Senior Principal Consultant – Cyber Security Audit
A senior consultant role leading cyber security audits and assurance engagements against frameworks like NCSC CAF, ISO 27000, NIST, and MOD standards (JSP/DEFCON) for a Bristol-based consultancy serving government and commercial clients. Hybrid working with occasional travel to client sites and the Bristol office.
- Compensation
- £43K–£72K / yr
- Location
- St. James, Bristol
- Work setup
- Not specified
- Seniority
- Principal
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Proven experience leading cyber security audits and assurance engagements
- Strong knowledge of NCSC Cyber Assessment Framework (CAF), ISO 27000-series standards, NIST frameworks and associated risk management practices
- Understanding of legacy information assurance standards and NCSC guidance
- Familiarity with MOD security frameworks, including JSP 453, JSP 440, JSP 902, and DEFCON 659A
- Technical knowledge spanning defensive cyber security, enterprise architecture, secure systems, network and cloud security, system hardening, cryptographic controls, and protective monitoring
- Confident stakeholder management; communicate complex findings to technical and non-technical audiences
- Essential: CISA, CISSP, CISM, or another recognised cyber security certification
- Eligible for SC clearance, including minimum five years continuous UK residency and holding a British passport
Nice to have
- Membership of CIISec at an appropriate level, or professional registration with the UK Cyber Security Council in audit and assurance
Full description
Salary: £43,000 - 72,000 per yearRequirements:
- Proven experience leading cyber security audits and assurance engagements
- Strong knowledge of the NCSC Cyber Assessment Framework (CAF), ISO 27000-series standards, NIST frameworks, and associated risk management practices
- Understanding of legacy information assurance standards and NCSC guidance
- Familiarity with MOD security frameworks, including JSP 453, JSP 440, JSP 902, and DEFCON 659A
- Technical knowledge spanning defensive cyber security, enterprise architecture, secure systems, network and cloud security, system hardening, cryptographic controls, and protective monitoring
- Confident stakeholder management skills and the ability to communicate complex findings clearly to technical and non-technical audiences
- Essential: CISA, CISSP, CISM, or another recognised cyber security certification
- Desirable: Membership of CIISec at an appropriate level, or professional registration with the UK Cyber Security Council in audit and assurance
- Must be eligible for SC clearance, including a minimum of five years continuous UK residency and holding a British passport
Responsibilities:
- Lead cyber security audits and assessments against recognised frameworks, including the NCSC Cyber Assessment Framework (CAF)
- Evaluate security controls, organisational resilience, and compliance throughout the system lifecycle
- Identify vulnerabilities, risks, and areas for improvement, and produce clear, actionable reports
- Facilitate assurance workshops and engage with stakeholders at all levels
- Advise clients on secure system design, risk management, and security best practice
- Support bid development and pre-sales activities where required
- Lead client engagements, deliver independent security assessments, and provide practical recommendations to improve security posture and compliance
- Work across multiple projects and engage with technical teams and senior stakeholders
Technologies:
- Cloud
- Support
- JSP
- Network
- Security
More:
We are a growing technology and cyber security consultancy supporting public and private sector clients. This Senior Principal/Managing Consultant role specialises in assurance against the Cyber Assurance Framework and offers the opportunity to contribute to challenging engagements across government and commercial environments. The position is hybrid, with occasional travel to client sites and our Bristol offices. We offer a competitive salary dependent on experience, car allowance, discretionary performance bonus, competitive pension, private healthcare, professional development, clear career progression, and additional paid leave provisions for eligible Reservists and Cadet Force Adult Volunteers.