Senior Cyber Security Consultant

Senior Cyber Security Consultant

Department: Consultancy

Employment Type: Full Time

Location: United Kingdom / Remote

As a Senior Cyber Security Consultant at Actica, you will provide support to a wide range of high-profile UK public sector, critical national infrastructure and defence organisations. Your help will protect their ICT investments and play a key role in nationally critical projects that make a real difference to people’s everyday lives.

We are a National Cyber Security Centre Assured Cyber Security Consultancy.

Locations: London, Guildford, Bristol, M4 corridor

Working either individually or as part of a larger Actica team, you will undertake a number of varying consultancy assignments. Due to the potential variety in assignments your responsibilities may well depend on your own breadth of experience.

• Providing security expertise for major system procurements and Agile programmes.
• Identifying, analysing and evaluating information risks across a range of programmes, projects and systems.
• Explaining to risk owners and other stakeholders the causes, likelihood and potential business impacts of information risks throughout the information system lifecycle.
• Authoring and/or supporting the development of security assurance documentation in accordance with risk management frameworks.
• Developing or reviewing new security architectures that mitigate the risks posed by new technologies and business practices.
• Scoping security testing activities, and explaining the results and required remediation.

Your level of experience will determine the amount or responsibility given to you, and you may also have the opportunity to lead assignments and supervise direct reports while ensuring the overall success of the engagement.

You will undertake a variety of roles throughout the project lifecycle, working across a wide-ranging set of clients and cutting-edge technologies.

It is essential that you have the following experience:

• Experience of complex ICT systems in a technical delivery or consulting capacity.
• Good understanding of enterprise information and communications technology.
• Ability to present and justify conclusions to project teams and business stakeholders.
• Proven abilities in delivering to client expectations and requirements.
• Strong verbal and written communications skills.

Knowledge of or a desire to learn more about the following would be beneficial for the role:

• Experience in the UK Defence, Critical National Infrastructure and Public Sectors, particularly in ICT and enterprise solutions.
• Structured security frameworks, such as HMG SPF and ISO
  27001.
• Security, technical and enterprise architecture methods such as TOGAF and SABSA.
• Technical risk assessments.
• Enterprise security packages.
• Software development and delivery.
• ICT service delivery, including ITIL.

• Must be eligible and willing to obtain UK Government Security Clearance.

• Ability to engage effectively with stakeholders, including resolving issues and identifying new opportunities.
• Strong interpersonal and influencing skills.
• Adaptability to a fast-paced, ever-changing environment.

• Hybrid working model, with an office base in Guildford, Surrey and access to our other offices in London, Swindon and Cheltenham.
• Typical working week might involve 2-3 days working at clients’ premises or other locations and the remainder at home or one of our offices.
• Some projects may require up to 5 days per week on‑site with colleagues.
• The practicalities of some project work mean that individuals may need to stay away from home during the working week.
• Team‑based project environment with opportunities to participate in internal initiatives.

You will have the opportunity to further your career in consulting, specialising in the application of information assurance and cyber security expertise to a wide range of business problems. We provide substantial training leading to nationally recognised certifications, such as chartered or principal status with the UK Cyber Security Council, or certifications such as CompTIA, NIST, PCiIAA, CISMP, CISSP,…