Senior Principal Consultant – Cyber Security Audit
This position is no longer accepting applications (closed Nov 3, 2026).
Summary
A senior consultant role leading cyber security audits and assurance engagements against frameworks like NCSC CAF, ISO 27000, NIST, and MOD standards (JSP/DEFCON) for a Bristol-based consultancy serving government and commercial clients. Hybrid working with occasional travel to client sites and the Bristol office.
Salary: £43,000 - 72,000 per year
Requirements:- Proven experience leading cyber security audits and assurance engagements
- Strong knowledge of the NCSC Cyber Assessment Framework (CAF), ISO 27000-series standards, NIST frameworks, and associated risk management practices
- Understanding of legacy information assurance standards and NCSC guidance
- Familiarity with MOD security frameworks, including JSP 453, JSP 440, JSP 902, and DEFCON 659A
- Technical knowledge spanning defensive cyber security, enterprise architecture, secure systems, network and cloud security, system hardening, cryptographic controls, and protective monitoring
- Confident stakeholder management skills and the ability to communicate complex findings clearly to technical and non-technical audiences
- Essential: CISA, CISSP, CISM, or another recognised cyber security certification
- Desirable: Membership of CIISec at an appropriate level, or professional registration with the UK Cyber Security Council in audit and assurance
- Must be eligible for SC clearance, including a minimum of five years continuous UK residency and holding a British passport
- Lead cyber security audits and assessments against recognised frameworks, including the NCSC Cyber Assessment Framework (CAF)
- Evaluate security controls, organisational resilience, and compliance throughout the system lifecycle
- Identify vulnerabilities, risks, and areas for improvement, and produce clear, actionable reports
- Facilitate assurance workshops and engage with stakeholders at all levels
- Advise clients on secure system design, risk management, and security best practice
- Support bid development and pre-sales activities where required
- Lead client engagements, deliver independent security assessments, and provide practical recommendations to improve security posture and compliance
- Work across multiple projects and engage with technical teams and senior stakeholders
- Cloud
- Support
- JSP
- Network
- Security
More:
We are a growing technology and cyber security consultancy supporting public and private sector clients. This Senior Principal/Managing Consultant role specialises in assurance against the Cyber Assurance Framework and offers the opportunity to contribute to challenging engagements across government and commercial environments. The position is hybrid, with occasional travel to client sites and our Bristol offices. We offer a competitive salary dependent on experience, car allowance, discretionary performance bonus, competitive pension, private healthcare, professional development, clear career progression, and additional paid leave provisions for eligible Reservists and Cadet Force Adult Volunteers.
last updated 44 week of 2026