Senior Cyber Security Consultant (Defence)
Posted
At Actica, our Cyber Security Consultants play a critical role in supporting Defence, national security, government and critical national infrastructure organisations and protecting some of the UK's most sensitive and mission-critical systems.
Working across complex Defence and MOD programmes, you will help clients embed Secure by Design principles, manage cyber risk, and deliver proportionate security assurance throughout the system lifecycle. Your expertise will support organisations operating in highly security-conscious environments where resilience, assurance and risk-informed decision making are paramount.
As a National Cyber Security Centre (NCSC) Assured Cyber Security Consultancy, we work on programmes that contribute directly to the UK's defence and security outcomes.
Location: Southwest England - Three Counties Region - Gloucestershire and surrounding areas (hybrid working and client-site engagement required)
Working across complex Defence and MOD programmes, you will help clients embed Secure by Design principles, manage cyber risk, and deliver proportionate security assurance throughout the system lifecycle. Your expertise will support organisations operating in highly security-conscious environments where resilience, assurance and risk-informed decision making are paramount.
As a National Cyber Security Centre (NCSC) Assured Cyber Security Consultancy, we work on programmes that contribute directly to the UK's defence and security outcomes.
Location: Southwest England - Three Counties Region - Gloucestershire and surrounding areas (hybrid working and client-site engagement required)
Working independently or as part of a multi-disciplinary Actica team, you will deliver consultancy assignments across Defence, government and critical national infrastructure clients.
Responsibilities may include:
Responsibilities may include:
- Providing cyber security and Secure by Design expertise to complex Defence acquisition programmes, digital transformation initiatives and Agile delivery teams.
- Conducting cyber risk assessments and security risk analysis for systems handling sensitive or classified information.
- Advising risk owners, programme leadership and technical stakeholders on cyber threats, vulnerabilities, impacts and risk treatment strategies.
- Developing, reviewing and maintaining security assurance artefacts in line with Defence, Government and industry assurance frameworks.
- Supporting security accreditation and assurance activities across the system development and operational lifecycle.
- Assessing and reviewing security architectures to ensure Defence and Government security requirements are met.
- Applying security-by-design principles across cloud, enterprise and operational technology environments.
- Defining and scoping security testing activities and communicating findings, remediation strategies and residual risks to stakeholders.
- Supporting governance, risk and compliance activities within secure and regulated environments.
Depending on experience, you may:
- Lead consultancy engagements and workstreams.
- Mentor and support the development of colleagues.
- Act as a trusted adviser to senior client stakeholders.
- Contribute to business development and the growth of Actica's Defence cyber security capability.
Essential
- Experience delivering cyber security, information assurance, technical consulting or ICT services within complex environments.
- Practical experience conducting cyber risk assessments and providing security assurance.
- Strong understanding of enterprise ICT, cloud technologies and modern digital architectures.
- Experience applying Secure by Design principles throughout project and system lifecycles.
- Ability to communicate complex security concepts clearly to both technical and non-technical stakeholders.
- Strong report writing, documentation and presentation skills.
- Proven ability to deliver high-quality outcomes aligned to client requirements and business objectives.
Desirable
- Experience supporting UK Defence, MOD, national security, government or critical national infrastructure organisations.
- Knowledge of Defence security policies, assurance approaches and risk management methodologies.
- Experience contributing to security assurance and accreditation activities for secure systems.
- Familiarity with classified or sensitive environments and associated security controls.
- Understanding of Defence procurement and capability delivery programmes.
Beneficial Knowledge
- Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST.
- Risk management methodologies and security assurance frameworks.
- Enterprise and security architecture approaches including TOGAF and SABSA.
- Cloud security and secure digital transformation programmes.
- Security operations, vulnerability management and incident response.
- Secure software development and DevSecOps practices.
- ICT service management approaches including ITIL.
Additional Requirements
- Must be eligible and willing to obtain UK Government Security Clearance. Find out more information about the Security Clearance (SC) process and requirements here.
Key Attributes for Success
We welcome applications from people with diverse backgrounds and experiences. Successful candidates are likely to demonstrate:
- Strong stakeholder engagement and relationship-building skills.
- The ability to influence and communicate effectively across all organisational levels.
- A collaborative and inclusive approach to problem solving.
- Adaptability and resilience within complex and evolving environments.
- A proactive mindset with strong analytical and critical-thinking capabilities.
- Commitment to continuous professional development and learning.
Working Arrangements
- Hybrid working model with flexibility to work from home, client sites and Actica offices.
- Typical working patterns may involve a combination of remote working and client-site engagement.
- Some assignments may require more regular on-site attendance due to security, operational or programme requirements.
- Projects may involve travel and occasional overnight stays during the working week.
- Collaborative team environment with opportunities to contribute to internal innovation, capability development and knowledge sharing.
Career Development
Actica provides an exceptional environment for cyber security professionals seeking to develop expertise within Defence and secure government environments.
You will have opportunities to build specialist knowledge in Secure by Design, security assurance, cyber risk management and Defence security governance while working on nationally significant programmes.
We support professional development through mentoring, structured career pathways and industry-recognised certifications including:
You will have opportunities to build specialist knowledge in Secure by Design, security assurance, cyber risk management and Defence security governance while working on nationally significant programmes.
We support professional development through mentoring, structured career pathways and industry-recognised certifications including:
- CISSP
- CISMP
- CREST Certifications
- ISO 27001 Lead Implementer/Auditor
- SABSA
- TOGAF
- NIST Programmes
- UK Cyber Security Council Professional Registration
Each consultant is supported by a dedicated Mentor and Performance & Development Manager to help achieve individual career goals.
Our Commitment to Diversity, Equity and Inclusion
At Actica, we believe diverse perspectives strengthen our teams and improve outcomes for our clients. We are committed to creating an inclusive workplace where everyone is treated with respect and has the opportunity to thrive.
We welcome applications from all suitably qualified candidates and make employment decisions based on skills, experience, potential and business requirements. We are committed to providing an inclusive recruitment process and accessible working environment for all.
At Actica, we believe diverse perspectives strengthen our teams and improve outcomes for our clients. We are committed to creating an inclusive workplace where everyone is treated with respect and has the opportunity to thrive.
We welcome applications from all suitably qualified candidates and make employment decisions based on skills, experience, potential and business requirements. We are committed to providing an inclusive recruitment process and accessible working environment for all.