Graduate Cyber Security Consultant

We have an exciting opportunity for a Graduate Cyber Consultant to join our growing Cyber Security Business Unit. This early-careers role is designed for someone who wants to build practical experience in cyber security governance, compliance, risk management, whilst gaining a practical understanding of standards and regulatory assurance, and the delivery of client-focused cyber security consulting services.

Through the FSP Academy, structured learning, coaching and supervised client assignments, you will develop the knowledge and consulting skills required to support security assessments in complex and regulated environments, document findings and professionally communicate proportionate recommendations to stakeholders.

You will have the opportunity to gain exposure across areas such as:

• Cyber security governance, risk and compliance.
• Security control design and assessment.
• Cyber security frameworks, standards, regulatory and contractual requirements (ISO/IEC 27001, Cyber Essentials, Defence Cyber Certification, NIST Cybersecurity Framework and more)
• Evidence gathering, review and traceability.
• Gap assessments, compliance readiness reviews, audit and certification preparation.
• Risk identification, documentation and treatment planning.
• Security policies, procedures, controls and governance documentation.
• Third-party and supply-chain assurance.
• Communicating findings and recommendation to technical and non-technical stakeholders.
• Supporting client workshops and stakeholder engagement activities.
• Contributing towards the creation of client reports, presentations and recommendations.

Due to the nature of this role successful candidates will need to undergo security clearance. To be eligible for this role you must have lived in the UK for at least 5 consecutive years. More information on SC Clearance checks can be found here

• Participate in structured learning, coaching and practical client assignments to develop your cyber security compliance, standards, risk and assurance knowledge, while contributing to knowledge sharing, lessons learned and the continuous improvement of methodologies, tools, templates and ways of working.
• Work alongside experienced consultants to support client interviews, workshops and stakeholder engagement activities, gathering information to understand client environments, business processes, objectives and applicable security obligations.
• Support cyber security assessments against recognised frameworks, standards, regulations and contractual requirements.
• Gather, review and analyse assessment evidence, mapping controls to security requirements and identifying risk, gaps and improvement opportunities and contribute to assessment reports, recommendations and remediation plans.
• Apply agreed assessment methodologies and quality standards, escalating significant findings where appropriate and taking ownership of assessment activities as experience and confidence develops.

• A degree, apprenticeship or equivalent experience in Cyber Security, Computer Science, IT, Law, Risk, Audit, Business or another relevant discipline.
• A strong interest in cyber security compliance, regulation, risk management, audit or assurance, with motivation to learn through formal training, coaching, self-study and practical client experience.
• An organised and methodical approach, with strong attention to detail and the ability to review information, identify inconsistencies and draw evidence-based conclusions.
• Clear written and verbal communication skills, with confidence asking questions, seeking guidance, responding to feedback and developing client and stakeholder relationships.
• The ability to manage assigned tasks, maintain accurate records, meet deadlines and collaborate effectively within multidisciplinary project teams.
• Curiosity about how organisations operate and how security requirements support business objectives. Foundational knowledge or experience in cyber security risk, controls, policies, standards, research, audit, compliance or evidence analysis is advantageous, but not essential.

• You will follow a structured development pathway combining FSP Academy learning, client experience, coaching, mentoring and self-directed study.
• Early assignments will focus on observing established assessment approaches and completing clearly defined activities with guidance.
• As you develop, you will be supported to undertake more complex analysis, engage directly with client stakeholders,…