Cyber Security Governance Consultant

About the role

We are looking for an experienced Cyber Security Governance Consultant to join a leading cybersecurity consulting team delivering high‑impact security and governance solutions for government and secure‑sector clients. The role involves designing, assessing and improving governance frameworks to help organisations meet regulatory and business requirements.

Key responsibilities

• Assess, design and improve cybersecurity governance frameworks for clients.
• Conduct gap analysis against recognised security frameworks.
• Perform threat modelling, risk assessments and mitigation planning.
• Develop, review and ensure compliance of security policies.
• Manage third‑party risk and enhance cyber resilience.
• Provide governance for cloud and network security.
• Implement data protection measures, DLP and information security controls.
• Support organisations through internal and external audits.
• Create security roadmaps and governance strategies.

Required profile

• Experience delivering cyber governance, risk and compliance (GRC) consulting engagements.
• Proven ability to implement or assess controls against frameworks such as ISO 27001, NIST, NIS, NCSC CAF, DORA, TISAX, IEC 62443.
• Experience conducting cyber risk assessments and governance reviews.
• Ability to develop security policies, standards and procedures.
• Track record of building business cases and regulatory compliance roadmaps.
• UK nationality, active SC clearance and five‑year continuous UK residence.

Required skills

• ISO 27001
• NIST
• NIS
• NCSC Cyber Assessment Framework (CAF)
• DORA
• TISAX
• IEC 62443
• Threat modelling
• Risk assessment
• Security policy development
• Third‑party risk management
• Cloud security governance
• Network security governance
• Data protection
• Data Loss Prevention (DLP)
• Information security controls

What we offer

• Up to £100,000 base salary.
• Hybrid working model (client sites, office and home‑based).
• Opportunity to work on high‑profile, security‑cleared programmes.
• Exposure to large‑scale cyber transformation projects.
• Clear career progression within a growing cybersecurity practice.