Cyber Risk Consultant - Remote

Job Description

We're looking for an SC-cleared Cyber Risk Consultant to join a high-profile client programme. Working predominantly remotely, you'll play a key role in identifying, assessing and managing cyber risks across digital services, applications and technology platforms. You'll provide expert guidance, support assurance activities and help ensure security risks are effectively managed across complex environments.

Location: Remote (occasional office attendance as required)
Full Time / Permanent
Security Clearance: Active SC clearance required

What You'll Be Doing

• Providing expert advice on cyber risk management, assessment methodologies and recognised frameworks including ISO 27005 and the NIST Risk Management Framework.
• Managing and supporting risk identification, assessment, treatment and remediation activities across digital systems, applications and infrastructure.
• Facilitating cyber risk workshops, risk assessments and threat modelling exercises to identify and evaluate security risks.
• Identifying and validating technical, procedural, physical and personnel security controls and recommending improvements to address vulnerabilities and control weaknesses.
• Supporting the scoping and planning of IT Health Checks (ITHCs) and other assurance activities.
• Reviewing ITHC outcomes and vulnerability assessments, providing clear guidance and developing pragmatic remediation plans.
• Producing concise and informative reports that clearly communicate vulnerabilities, associated risks, control effectiveness and risk treatment activities.
• Maintaining and managing residual risk registers and supporting risk governance processes.
• Conducting security gap assessments against recognised control frameworks and monitoring remediation activities.
• Evaluating third-party suppliers to provide assurance on the design and effectiveness of security controls.
• Producing security audit reports, checklists, briefings and governance documentation.
• Working closely with technical teams, architects, project managers and stakeholders to ensure security risks are appropriately managed throughout the lifecycle of systems and services.
• Supporting continuous improvement initiatives that enhance cyber risk management, governance and security assurance practices.

What we are looking for..

We're looking for a proactive and collaborative cyber security professional with a strong background in governance, risk and compliance. You'll be comfortable engaging with a wide range of stakeholders, translating complex security concepts into practical guidance and delivering high-quality consultancy outputs.

You'll have a pragmatic approach to risk management, strong analytical skills and the ability to balance security requirements with business objectives.

Essential Skills & Experience

1.  Have a current Active Security Clearance.
2. Demonstrable experience delivering cyber security consultancy services within complex, highly regulated environments.
3. Strong hands-on experience in cyber risk management, governance and assurance.
4. Experience conducting risk assessments, security reviews, gap analyses and remediation planning.
5.  Good understanding of modern technologies and services, including:

• Microsoft Azure and Microsoft 365
• AWS and Google Cloud
• Mobile Computing
• Infrastructure Technologies
• Zero Trust Architectures
• Security Architecture Principles

6. Strong working knowledge of:

• GDPR and UK data protection requirements
• PCI DSS
• ICO guidance and requirements

7. Experience working with security standards and frameworks including:

• ISO 27001
• ISO 27005
• NIST Cyber Security Framework (CSF)
• NIST Risk Management Framework (RMF)
• NCSC Cyber Assessment Framework (CAF)
• CIS Controls

8. Understanding of HMG and NCSC security policies, standards and guidance.
9. Experience reviewing security testing outputs and supporting vulnerability remediation activities.
10. Ability to produce high-quality reports, risk registers, audit documentation and management briefings.
11. Excellent stakeholder engagement, workshop facilitation and communication skills.
12. Strong written communication skills with the ability to present technical findings to both technical and non-technical audiences.
13. Self-motivated, organised and comfortable working independently within a remote environment.

What Will Make You Stand Out:

• CISSP certification.
• CISM certification.
• CRISC certification.
• SIRA Practitioner certification.
• Full Membership of CIISec.
• Registration with the UK Cyber Security Council at Chartered or Principal level in Cyber Security Governance & Risk Management.
• BCS Chartered IT Professional (CITP).
• Engineering Council Chartered Engineer (CEng).
• Experience undertaking supplier assurance and third-party risk assessments.
• Experience supporting security audits and compliance programmes.
• Knowledge of secure-by-design principles and security architecture methodologies.
• Previous experience mentoring colleagues or contributing to governance and assurance best practices.

Why Join Cyberfort

At Cyberfort, we're committed to creating an environment where our people can do their best work, develop their careers and feel part of something meaningful. Alongside a supportive culture and opportunities to grow, we've offer a package that supports your health, wellbeing, finances, development and work-life balance, helping you feel your best both inside and outside of work. Our benefits include:

• 25 days annual leave, plus bank holidays, and your birthday day off
• The option to buy and sell annual leave
• Hybrid and flexible working opportunities (where applicable)
• Enhanced family-friendly policies
• Company pension scheme
• Life assurance
• Private Medical Insurance and wellbeing support
• Professional training, certifications and learning opportunities
• Employee referral bonus scheme
• Recognition and reward programmes
• Electric Car & Cycle to Work scheme
• Discounts and savings through our employee benefits platform

A place where you can be yourself

At Cyberfort, we believe that diverse perspectives make us stronger. We're committed to creating an environment where everyone feels respected, supported and able to be themselves at work.

We know that talent comes in many forms, and we're dedicated to ensuring our recruitment process is accessible and inclusive for all. If there's anything we can do to support you during your application or interview experience, we'd encourage you to let us know.

We're proud to champion inclusion through our partnerships and commitments, including:

• Signatories of the Armed Forces Covenant
• Corporate Members of Neurodiversity in Business
• A Disability Confident Employer
• Supporters of the CyberFirst initiative

We're continually learning, listening and evolving to build a workplace where everyone has the opportunity to thrive, grow and make a meaningful impact.

About Cyberfort

Cyberfort helps organisations stay ahead of cyber threats. We work alongside businesses and public sector organisations to strengthen their security, identify vulnerabilities and respond to threats before they become incidents.

Our expertise spans cyber security consultancy, penetration testing and managed detection and response (MDR). From helping customers understand their cyber risks and improve their security posture, to testing critical systems and providing 24/7 threat monitoring, we deliver practical solutions that help organisations operate with confidence.

What makes Cyberfort different is our people. We combine deep technical expertise with a collaborative, customer-first approach, building trusted partnerships and helping our customers navigate an ever-changing threat landscape.

Our Values

At Cyberfort, how we work is just as important as what we do. Our culture is built around five core values: being curious, working as a team, staying agile, taking ownership, and thinking innovatively.

We’re looking for individuals who are naturally inquisitive, collaborative, and adaptable people who take pride in their work, are open to learning, and are always looking for ways to improve both themselves and the way we deliver for our customers.

How the role fits into the company

• Supports Cyberfort's mission to make the world safer, one business at a time.
• Delivers high-quality cyber risk and assurance services into a strategically important client engagement.
• Helps strengthen cyber resilience through effective governance, risk management and security assurance.
• Supports informed decision-making through clear, pragmatic and risk-based security advice.
• Builds trusted relationships with stakeholders and contributes to the continued growth and reputation of Cyberfort's consultancy team.

APPLY NOW:

We review applications on a rolling basis and aim to move quickly through our selection process, so we encourage you to apply as soon as possible. If you would like to apply for this role, we'd like to see your CV and a cover letter.