Cyber Security Consultant

About the role

We are looking for a Cyber Security Consultant to join our growing team. The role focuses on identifying, assessing and mitigating cyber risks while ensuring compliance with relevant frameworks and regulations. You will work closely with cross‑functional teams to strengthen the organisation’s security posture.

Key responsibilities

• Conduct cybersecurity risk assessments and maintain an up‑to‑date cyber risk register.
• Identify, evaluate, and monitor cyber risks across the organisation.
• Develop, track and implement risk treatment and mitigation plans.
• Review and assess security controls against regulatory and industry standards.
• Create and maintain cybersecurity governance policies, standards and procedures.
• Ensure compliance with frameworks such as NCA ECC, ISO 27001 and NIST CSF.
• Support internal and external audits and assessments.
• Prepare risk reports, dashboards and recommendations for stakeholders.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science or a related field.
• 2–4 years of experience in cybersecurity GRC with a focus on risk management.
• Hands‑on experience in risk assessments, risk register management and risk treatment.
• Familiarity with NCA ECC, ISO 27001 and NIST CSF.
• Strong analytical, problem‑solving and communication skills.
• Relevant certifications (e.g., CRISC, ISO 27001, Security+, GRCP) are a plus.

Required skills

• Cybersecurity risk assessment
• Risk register management
• Risk treatment planning
• Knowledge of NCA ECC framework
• Knowledge of ISO 27001 standard
• Knowledge of NIST Cybersecurity Framework