Job Search

We are seeking an experienced Lead Security Consultant to provide expert advice, assurance and delivery across a broad range of cyber security and information assurance initiatives. This is a senior role for a confident security professional who can translate complex technical risks into clear, practical recommendations for both technical and non-technical stakeholders.

You will lead security consultancy engagements from initial scoping through to delivery, working closely with clients, delivery teams, architects and senior decision-makers. Responsibilities will include conducting security assessments, identifying vulnerabilities and risks, developing proportionate mitigation strategies, and providing guidance on security architecture, governance, policies and controls. You will also support the design and implementation of secure solutions across cloud, infrastructure, applications and operational environments.

The role will involve producing high-quality reports, risk assessments, security cases and actionable recommendations. You will be expected to challenge existing approaches constructively, maintain a strong awareness of emerging threats and regulatory expectations, and contribute to the continual improvement of security processes and standards. You may also mentor consultants, review technical outputs and lead workshops, presentations and stakeholder discussions.

Applicants should have substantial experience in a cyber security consultancy, security architecture, risk management or information assurance environment. A strong understanding of recognised security frameworks, secure design principles, vulnerability management, identity and access management, incident response and cloud security is essential. Experience of working with governance, risk and compliance requirements, as well as relevant industry certifications such as CISSP, CISM, SABSA or equivalent, would be advantageous.

You will be an effective communicator with strong analytical and problem-solving skills, able to manage competing priorities and operate confidently with limited supervision. The successful candidate will demonstrate sound professional judgement, commercial awareness and the ability to build trusted relationships at all levels. This role offers the opportunity to shape security strategy, influence important decisions and make a measurable contribution to the resilience of critical services and technology.

We are seeking an experienced Lead Cybersecurity GRC Consultant to provide strategic guidance across governance, risk and compliance initiatives. In this role, you will help strengthen the organisation’s security posture by developing and maintaining cybersecurity policies, standards, procedures and control frameworks aligned with recognised industry practices and regulatory requirements. You will work closely with technology, risk, legal, audit and business stakeholders to translate security objectives into practical, measurable and sustainable outcomes.

Your responsibilities will include leading cybersecurity risk assessments, control evaluations, compliance reviews and third-party risk assessments; identifying gaps; and recommending prioritised remediation plans. You will coordinate evidence collection and responses for internal and external audits, track control effectiveness and provide clear reporting to senior leadership. The role will also involve supporting regulatory and customer assurance activities, maintaining risk registers, advising on security requirements for projects and suppliers, and contributing to the continuous improvement of governance processes. You will mentor consultants and colleagues, promote a strong culture of accountability, and lead workshops to improve awareness of cybersecurity risk and control ownership.

To be successful, you will have substantial experience in cybersecurity governance, risk and compliance, with a strong understanding of frameworks such as ISO 27001, NIST CSF, COBIT or similar. Experience with regulatory obligations, privacy principles, security control testing, audit management and third-party risk is highly desirable. Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor are advantageous. You will bring excellent analytical, communication and stakeholder management skills, with the ability to present complex information clearly to both technical and non-technical audiences. A proactive, collaborative approach, strong attention to detail and the confidence to influence at all levels are essential.

We are seeking an experienced Lead Cybersecurity GRC Consultant to provide strategic direction and hands-on leadership across governance, risk and compliance activities. In this role, you will advise senior stakeholders on cybersecurity risk, regulatory obligations and control effectiveness, while helping to strengthen security governance and embed sustainable risk management practices across the organisation. You will lead complex engagements from assessment through to remediation, ensuring that security objectives are aligned with business priorities.

Key responsibilities will include developing and maintaining cybersecurity policies, standards, frameworks and control libraries; conducting risk assessments, control reviews, maturity assessments and compliance gap analyses; and preparing clear reports, risk registers and remediation plans for executive and audit audiences. You will coordinate internal and external audits, support regulatory and client assurance activities, and monitor the timely resolution of findings. The role will also involve mapping controls to recognised frameworks and regulations such as ISO 27001, NIST CSF, SOC 2, PCI DSS and applicable privacy requirements. You will lead workshops, mentor colleagues and collaborate closely with technology, privacy, legal, procurement, internal audit and business teams.

The successful candidate will have substantial experience in cybersecurity governance, risk and compliance, ideally gained in a consulting, advisory or enterprise environment. You will bring strong knowledge of information security frameworks, risk methodologies, audit processes and regulatory expectations, together with the ability to translate technical issues into practical business recommendations. Relevant certifications such as CISSP, CISM, CRISC, CGEIT, ISO 27001 Lead Implementer or Lead Auditor are desirable. Excellent communication, stakeholder management, analytical and report-writing skills are essential, as is the confidence to influence at senior levels and manage multiple priorities. A proactive, collaborative approach and a commitment to continuous improvement will be highly valued.

We are seeking a Lead Cybersecurity GRC Consultant to provide strategic leadership across governance, risk, and compliance initiatives. This role will help strengthen the organisation’s cybersecurity posture by translating business objectives, regulatory obligations, and industry standards into practical security policies, controls, and improvement programmes. You will work closely with technology, risk, legal, audit, privacy, and business stakeholders to promote a consistent, risk-based approach to information security.

Key responsibilities include leading cybersecurity risk assessments, control reviews, maturity assessments, and remediation planning; maintaining and improving security governance frameworks; and supporting compliance with applicable regulations, contractual requirements, and recognised standards such as ISO 27001, NIST, CIS, or SOC 2. You will coordinate internal and external audits, manage evidence collection, track findings and corrective actions, and prepare clear reports for senior leadership and risk committees. The role will also contribute to third-party risk management, policy development, security exception processes, metrics and dashboards, business continuity activities, and the ongoing enhancement of the cybersecurity control environment.

The successful candidate will have substantial experience in cybersecurity governance, risk, and compliance, ideally gained in a complex or regulated environment. You will be confident interpreting regulatory and assurance requirements, assessing control effectiveness, and communicating risk clearly to both technical and non-technical audiences. Strong stakeholder management, consulting, analytical, and written communication skills are essential, along with the ability to lead initiatives, influence decision-making, and manage competing priorities. Relevant professional certifications such as CISSP, CISM, CRISC, CGEIT, ISO 27001 Lead Implementer or Auditor, or equivalent experience are desirable. A pragmatic, collaborative approach and a commitment to continuous improvement will be important for success in this position.

We are seeking an experienced Lead Cybersecurity GRC Consultant to provide strategic guidance across governance, risk and compliance activities. In this role, you will lead the development, implementation and continuous improvement of cybersecurity policies, standards, procedures and control frameworks. You will work closely with technology, security, legal, privacy, audit and business stakeholders to ensure that security risks are identified, assessed and managed in line with organisational objectives and regulatory expectations.

Key responsibilities include leading enterprise security risk assessments, maintaining risk registers and treatment plans, and advising on appropriate mitigation strategies. You will coordinate internal and external audits, support regulatory and client assurance activities, and oversee the collection and validation of evidence for compliance reviews. The role will also involve mapping controls to recognised frameworks and standards such as ISO 27001, NIST, SOC 2 and relevant data protection requirements. You will prepare clear reports for senior leadership, communicate complex risk matters to non-technical audiences, and mentor colleagues involved in cybersecurity governance and assurance. You may also contribute to third-party risk management, security assessments for new initiatives, metrics development and the continuous improvement of GRC processes and tooling.

The successful candidate will have significant experience in cybersecurity governance, risk management, compliance, audit or assurance, ideally within a complex or regulated environment. Strong knowledge of security frameworks, control design, risk methodologies and regulatory obligations is essential, together with practical experience managing audits and stakeholder relationships. Professional certifications such as CISA, CISM, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor are desirable. You will be confident working independently, managing competing priorities and influencing stakeholders at all levels. Excellent written and verbal communication skills, sound judgement, attention to detail and the ability to translate technical issues into clear business risks are required.

We are seeking a Lead Cybersecurity GRC Consultant to provide strategic guidance across governance, risk and compliance activities. In this role, you will lead the development, implementation and continuous improvement of cybersecurity frameworks, policies, standards and control environments. You will work with technology, privacy, legal, internal audit and business stakeholders to identify information security risks, assess their potential impact and ensure that appropriate mitigation plans are defined, owned and tracked.

Your responsibilities will include leading risk assessments, control reviews, compliance readiness activities and third-party security assessments. You will map regulatory and industry requirements to internal controls, support audit preparation and remediation, and produce clear reports for senior leadership and risk committees. You will also oversee governance processes, including risk acceptance, policy exceptions, security metrics, control testing and issue management. The role will involve mentoring other GRC professionals, improving processes and promoting a risk-aware culture across the organisation. You may also contribute to security strategy, incident lessons learned, business resilience and the development of security awareness initiatives.

The successful candidate will have substantial experience in cybersecurity governance, risk and compliance, with a strong understanding of frameworks such as NIST CSF, ISO 27001, COBIT, CIS Controls or equivalent. Experience interpreting regulations and contractual requirements, conducting risk and control assessments, and engaging with auditors and senior stakeholders is essential. Professional certifications such as CISSP, CISM, CRISC, CISA or ISO 27001 Lead Implementer/Auditor are highly desirable. You should be confident communicating complex security matters to both technical and non-technical audiences, able to influence at all levels and skilled at managing multiple priorities in a changing environment. Strong analytical, writing and stakeholder-management skills are required, along with a practical, collaborative approach to cybersecurity risk.

We are seeking a Lead Cybersecurity GRC Consultant to provide strategic guidance across governance, risk and compliance initiatives. In this role, you will lead the development, implementation and continuous improvement of cybersecurity frameworks, policies, standards and procedures aligned with recognised industry practices and regulatory requirements. You will work closely with technology, risk, legal, compliance, audit and business stakeholders to strengthen security governance and embed effective risk management across the organisation.

Key responsibilities include leading cybersecurity risk assessments, control reviews, compliance gap analyses and remediation programmes. You will advise on regulatory obligations, customer and third-party assurance requirements, and the design and operation of security controls. The role will also involve coordinating internal and external audits, preparing risk and compliance reports for senior leadership, tracking remediation activities, and maintaining accurate governance documentation. You will contribute to security strategy and roadmap development, support policy awareness initiatives, and mentor colleagues while promoting a practical, risk-based approach to cybersecurity.

The successful candidate will have substantial experience in cybersecurity governance, risk and compliance, ideally within a complex or regulated environment. You should have strong knowledge of frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, COBIT, SOC 2 or equivalent, together with an understanding of privacy, regulatory and third-party risk requirements. Professional certifications such as CISM, CISSP, CRISC, ISO 27001 Lead Implementer or Lead Auditor are desirable. Excellent communication, stakeholder management, analytical and report-writing skills are essential, along with the ability to translate technical risks into clear business impacts and practical recommendations. Experience leading projects, influencing senior stakeholders and managing competing priorities will be highly valued.

We are seeking a Lead Cybersecurity GRC Consultant to provide strategic guidance across governance, risk and compliance initiatives. This role will lead the development, implementation and continuous improvement of cybersecurity frameworks, policies, standards and controls aligned with recognised industry practices and applicable regulatory requirements. You will work closely with technology, privacy, legal, risk and business stakeholders to strengthen security governance and support informed risk-based decision-making.

Key responsibilities include managing enterprise security risk assessments, maintaining risk registers and treatment plans, coordinating internal and external audits, and overseeing compliance activities against frameworks such as ISO 27001, NIST, SOC 2 or equivalent standards. You will advise on control design and effectiveness, prepare clear reports for senior leadership, track remediation actions and provide practical recommendations to address control gaps. The role will also involve supporting third-party risk management, reviewing supplier security assessments, contributing to incident and issue management, and helping embed security requirements into projects and business processes.

The successful candidate will bring substantial experience in cybersecurity governance, risk and compliance, with a strong understanding of security frameworks, audit methodologies, regulatory obligations and control environments. Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor are desirable. You should be confident engaging stakeholders at all levels, translating technical and regulatory requirements into clear business actions, and leading complex initiatives from planning through to delivery. Strong analytical, communication, report-writing and influencing skills are essential, together with the ability to work independently, prioritise competing demands and promote a mature, collaborative security culture.

We are seeking an experienced Lead Cyber Security Consultant to deliver high-quality penetration testing and security consultancy services for a diverse range of clients across the UK. Working as a technical lead, you will plan and manage engagements from scoping through to reporting, ensuring that assessments are delivered to a consistently high standard and in line with relevant CHECK requirements, industry good practice and client expectations. The role will involve testing infrastructure, applications, networks, cloud environments and other technologies, identifying vulnerabilities, validating their business impact and providing clear, practical remediation advice.

You will act as a trusted advisor to clients, presenting findings to both technical and senior stakeholders and supporting them in prioritising risk reduction. Responsibilities will include reviewing statements of work, producing engagement plans and test strategies, quality-assuring technical reports, contributing to proposals and supporting business development activities. You will also provide technical leadership to consultants, coach less experienced team members, review their work and help develop internal methodologies, tools and service offerings. The role may include coordinating multiple concurrent engagements and maintaining strong relationships throughout the delivery lifecycle.

The successful candidate will have substantial professional experience in penetration testing or broader offensive security, together with a strong understanding of vulnerability assessment, security architecture, risk management and common attack techniques. Experience delivering CHECK-aligned services and leading client engagements is highly desirable. Relevant certifications such as CHECK Team Leader or Consultant, CREST, OSCP, OSCE, CRT or equivalent would be advantageous. You should be confident communicating complex technical issues clearly, able to write precise and commercially focused reports, and comfortable working independently while collaborating with wider consulting teams. A commitment to continuous learning, high-quality delivery and professional integrity is essential. This position is based in the UK and may require occasional travel to client sites.

We are seeking an experienced Lead Cyber Security Consultant to deliver high-quality security assessments and provide trusted technical advice to clients across the UK. The role will focus on CHECK-aligned penetration testing and consultancy engagements, helping organisations identify vulnerabilities, understand their exposure to risk and improve the resilience of their systems. You will lead projects from scoping and planning through to technical delivery, reporting and client presentation, while maintaining a consistently high standard of professionalism and quality.

Responsibilities will include performing and overseeing infrastructure, web application, wireless, cloud and internal network penetration tests; reviewing findings and producing clear, accurate reports for both technical and senior audiences; presenting results and recommendations to clients; and supporting remediation activities where required. You will contribute to engagement planning, estimation and quality assurance, mentor junior consultants and help develop testing methodologies, tools and internal processes. The role may also involve supporting security reviews, risk assessments and related advisory work, as well as building strong, long-term client relationships.

Applicants should have substantial experience in penetration testing or cyber security consultancy, with a proven ability to lead complex engagements and communicate effectively with a wide range of stakeholders. A current CHECK Team Leader or equivalent qualification and demonstrable experience delivering CHECK work are highly desirable. Strong practical knowledge of common attack techniques, vulnerability assessment, network and application security, Windows and Linux environments, and recognised security testing frameworks is expected. Relevant certifications such as CREST, OSCP, CRT, CSTM or equivalent would be advantageous. You should be analytical, commercially aware and confident working independently while collaborating with colleagues. Excellent written and verbal communication skills, strong attention to detail and a willingness to travel occasionally within the UK are also required.