Lead Cyber Security Consultant (Defence)

About the role

We are partnering with a fast‑growing UK cyber‑security consultancy to strengthen its Defence and Public Sector practice. As a Lead Cyber Security Consultant you will own multiple client engagements, advising senior MOD and public‑sector stakeholders on governance, risk, compliance and Secure‑by‑Design initiatives.

Key responsibilities

• Lead Secure‑by‑Design and security‑assurance activities across MOD and public‑sector programmes.
• Support and guide the application of risk‑management frameworks, ISMS and Enterprise Security Risk Management.
• Conduct and facilitate workshops with technical and business stakeholders.
• Produce clear, actionable reports on risk, vulnerabilities and remediation.
• Provide pragmatic, proportionate recommendations aligned with business goals.
• Support secure architecture design for cloud (AWS, Azure) and on‑premise platforms.
• Contribute to internal knowledge sharing and thought‑leadership.

Required profile

• Strong background in technical/security architecture or governance, risk & compliance.
• Proven experience working in Defence/MOD environments.
• Excellent analytical and communication skills with the ability to influence senior stakeholders.
• Passion for continuous learning and delivering high‑quality security outcomes.

Required skills

• Threat modelling (kill chain, attack trees, etc.).
• Cloud security (AWS, Azure), containerisation and firewalls.
• Secure SDLC, HLD/LLD review, IT HC scoping and remediation.
• Familiarity with JSP440, JSP604/453, JSP490, Supplier Chain Assurance.
• Knowledge of GDPR, PCI DSS, ISO 27001, NIST CSF, CIS Controls v8.

What we offer

• Competitive salary and benefits package.
• Private healthcare and wellbeing support.
• Flexible working (remote with travel) and career development pathways.
• Inclusive, supportive culture.