Senior Consultant – Cyber Security (Active SC Clearance)

Stealth IT Consulting

My client are an engineering services company and are seeking a Senior Consultant – Cyber Security (SC Cleared) experience to their team.

Our client is engaged in projects and programs across various sectors, including Defence & Aerospace, Aviation, Rail, Nuclear, Automotive, Oil & Gas, and Cyber & Digital.

Location: Remote with occasional travel to client sites

Please note that applicants must have a valid security clearance.

Role Responsibilities:

• Conduct cyber security assessments and assuring information security, providing advice and guidance on all aspects of Cyber Security.
• Engage directly with project teams, clients and stakeholders to support the security risk assessments.
• Development of Security architectures and controls.
• Conduct IA elements of Cyber Vulnerability Investigations and Assessments.
• Author and develop Information Assurance and Security related documentation, including Risk Management Accreditation Document Sets (RMADS), in line with current security and risk management frameworks.
• Analyse and understand customer requirements and expectations and advise on priorities to meet the needs of a project.
• Effectively communicate information security risks to technical and non-technical stakeholders; advise on how best to mitigate security risks.
• Contribute to the development of the existing Cyber & Digital team by sharing knowledge, leading by example and helping team members to develop.

Skills good to have:

• A deep understanding of Cyber Security, Information Assurance, Risk Management and Information Security Compliance.
• Experience of working across public and private sectors considered – experience of the defence industry is beneficial ideally across information systems, crypto and/or Tempest.
• Experience of working in UK Cyber Security environment eg to NCSC guidance, CAF etc.
• Knowledge and understanding of NIS Directive and UK NIS Regulations.
• Security related qualifications such as CISSP, CISM, NIST Foundation/Practitioner, ISO27001 lead implementer or auditor and Security+.
• A good communicator, with the ability to contribute confidently to technical security discussions with peers and management.