chartered Cyber Audit Lead

Location: Cheltenham area, flexible hybrid working with ideally 1 to 2 days onsite per week

Sector: Defence, national security and highly regulated cyber assurance

We are working with a specialist defence and security consultancy that supports complex UK defence, government and high-assurance programmes. This is a senior opportunity for an experienced cyber audit and assurance professional who can lead client-facing engagements, provide technical authority and help shape assurance quality across critical environments.

You will lead external cyber security audit, assurance and certification engagements across the full audit lifecycle, including scoping, planning, fieldwork, evidence review, reporting and follow-up. The role includes work across Defence Cyber Certification, Cyber Essentials, ISO/IEC 27001, NIST and other recognised assurance frameworks.

This would suit a Principal-level cyber audit specialist, or a strong Senior Consultant ready to step up, who can combine technical audit rigour with a calm, credible and consultative style.

• Leading cyber security audit, assurance and certification engagements.
• Acting as Lead Auditor or Lead Assessor on high-assurance and regulated work.
• Assessing control design and operational effectiveness across people, process, technology and third-party dependencies.
• Running structured audit interviews, evidence reviews, sampling and testing.
• Producing clear, defensible audit and certification reports.
• Presenting findings to senior, executive and non-technical stakeholders.
• Supporting audit methodology, quality controls and assurance process improvement.
• Mentoring other cyber security and assurance specialists.

• Significant cyber security audit and assurance experience, ideally in defence, government, regulated or high-assurance environments.
• Eligibility for chartership in auditing or cyber security, current chartership, or demonstrable Principal-to-Chartered level experience.
• Strong practical knowledge of audit principles, assurance methodologies, control testing and evidence evaluation.
• Experience with ISO/IEC 27001, NIST, Cyber Essentials and defence-focused assurance schemes.
• Strong client-facing skills, including the ability to explain complex assurance matters clearly.
• Confidence leading senior conversations with clients, boards, audit committees or senior management.
• A collaborative, professional style with the credibility to work in a consultancy environment.

• Work on meaningful defence and national security programmes.
• Join a specialist consultancy with strong expertise across cyber assurance and resilience.
• Principal-level scope with visible client impact.
• Opportunity to support DCC capability, assurance maturity and chartership-focused professional standards.
• Flexible hybrid working and a strong salary package.