Cyber Security Consultant x 3 – Oxford – Up to £65k – New Roles
Oxford – 2/3 days a week on site.
Keywords: Cyber, Risk, Governance, Data Protection, GDPR, CISSP, CISM, CRISC.
A leading organisation requires a number of Cyber Security Consultants to lead on a variety of cyber/information security projects.
These roles work across technology, risk, compliance, and operational teams to translate security policies and standards into practical delivery plans, remediation actions, and measurable outcomes. The role requires the ability to balance stakeholder engagement, cyber risk management, and operational delivery.
Suitable candidates will have the following:
- Deep understanding and knowledge of cyber security principles, risk management, compliance, operations, and technology.
- Knowledge of legislation and regulatory requirements relevant to information security and data protection, including GDPR.
- Ability to translate technical security issues into practical business actions and decisions and offer expert advice to colleagues.
- Strong stakeholder management and relationship-building skills, including written, verbal, and presentation skills, with the ability to form longstanding positive collaborative working relationships to deliver a common aim.
- Strong analytical and problem-solving capability, with the ability to balance strategic thinking with pragmatic delivery.
- Comfortable operating across all levels of the organisation with the ability to work independently, take ownership, and drive outcomes.
Additionally, any of the following would be useful:
.
- Relevant professional security qualifications such as CISSP, CISM, CRISC, or equivalent. Privacy or data protection certifications such as CIPP/E are advantageous.
- Knowledge of software delivery methodologies, including Agile and Waterfall, and how security is embedded across delivery lifecycles.
- Committed to continuous improvement and sharing best practice.
Duties will include:
- Develop and maintain a strong understanding of business processes, systems, technologies, data, third parties, and operational priorities.
- Act as the primary cyber security delivery contact for stakeholders, including IT, architecture, infrastructure, HR, finance, legal, compliance, and operational leadership.
- Lead the implementation for cyber security strategy, policies, standards, and control requirements across the division, whilst contributing to policy and central cyber security direction of travel.
- Offer expert leadership to effectively translate cyber security requirements into practical divisional strategic plans and roadmaps and lead the execution with relevant divisional/departmental and technology teams.
- Proactively identify gaps, non-compliance issues, control weaknesses, and opportunities for improvement, and help drive timely remediation.
- Provide oversight and lead cyber security activities that enable and deliver business change, operational resilience, and secure device delivery locally.
- Lead on the delivery of audits, customer security requests, assurance reviews, and other activities that require divisional cyber security representation.
- Work with incident response, crisis management, and technical security teams to support investigation, containment, recovery, and follow-up actions for security incidents. For local divisional and departmental incidents, lead and convene incident response groups and meetings as required.
- Help manage cyber security service performance within the division, including service levels, priorities, dependencies, and stakeholder expectations.
#J-18808-Ljbffr…
