Role : Cyber Security Consultant Location: Hybrid/UK-based (occasional on-site visits) Type: Permanent Salary: £55,000-£65,000 Are you passionate about helping organisations strengthen their cyber resilience? We’re looking for an experienced Cyber Security Consultant with a strong Governance, Risk, and Compliance (GRC) background to join a leading UK-based cybersecurity consultancy. This … for someone who’s worked in a consultancy environment , ideally advising small to medium-sized businesses , and who thrives on guiding clients through frameworks like NIST, ISO27001, CIS , and CyberEssentials/Plus . What You’ll Do Lead risk assessments and gap analyses , delivering actionable insights aligned with leading frameworks (CyberEssentials, NIST, ISO27001, CIS … across the cybersecurity landscape. What We’re Looking For Proven experience in a cybersecurity consultancy , ideally serving SMEs or mid-market clients . Strong understanding of GRC frameworks – particularly CyberEssentials/Plus, NIST, CIS , and ISO27001 . Proficiency with common cybersecurity tools and technologies, and a strong knowledge of current cybersecurity threats, trends, and mitigation strategies, ideally More ❯
Portsmouth, England, United Kingdom Hybrid / WFH Options
Franklin Fitch
Cyber Security Assurance Manager Overview An exciting opportunity has arisen for an experienced Cyber Security Assurance Manager to take ownership of security certifications, audits, and assurance standards for a leading Security Operations Centre (SOC) environment. This role will focus on delivering and maintaining key certifications such as ISO/IEC 27001 , SOC 2 Type II , CyberEssentials … global SOC function. Key Responsibilities Certification Delivery & Maintenance Lead the delivery and ongoing maintenance of SOC-related certifications including SOC 2 Type II , SOC 3 , ISO/IEC 27001 , CyberEssentials Plus , and CREST . Manage sector-specific compliance such as PCI DSS and NCSC CIR/CHECK . Ensure timely renewals and proactively address compliance gaps. Security … and awareness sessions on SOC assurance standards and compliance best practices. Experience & Qualifications Proven experience delivering and maintaining certifications such as ISO/IEC 27001 , SOC 2 Type II , CyberEssentials Plus , and CREST . Solid understanding of SOC operations and security assurance frameworks . Experience managing customer-facing assurance activities, including audits, RFIs, and RFPs. Knowledge of More ❯
Portsmouth, yorkshire and the humber, united kingdom Hybrid / WFH Options
Computappoint
Cyber Security Assurance Manager Location: Portsmouth, UK Hybrid: - 3 days onsite per week Salary: Up to £65,000 Employment Type: Permanent Job Summary: Our client, a leading IT services and consulting firm, is seeking a Cyber Security Assurance Manager to ensure their SOC meets and maintains top security certifications and assurance standards. As part of the GRC function … you’ll lead customer assurance activities, manage external audits, and oversee key certifications such as ISO 27001, SOC2 Type II, CyberEssentials Plus, and CREST SOC accreditation. Key Responsibilities: Act as primary contact for customer assurance activities, supporting RFIs, RFPs, and client audit requests Deliver training and awareness sessions on SOC assurance standards to internal teams Develop customer … facing assurance documentation demonstrating the organisation's security posture Lead the delivery and ongoing maintenance of SOC-related certifications (SOC 2 Type II, SOC 3, ISO/IEC 27001, CyberEssentials Plus, CREST) Embed certification requirements into SOC governance, processes, and operational practices Ensure continuous monitoring, evidence collection, and audit readiness for internal and external assessments Monitor developments More ❯
ross-on-wye, midlands, united kingdom Hybrid / WFH Options
DCS Technology
Security Analyst to join our client who will play a key role in driving compliance, governance, and continual improvement across key security frameworks including ISO 27001, PCI DSS, and CyberEssentials Plus. Key Responsibilities: • Lead on the operation and continual improvement of the Information Security Management System (ISMS) • Coordinate internal and external audit readiness for ISO 27001, PCI … DSS, and CyberEssentials Plus • Draft and update information security policies, procedures, and technical standards • Work with procurement and commercial teams to support supplier assurance and risk assessment • Contribute to tender responses and bid processes, ensuring security and compliance requirements are met • Promote good security practices and raise awareness across departments • Act as an escalation point and day … to-day contact for other team members • Stay up to date with changes in legislation and standards relating to information and cyber security Key Skills & Experience: Essential: • Background in IT, Cyber Security, Information Systems, or a related discipline • Strong working knowledge of ISO 27001, PCI DSS, and CyberEssentials Plus • Proven ability to support and prepare More ❯
Hereford, Herefordshire, England, United Kingdom Hybrid / WFH Options
DCS Recruitment
Security Analyst to join our client who will play a key role in driving compliance, governance, and continual improvement across key security frameworks including ISO 27001, PCI DSS, and CyberEssentials Plus. Key Responsibilities: * Lead on the operation and continual improvement of the Information Security Management System (ISMS) * Coordinate internal and external audit readiness for ISO 27001, PCI … DSS, and CyberEssentials Plus * Draft and update information security policies, procedures, and technical standards * Work with procurement and commercial teams to support supplier assurance and risk assessment * Contribute to tender responses and bid processes, ensuring security and compliance requirements are met * Promote good security practices and raise awareness across departments * Act as an escalation point and day … to-day contact for other team members * Stay up to date with changes in legislation and standards relating to information and cyber security Key Skills & Experience: Essential: * Background in IT, Cyber Security, Information Systems, or a related discipline * Strong working knowledge of ISO 27001, PCI DSS, and CyberEssentials Plus * Proven ability to support and prepare More ❯
Portsmouth, Hampshire, England, United Kingdom Hybrid / WFH Options
Computappoint
Portsmouth Hybrid : 3 days onsite a week Permanent Cyber Security Assurance Manager Location: Portsmouth, UK Hybrid: 3 days onsite per week Salary: Up to £65,000 Employment Type: Permanent Job Summary: Our client, a leading IT services and consulting firm, is seeking a Cyber Security Assurance Manager to ensure their SOC meets and maintains top security certifications and … assurance standards. As part of the GRC function, you’ll lead customer assurance activities, manage external audits, and oversee key certifications such as ISO 27001, SOC2 Type II, CyberEssentials Plus, and CREST SOC accreditation. Key Responsibilities: Act as primary contact for customer assurance activities, supporting RFIs, RFPs, and client audit requests Deliver training and awareness sessions on … facing assurance documentation demonstrating the organisation's security posture Lead the delivery and ongoing maintenance of SOC-related certifications (SOC 2 Type II, SOC 3, ISO/IEC 27001, CyberEssentials Plus, CREST) Embed certification requirements into SOC governance, processes, and operational practices Ensure continuous monitoring, evidence collection, and audit readiness for internal and external assessments Monitor developments More ❯
CyberEssentials Assessor/Auditor Location: Remote (UK Only) The Role: Profectus are working closely with a well-established consultancy to find 2 motivated and experienced CyberEssentials Assessor/Auditor to join their growing team. They have a number of great benefits to offer as well as a remote first working environment. A CE and More ❯
such as Mimecast, Avanan, SentinelOne, MDR/XDR, Fortinet, Huntress, Datto, and Autotask Strong troubleshooting, analytical, and communication skills Ability to work independently and collaboratively across teams Experience with CyberEssentials, CyberEssentials Plus, and other frameworks such as NIST, ISO27001 Commitment to producing clear documentation and knowledge sharing Desirable Certifications Microsoft Certified: Azure Administrator/ More ❯
City of London, London, United Kingdom Hybrid / WFH Options
MFK Recruitment
such as Mimecast, Avanan, SentinelOne, MDR/XDR, Fortinet, Huntress, Datto, and Autotask Strong troubleshooting, analytical, and communication skills Ability to work independently and collaboratively across teams Experience with CyberEssentials, CyberEssentials Plus, and other frameworks such as NIST, ISO27001 Commitment to producing clear documentation and knowledge sharing Desirable Certifications Microsoft Certified: Azure Administrator/ More ❯
such as Mimecast, Avanan, SentinelOne, MDR/XDR, Fortinet, Huntress, Datto, and Autotask Strong troubleshooting, analytical, and communication skills Ability to work independently and collaboratively across teams Experience with CyberEssentials, CyberEssentials Plus, and other frameworks such as NIST, ISO27001 Commitment to producing clear documentation and knowledge sharing Desirable Certifications Microsoft Certified: Azure Administrator/ More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
MFK Recruitment
such as Mimecast, Avanan, SentinelOne, MDR/XDR, Fortinet, Huntress, Datto, and Autotask Strong troubleshooting, analytical, and communication skills Ability to work independently and collaboratively across teams Experience with CyberEssentials, CyberEssentials Plus, and other frameworks such as NIST, ISO27001 Commitment to producing clear documentation and knowledge sharing Desirable Certifications Microsoft Certified: Azure Administrator/ More ❯
slough, south east england, united kingdom Hybrid / WFH Options
MFK Recruitment
such as Mimecast, Avanan, SentinelOne, MDR/XDR, Fortinet, Huntress, Datto, and Autotask Strong troubleshooting, analytical, and communication skills Ability to work independently and collaboratively across teams Experience with CyberEssentials, CyberEssentials Plus, and other frameworks such as NIST, ISO27001 Commitment to producing clear documentation and knowledge sharing Desirable Certifications Microsoft Certified: Azure Administrator/ More ❯
london (city of london), south east england, united kingdom Hybrid / WFH Options
MFK Recruitment
such as Mimecast, Avanan, SentinelOne, MDR/XDR, Fortinet, Huntress, Datto, and Autotask Strong troubleshooting, analytical, and communication skills Ability to work independently and collaboratively across teams Experience with CyberEssentials, CyberEssentials Plus, and other frameworks such as NIST, ISO27001 Commitment to producing clear documentation and knowledge sharing Desirable Certifications Microsoft Certified: Azure Administrator/ More ❯
london, south east england, united kingdom Hybrid / WFH Options
PCI Pal
WILL BE RESPONSIBLE FOR: Managing, maintaining, and maturing the already established audit lifecycles for the following frameworks: PCI DSS v4.0, ISO 27001:2022, ISO 9001:2015, ISO 14001:2015, CyberEssentials, CyberEssentials Plus, SOC2 Type 1 – 3 & HIPAA Working in close collaboration with other team members, with peers, and across the business to ensure that … commitments and requirements to managing a security, education, training and awareness (SETA) programme. WE WANT TO HEAR FROM YOU IF YOU: Possess extensive and comprehensive knowledge of Information/Cyber Security processes and methodologies as they relate to maintaining compliant PCI DSS and ISO certified environments. Have exceptional knowledge of steering and strategically managing GRC and audit roadmaps and … associated processes, and their relevance to maintaining a GRC programme. Are a strong and proactive collaborator with a positive professional, pragmatic work ethic. Possess a thorough understanding of applicable cyber security assurance methodologies and frameworks, e.g. NIST & CIS etc. Have a rudimentary understanding of AI GRC requirements that can be used to develop and mature AI GRC and assurance More ❯
Location: Remote (UK Only) The Role: Profectus are working closely with a well-established consultancy to find a motivated and experienced CyberEssentials Plus Assessor/Auditor to join their growing team. They have a number of great benefits to offer as well as a remote first working environment. A CyberEssentials Plus qualification is essential More ❯
multiple platforms. The role will provide ongoing technical assurance to digital systems and data to ensure that these are safe and secure. Special projects support will include PCI compliance, CyberEssentials and other technical support where required. Provide line manager duties within the Information Security Team. Key accountabilities & Responsibilities: Be an SME for PCI DSS and CyberEssentials technical assurance Contribute to business and technology audits with technical evidence and advice Engagement with 3rd party partners as a SME and to ensure due diligence process adherence Contribute to the delivery of the security roadmap and a continuous improvement model for security Ensure Information Security controls are operating effectively Ensure where gaps are identified that these … the business and early in projects Assist in 3rd party assurance Skills, Experience and Knowledge: Strong experience as a technical security expert. Excellent Infrastructure Knowledge specifically around Server Technology. Cyber security experience within a large complex corporate environment working with multiple partners. Proven knowledge and experience of IT and information security policies, practices and standards. Knowledge of current technologies More ❯
Cambridge, England, United Kingdom Hybrid / WFH Options
TDA Telecoms
Risk and Compliance role ISO27001 GDPR Experience managing audits Policy and procedure development Solid risk management knowledge Desirable Background in financial services Understanding of FCA material supplier requirements FSQS CyberEssentials/CyberEssentials Plus Stakeholder engagement experience If this could be of interest, please drop me an email at jack@tdatelecoms.com or call me at More ❯
cambridge, east anglia, united kingdom Hybrid / WFH Options
TDA Telecoms
Risk and Compliance role ISO27001 GDPR Experience managing audits Policy and procedure development Solid risk management knowledge Desirable Background in financial services Understanding of FCA material supplier requirements FSQS CyberEssentials/CyberEssentials Plus Stakeholder engagement experience If this could be of interest, please drop me an email at jack@tdatelecoms.com or call me at More ❯
Job Title: Cyber Security Lead Location: Remote/London office (occasional travel) Salary: £50,000 Type: Full-time, Permanent Overview: We are seeking a hands-on Cyber Security Lead to drive cybersecurity across a family of independent specialist schools. You will take ownership of protecting staff, students, and data, coordinating with multiple MSPs, managing cyber risk, monitoring … and embedding robust security practices across the organisation. Key Responsibilities: Act as the central point for all cybersecurity matters and incident response. Maintain the cybersecurity risk register and lead CyberEssentials certification. Oversee Microsoft 365 and Google Workspace security, including vulnerability management, patching, MFA, and email security. Coordinate security audits, penetration tests, and third-party application reviews. Manage … and monitor MSP performance, ensuring consistent security standards. Promote cybersecurity awareness, provide guidance, and support staff training. Report on cyber incidents, risks, and improvements to senior leadership. Requirements: 4-6 years' experience in IT or cybersecurity roles. Strong understanding of Microsoft 365 and Google Workspace security controls. Experience managing or working with MSPs. Familiarity with CyberEssentialsMore ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Sanderson
Job Title: Cyber Security Lead Location: Remote/London office (occasional travel) Salary: £50,000 Type: Full-time, Permanent Overview: We are seeking a hands-on Cyber Security Lead to drive cybersecurity across a family of independent specialist schools. You will take ownership of protecting staff, students, and data, coordinating with multiple MSPs, managing cyber risk, monitoring … and embedding robust security practices across the organisation. Key Responsibilities: Act as the central point for all cybersecurity matters and incident response. Maintain the cybersecurity risk register and lead CyberEssentials certification. Oversee Microsoft 365 and Google Workspace security, including vulnerability management, patching, MFA, and email security. Coordinate security audits, penetration tests, and third-party application reviews. Manage … and monitor MSP performance, ensuring consistent security standards. Promote cybersecurity awareness, provide guidance, and support staff training. Report on cyber incidents, risks, and improvements to senior leadership. Requirements: 4-6 years' experience in IT or cybersecurity roles. Strong understanding of Microsoft 365 and Google Workspace security controls. Experience managing or working with MSPs. Familiarity with CyberEssentialsMore ❯
Portsmouth, Hampshire, South East, United Kingdom Hybrid / WFH Options
Robert Half
Job Posting: Cyber Security Assurance Manager Location: Portsmouth (Hybrid) Salary: £50,000 - £65,000 DOE Are You Ready to Lead the Way in Cyber Security Assurance? Robert Half are seeking a dynamic, proactive, and experienced Cyber Security Assurance Manager to join a globally-scaled, fast-paced Security Operations Centre (SOC) environment. In this crucial role, you will … excellence, this opportunity is for you! What We're Looking For: Qualifications and Experience: Proven experience delivering and managing cybersecurity certifications (e.g., ISO/IEC 27001, SOC2 Type II, CyberEssentials Plus, CREST). A strong understanding of SOC operations and security assurance frameworks. Experience engaging with customers during audits and RFP/RFI processes, showcasing security-driven … abilities. Highly organised, able to manage multiple certifications and assurance projects simultaneously. Key Responsibilities Certification Leadership: Deliver and maintaincertifications such as ISO/IEC 27001, SOC 2 Type II, CyberEssentials Plus, and CREST accreditation. Manage sector-specific frameworks, like PCI DSS for payment card data and NCSC CIR/CHECK for secure operations. Proactively identify compliance gaps More ❯
Hereford, Herefordshire, United Kingdom Hybrid / WFH Options
Security Analyst to join our client who will play a key role in driving compliance, governance, and continual improvement across key security frameworks including ISO 27001, PCI DSS, and CyberEssentials Plus. Lead on the operation and continual improvement of the Information Security Management System (ISMS) Coordinate internal and external audit readiness for ISO 27001, PCI DSS, and … CyberEssentials Plus Draft and update information security policies, procedures, and technical standards Work with procurement and commercial teams to support supplier assurance and risk assessment Contribute to tender responses and bid processes, ensuring security and compliance requirements are met Promote good security practices and raise awareness across departments Stay up to date with changes in legislation and … standards relating to information and cyber security Background in IT, Cyber Security, Information Systems, or a related discipline Proven ability to support and prepare for audits, including evidence collation and audit readiness Excellent attention to detail and ability to produce high-quality documentation Experience in supplier risk management and/or tender processes ISO 27001 Lead Auditor/ More ❯
Hatfield, Hertfordshire, South East, United Kingdom Hybrid / WFH Options
Synergize Consulting Limited
Cyber Threat Intelligence Specialist - Contract role We are supporting our client, a leading IT services and solutions company, in their search for a Cyber Threat Intelligence Specialist in Hertfordshire. In this role, you'll be responsible for gathering, correlating, and interpreting data from multiple sources to deliver actionable threat intelligence. You'll assess how a wide range of … Term: 3 months (with strong potential for extension) Location: Hertfordshire Work Model: Hybrid Key Responsibilities Work with Threat Intelligence Platforms (TIPs), taking ownership of these platforms. Analyse and assess cyber threats, identifying patterns and trends. Apply the intelligence life cycle, from collection through to reporting. Ensure the Threat Intelligence Programme meets organisational aims. Influence and advise stakeholders on security … of such threats and their potential impact on the business. What We're Looking For Experience in Threat Intelligence and understanding of the intelligence life cycle. Experience in analysing cyber threats. Strong communication skills. Experience producing intelligence reports for varied audiences. Familiarity with cyber threats, threat actors, attack vectors, and vulnerabilities. Knowledge of information assurance standards and frameworks More ❯
Greater Bristol Area, United Kingdom Hybrid / WFH Options
Logiq
response. Vulnerability Management Perform vulnerability assessments using Qualys and Tenable, driving remediation and continuous improvement. Compliance & Governance Align security controls with frameworks such as ISO 27001, NIST, CIS, and CyberEssentials, supporting audits and certification processes. What We’re Looking For Proven experience in infrastructure or network security within complex enterprise environments. Strong knowledge of Microsoft technologies (Windows … on experience with MFA solutions, virtualisation platforms, and network security appliances. Understanding of SIEM operations, vulnerability management, and endpoint protection. Familiarity with recognised security frameworks (ISO 27001, NIST, CIS, CyberEssentials). Excellent problem-solving skills and ability to work under pressure. Strong communication skills to engage stakeholders and influence technical decisions. Why Join Logiq Work on impactful More ❯
newport, wales, united kingdom Hybrid / WFH Options
Logiq
response. Vulnerability Management Perform vulnerability assessments using Qualys and Tenable, driving remediation and continuous improvement. Compliance & Governance Align security controls with frameworks such as ISO 27001, NIST, CIS, and CyberEssentials, supporting audits and certification processes. What We’re Looking For Proven experience in infrastructure or network security within complex enterprise environments. Strong knowledge of Microsoft technologies (Windows … on experience with MFA solutions, virtualisation platforms, and network security appliances. Understanding of SIEM operations, vulnerability management, and endpoint protection. Familiarity with recognised security frameworks (ISO 27001, NIST, CIS, CyberEssentials). Excellent problem-solving skills and ability to work under pressure. Strong communication skills to engage stakeholders and influence technical decisions. Why Join Logiq Work on impactful More ❯