Principal Consultant – Cyber Security Audit

Requirements:

• Proven experience leading cyber security audits and assurance engagements.
• Strong knowledge of the NCSC Cyber Assessment Framework (CAF), ISO 27000-series standards, NIST frameworks and associated risk management practices.
• Understanding of legacy information assurance standards and NCSC guidance.
• Familiarity with MOD security frameworks, including JSP 453, JSP 440, JSP 902 and DEFCON 659A.
• Technical knowledge spanning defensive cyber security, enterprise architecture, secure systems, network and cloud security, system hardening, cryptographic controls and protective monitoring.
• Confident stakeholder management skills and the ability to communicate complex findings clearly to technical and non-technical audiences.
• Essential: CISA, CISSP, CISM or another recognised cyber security certification.
• Desirable: Membership of CIISec at an appropriate level, or professional registration with the UK Cyber Security Council in audit and assurance.
• Eligibility for SC Clearance, requiring a minimum of 5 years continuous UK residency and a British passport.

Responsibilities:

• Lead client engagements and deliver independent security assessments, providing practical recommendations to improve security posture and compliance.
• Lead cyber security audits and assessments against recognised frameworks, including the NCSC Cyber Assessment Framework (CAF).
• Evaluate security controls, organisational resilience and compliance throughout the system lifecycle.
• Identify vulnerabilities, risks and areas for improvement, and produce clear, actionable reports.
• Facilitate assurance workshops and engage with stakeholders at all levels.
• Advise clients on secure system design, risk management and security best practice.
• Support bid development and pre-sales activities where required.

Technologies:

• Cloud
• Support
• JSP
• Network
• Security

More

We are a growing technology and cyber security consultancy supporting public and private sector clients, with a specialism in assurance against the Cyber Assurance Framework (CAF). This Managing Consultant role offers the opportunity to work across multiple projects and contribute to bids and business development. The position is hybrid, with occasional travel to client sites and our offices in Bristol. We offer a competitive salary dependent on experience, car allowance, discretionary performance bonus, competitive pension scheme, private healthcare, professional development and clear career progression opportunities. Additional paid leave provisions are available for eligible Reservists and Cadet Force Adult Volunteers.

last updated 43 week of 2026