Cyber Security Auditor

Cyber Security Auditor (SC Clearance required)

We're supporting a leading Defence and Cyber Security consultancy in the search for Cyber Security Auditors to join a growing team delivering assurance, compliance, and cyber risk assessments across high-profile Defence and Government programmes.

This is an excellent opportunity for consultants with experience in cyber compliance, audit, risk management, or information assurance who are looking to build a long-term career within the Defence and National Security sector.

You’ll initially work alongside experienced Cyber Audit Consultants, supporting the delivery of assessments against frameworks including:

• NCSC Cyber Assessment Framework (CAF)
• Defence Cyber Certification (DCC)
• Government assurance standards
• ISO
  27001 and related security frameworks

Successful candidates will be given the opportunity to develop into fully-fledged Cyber Audit Consultants, taking ownership of assessments and engaging directly with senior client stakeholders.

• Support the planning and execution of cyber security audits and compliance assessments.
• Review organisational processes, procedures, and technical controls against CAF, DCC, and relevant regulatory requirements.
• Gather and assess audit evidence from client stakeholders.
• Produce high-quality audit reports, findings, and recommendations.
• Document risks, observations, and corrective actions.
• Support senior consultants in client workshops and assurance activities.
• Maintain accurate audit documentation and assessment records.
• Stay up to date with cyber security regulations, compliance requirements, and industry best practice.
• Active security clearance
• Experience with in cyber security, governance, risk, compliance, assurance, or audit.
• Strong report-writing and documentation skills.
• Excellent analytical and problem-solving ability.
• Strong stakeholder engagement and communication skills.
• Ability to work both independently and within a collaborative team environment.
• Experience working within Defence, Government, or highly regulated environments.
• Knowledge of NCSC Cyber Assessment Framework (CAF) v3.2/v4.0.
• Awareness of Defence Cyber Certification (DCC).
• Experience supporting audits, compliance reviews, or risk assessments.
• Understanding of ISO
  27001 principles and controls.