Cyber Security Consultant (CIS Controls 12 +13)

Summary: The Cyber Security Consultant role focuses on delivering cyber security assessments and aligning with CIS Controls 12 and 13. The position requires strong communication skills and the ability to provide pragmatic recommendations to clients. The consultant will also contribute to client growth and produce high-quality reports. This role is primarily remote with occasional visits to the London office.

Key Responsibilities:

• Deliver cyber security assessments, audits, and control reviews
• Identify risks and provide clear, pragmatic recommendations
• Focus on aligning with frameworks CIS Controls (particularly 12 and 13)
• Produce high-quality reports, risk assessments, and advisory outputs
• Contribute to client growth, proposals, and thought leadership

Key Skills:

• Extensive experience working CIS Controls
• Strong communication and stakeholder engagement skills
• Experience in a client-facing or consulting environment (preferred)
• Ability to balance technical understanding with business risk
• Certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Auditor (nice to have)
• Exposure to cloud security (AWS, Azure, GCP) (nice to have)
• Understanding of SIEM, vulnerability management, or security tooling (nice to have)
• Any exposure to Operational Technology (OT) environments (nice to have)

Salary (Rate): undetermined

City: undetermined

Country: UK

Working Arrangements: remote

IR35 Status: inside IR35

Seniority Level: undetermined

Industry: IT

Detailed Description From Employer:

Cyber Security Consultant (CIS Controls 12 +13)
Remote with occasion London office visits

Inside ir35

The Role

• Deliver cyber security assessments, audits, and control reviews

• Identify risks and provide clear, pragmatic recommendations

• Focus on aligning with frameworks CIS Controls (particularly 12 and 13)

• Produce high-quality reports, risk assessments, and advisory outputs

• Contribute to client growth, proposals, and thought leadership

What They're Looking For

• Extensive experience working CIS Controls

• Strong communication and stakeholder engagement skills

• Experience in a client-facing or consulting environment (preferred)

• Ability to balance technical understanding with business risk

Nice To Have

• Certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Auditor

• Exposure to cloud security (AWS, Azure, GCP)

• Understanding of SIEM, vulnerability management, or security tooling

• Any exposure to Operational Technology (OT) environments