Security Assurance Consultant
Security Assurance Consultant (SC Cleared)
Location: Bristol
Hybrid
A growing cyber security consultancy is looking to hire an experienced Security Assurance Consultant to support a range of Defence and Public Sector programmes.
This is a client-facing consulting role suited to professionals with strong experience across Cyber Security Governance, Risk & Compliance (GRC) and Information Assurance who are comfortable delivering complex security projects while building relationships with senior stakeholders.
The Role
You will work within a consulting team delivering security and information assurance services across government and regulated sectors. Projects can range from targeted risk assessments through to full ISMS development and accreditation support on large and complex programmes.
Responsibilities include:
- Delivering governance, risk and compliance engagements across cyber security frameworks and standards
- Supporting organisations with security accreditation and assurance activities
- Conducting cyber security risk assessments, gap analysis and risk management activities
- Supporting the development and implementation of security frameworks and standards
- Engaging with technical and business stakeholders across complex environments
- Contributing to bid responses and pre-sales activities when required
- Maintaining knowledge of emerging developments in cyber security and information assurance
Experience Required
- Experience delivering security assurance or information assurance within regulated environments
- Familiarity with UK government security policies and accreditation processes
- Experience implementing security standards such as ISO 27001, NIST frameworks or similar
- Experience conducting cyber risk assessments and security reviews
- Strong understanding of enterprise IT environments, including infrastructure, cloud and SaaS
- Experience working with technical and security teams to deliver security outcomes
- Ability to conduct framework assessments and gap analysis
Certifications (Desirable)
- NIST Foundation / Practitioner
- CISM
- CRISC
- ISO 27001 Lead Implementer or Lead Auditor
- CISSP
- CISMP
Additional Requirements
- Active SC Clearance (or eligibility to obtain) is required due to the nature of the projects.
What’s on Offer
- Competitive salary depending on experience
- Performance-related bonus
- 27 days annual leave plus bank holidays
- Pension contribution
- Remote working options
- Training and professional development budget
- Private healthcare and wellbeing benefits
- Life assurance and additional employee benefits