Audit Consultant

Job Description

Leonardo UK is seeking an Audit Consultant to join the Cyber & Security Solutions Division team. This role is focused on assessing the cyber maturity and compliance level of an organisation and helping customers with remediating security issues in a proportionate manner that is tied to the their objectives.

• Relate
  - Our customers and their problem are at the heart of what we do, as a Consultant you will help to actively listen and empathise with our customers to build intimacy.
• Understand – We add value by solving problems, as a Consultant you will help define potential solutions to these problems with only limited information based on your experience and technical knowledge.
• Assess – At Leonardo we adopt a risk-based approach to any security problem. As a Consultant you will need to understand and frame threats and other security concepts through the language of risk to help customers to make the link back to their objectives.
• Treat – Managing risk is the technical core of our offering. As a Consultant you will assist in defining appropriate and proportionate security solutions across people, process and technology, showing how those solutions enable customers to achieve their objectives.
• Assure – Giving our customers confidence that security is where it needs to be is a key requirement across heavily regulated industries. As a Consultant you will assist in defining, implementing and performing assessments of our customer’s environment against a given set of criteria spanning people, process and technology.
• Develop – All our offerings are based on a core set of products. As a consultant you will assist in building a viable offering as part of the Leonardo business winning process for a customer as well as help in the technical development of our products to be used across our customer sectors.

This is an exciting opportunity to be part of significant programmes, during which you will ensure that products meet the highest standards, in accordance with customer’s requirements and risk appetite. You will be supported in this role as part of a larger team of consultants, engineers and product domain specialists.

• Core consulting skills – building client relations; adaptability to changing schedules; reliability and quality of task delivery; flexibility in working hours and locations; team player.

• Studying towards a recognised professional certification in Cyber Security or directly equivalent hands‑on experience.

• Experience of and ability to manage multiple stakeholders and their needs with empathy, finding an appropriate balance of listening and speaking.
• An ambitious and creative drive to help safeguard UK national infrastructure and become a recognised cyber expert.
• Willingness to gain experience in the development and mentoring of junior team members.
• Basic understanding of security compliance & basic knowledge of a control framework such as NIST SP800-53 and ISO
  270002, IEC
  62443.
• Basic understanding of security maturity & basic knowledge of a security maturity framework such as NIST CSF Implementation Tiers, C2M2 and NCSC CAF.
• Experience of assisting with managing project delivery and associated metrics such as time, cost and quality.
• Willingness to gain experience in measuring compliancy of an organisation or digital system against a given set of security criteria.

This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn.

This role is subject to pre-employment screening in line with the UK Government’s Baseline Personnel Security…