Cyber Security Consultant

Gloucester / Hybrid (3 days per week in office)

Most job ads for cyber roles read like someone emptied a bucket of buzzwords onto a page and hoped for the best. This isn’t that.

My client is looking for a Cyber Security Consultant who can do more than point at a risk register and nod thoughtfully. We want someone who can actually talk to people - the kind who can explain a real‑world cyber threat to a stakeholder without them needing a translator or a stiff drink.

If you’re the sort of person who enjoys telling a project team “it depends” and then actually explaining what it depends on, keep reading.

• Supporting business projects - You’ll be the person people come to when they want to know whether their bright idea is secure, sensible, or a future headline waiting to happen.
• Vulnerability & Pen Testing oversight - You’ll be the escalation point when tools, scanners, and vendors start shouting about things that may or may not matter. You’ll help the business figure out which fires are real.
• Third‑Party Risk Management - You’ll own the process. Yes, own. Not “support”, not “assist”, not “be aware of”.
• Procurement support - Sometimes you’ll be doing deep‑dive due diligence yourself. Sometimes you’ll just be the adult in the room.
• Team development - You’ll mentor junior team members, helping them grow into confident, capable security professionals rather than human ticket‑closing machines.

• 5+ years doing real cyber security work - not just watching dashboards.
• A strong grasp of enterprise ICT
  , security principles
  , and cloud security
  .
• Good knowledge around Vulnerability Management and working with Testing teams
• Understanding of CI/CD and how security fits into it without being the department of “no”.
• Communication skills that don’t require subtitles.

If you’re the sort of person who can explain a vulnerability without turning it into a TED Talk, you’ll fit in fine.

• Up to 12% employer pension contribution
  .
• A bonus scheme up to 24% - yes, really.

Cyber security only works when the business understands it. You’ll be the person who makes that happen - translating risk into reality, guiding decisions, and shaping how the organisation protects itself.

If you want a role where you can influence, mentor, and actually make things better - not just tick boxes - this is it.