Cyber Security Consultant

The Opportunity

We are seeking an experienced Cyber Security Consultant to support supplier onboarding and security process alignment within a complex multi-supplier environment. This is a governance, integration, and enablement role, focused on ensuring new suppliers can successfully operate within an established security operating model. You'll work closely with security, service management, and transition teams to align suppliers to existing processes, controls, governance requirements, and operational standards. This role is ideal for someone with a strong background in security governance, GRC, supplier management, and security process integration.

Key Responsibilities

• Supplier Onboarding & Process Integration
• Develop structured onboarding packs covering security processes, policies, governance requirements, and reporting obligations.
• Define supplier roles, responsibilities, and interaction models.
• Act as the central point for integrating suppliers into an established security framework.
• Ensure suppliers understand operational, governance, and compliance expectations from day one.
• Security Process Alignment
• Translate existing security processes into clear, supplier-consumable guidance.
• Support supplier adoption of established incident management, vulnerability management, and security assurance processes.
• Identify and manage gaps between supplier capabilities and programme requirements.
• Governance, Compliance & Assurance
• Support reviews of supplier security management plans and compliance outputs.
• Ensure suppliers understand evidence requirements, audit expectations, and governance processes.
• Provide assurance that suppliers are operationally and compliantly ready before service commencement.
• Operational Readiness
• Support onboarding across key service management disciplines, including:
• Incident Management
• Vulnerability Management
• Backup & Recovery
• Monitoring & Alerting
• Access Management
• Coordinate with incoming and outgoing providers to ensure complete service handovers and operational readiness.
• Documentation & Stakeholder Engagement
• Produce clear process documentation, onboarding packs, governance materials, and supplier guidance.
• Work closely with suppliers, stakeholders, transition teams, and service management functions.
• Contribute to the development of a repeatable onboarding framework for future supplier engagements.

Essential Skills & Experience

• Experience within Cyber Security Governance, GRC, or security process management.
• Experience working within multi-supplier or SIAM environments.
• Strong understanding of:
• Incident Management
• Vulnerability Management
• Security Assurance
• Compliance and Audit Processes
• Experience supporting supplier onboarding, transition, or transformation programmes.
• Strong stakeholder management and communication skills.
• Ability to interpret security operational outputs and reporting.
• Experience developing governance documentation, process guidance, and assurance materials.

Desirable Skills

• Knowledge of:
• NIST Cyber Security Framework (CSF)
• Secure by Design principles
• UK Government and NCSC security guidance
• Experience in highly regulated or security-sensitive environments.
• Experience supporting operational readiness reviews and service transitions.