Salary: £43,000 - 72,000 per year Requirements: Proven expertise in Cyber Security Auditing Strong knowledge of NCSC Cyber Assessment Framework (CAF) Familiarity with ISO 27000 series, NIST Cyber Security & Risk Management Frameworks Understanding of legacy IA standards and NCSC guidance Familiarity with MOD security frameworks (e.g., JSP 453, JSP 440, JSP 902, DEFCON 659A) Technical understanding of defensive cyber principles Knowledge of Enterprise Architecture and Secure Systems Experience with Network & Cloud Security, System Hardening, and Cryptographic Controls (PKI, Data at Rest/In Transit) Ability to lead audits and engage with stakeholders effectively Essential certifications: CISSP, CISM, or other recognized cyber security certification Desirable membership of the Chartered Institute of Information Security (CIISec) at an appropriate level Professional registration via the UK Cyber Security Council for Audit and Assurance Sole UK National status for secure project work UK SC Clearance required Responsibilities: Conduct comprehensive cyber security audits aligned to NCSC CAF and other recognized frameworks Assess organizational security posture across the full system lifecycle Ensure compliance and identify areas for improvement Produce clear, actionable audit reports and recommendations for technical and non-technical stakeholders Facilitate workshops and assurance reviews with business leaders and diverse project teams Act as a trusted advisor, supporting clients in developing and maintaining secure systems Manage complex security risks across multiple projects Take the lead on day-to-day client engagement and deliver high-quality security audits and assessments Identify new opportunities, support bids, and contribute to presales activities as required Occasionally travel to sites in Chippenham and Exeter as part of the role Technologies: Cloud Support JSP Network REST Security More: We are a leading Security Practice based in Bristol, specializing in Cyber Assessment Framework (CAF) compliance and assurance. Our team is high performing and dedicated to delivering exceptional security services across public and private sector organizations. We offer hybrid working, with 1-2 days in the office, and opportunities for occasional travel. If you are an expert in Cyber Security audit and compliance, looking for a customer-facing security consultant role, we would love to hear from you. last updated 6 week of 2026