Cyber Strategy and Risk Consultant; Governance, Risk and Compliance

A leading Big Four professional services firm is hiring cyber strategy and risk professionals in London as its cyber advisory team grows. If you enjoy helping organisations make sense of their cyber risk and turn regulation into plans that actually work, this could be a great fit.

The roles sit within a growing cyber advisory team that helps clients shape their security strategy, manage risk and meet their regulatory obligations, and some of the work is likely to be defence related. The focus is mainly Manager level, with some Assistant Manager opportunities, so you could be leading work streams, advising senior stakeholders and developing the people around you.

• Advising clients on cyber strategy, security programmes and target operating models
• Running cyber risk assessments and maturity reviews, and helping clients prioritise what to fix first
• Supporting clients with regulation and standards such as NIS2, ISO 27001 and NIST
• Presenting clearly to senior stakeholders and building lasting client relationships
• Managing delivery and coaching more junior colleagues

• Experience in cyber security governance, risk and compliance, security strategy or consulting
• A good understanding of how security frameworks and regulation work in practice, beyond simply ticking boxes
• Confidence communicating with senior people and turning technical detail into clear advice
• A track record of managing work streams, or of supporting others to deliver
• Professional qualifications such as CISM, CISSP or ISO 27001 Lead Implementer are helpful but not essential
• Current security clearance, or eligibility to obtain it, is helpful as some work may be defence related

The working pattern is hybrid, generally two to three days a week in the London office, with some defence work needing more time on site. We will talk through the specific role, team and timings with you on an initial call, so you know exactly what you are applying for.