Cyberfort Group

Join Cyberfort - Cyber Security Consultant - GRC (MOD) Location: Hybrid / East England - 3 days on-site presence required Contract Type: Full-time / Permanent Salary: Competitive + Benefits About Cyberfort At Cyberfort, we're securing the digital future. As a leading UK provider of cybersecurity solutions, we deliver cutting-edge services in Managed Detection & Response (MDR), Penetration Testing, Security Operations, and Strategic Consulting. We're large enough to offer exciting opportunities, yet agile enough to ensure every voice is heard. At Cyberfort, you're not just joining a company, you're becoming part of a mission-driven team. Why Join Us? Purpose-Driven Work - Help protect businesses and communities from evolving cyber threats. Growth & Development - Access mentoring, apprenticeships, graduate schemes, and continuous learning platforms. Inclusive Culture - We champion diversity through our Women's Network, Neurodiversity Awareness, and Inclusion Committee. Flexible Working - Hybrid and remote options to support work-life balance. Top-Tier Benefits - Competitive salary, private healthcare, wellbeing support, generous holiday allowance, and more. About the Role: Cyber Security Consultant - GRC (MOD) As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within MOD and Public Sector environments. You'll collaborate with multi-disciplinary teams to define and implement security risk assessments and best practice solutions, ensuring alignment with business risk appetites and transformation goals. You'll be part of a knowledge-sharing culture, working alongside expert peers in Secure Architecture and Risk Planning. This role supports the next phase of Cyberfort's growth and contributes to our mission of enabling clients to make proportionate, risk-informed decisions. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD/Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce clear reporting on vulnerabilities, risks, controls, and treatment activities. Provide pragmatic remediation and risk management guidance. Support secure design across technology platforms including cloud infrastructures. Contribute to blogs and research within the Cyberfort community. What We're Looking For Proven experience working in Governance, Risk and Compliance within Public Sector/MOD. Strong analytical, communication, and teamwork abilities. Passion for cybersecurity and continuous learning. Security Assurance Coordinator or Delivery Team Security Lead roles MOD/GDS Secure by Design Principles JSP440, JSP604/453, JSP490 Supplier Chain Assurance Security legislation (GDPR, PCI DSS, ICO) ISO 27001, NIST CSF, CIS Controls v8 Threat modelling, kill chain, attack tree analysis Cloud security (AWS, Azure), containerisation, firewalls Secure SDLC implementation HLD/LLD reviews ITHC scoping and remediation AI security (ISO42001 desirable) Certifications: AWS/Azure Security Professional, CCSP, CISSP, CISM, CIISEC, UK Cyber Security Council registration (Chartered or Principal). Clearance: Due to the nature of the projects, you'll be working on, you must hold an active and transferable DV (Developed vetting) clearance Must be a British citizen / resident in UK Inclusive Hiring We understand that one size doesn't fit all. If you need adjustments during the recruitment process, we're here to support you. Cyberfort is proud to be a Disability Confident Employer, a CyberFirst partner, and a signatory of the Armed Forces Covenant. Ready to Apply? If you're passionate about cybersecurity and want to make a real impact, we'd love to hear from you. Learn More Cyberfort Careers Page: Working at Cyberfort: LinkedIn:

Cyberfort Group is seeking a Cyber Security Consultant to deliver crucial risk and security assurance services. The role requires collaboration with teams in Public Sector environments and involves strong governance and compliance experience. The ideal candidate will have a passion for cybersecurity, relevant certifications, and the ability to lead risk management functions. The position is hybrid, requiring occasional on-site presence.

A leading cybersecurity firm is seeking a Technical Cyber Security Consultant to support digital security risk management. This role involves risk identification, assessment, and working collaboratively with teams to manage security risks. The ideal candidate will have experience in information security and hold an active SC clearance. You will benefit from flexible working options, competitive salary, and comprehensive benefits as part of a mission-driven team committed to cybersecurity excellence.

Join Cyberfort - Technical Cyber Security Consultant (SC) Location: Remote (UK-based) with occasional travel Department: Consultancy Contract Type: Full-time, Permanent Salary: Competitive + Benefits Role Requirements: Candidates must hold government security vetting at SC level and be able to meet UK residency requirements. About Cyberfort At Cyberfort, we're securing the digital future. As a leading UK provider of cybersecurity solutions, we deliver cutting edge services in Managed Detection & Response (MDR), Penetration Testing, Security Operations, and Strategic Consulting. We're large enough to offer exciting opportunities, yet agile enough to ensure every voice is heard. At Cyberfort, you're not just joining a company, you're becoming part of a mission driven team. Why Join Us? Purpose Driven Work - Help protect businesses and communities from evolving cyber threats. Growth & Development - Access mentoring, apprenticeships, graduate schemes, and continuous learning platforms. Inclusive Culture - We champion diversity through our Women's Network, Neurodiversity Awareness, and Inclusion Committee. Flexible Working - Hybrid and remote options to support work life balance. Top Tier Benefits - Competitive salary, private healthcare, wellbeing support, generous holiday allowance, and more. About the Role: Technical Cyber Security Consultant The Cyber Security Consultant will support digital security risk management capability through the identification, assessment, analysis, logging and ongoing monitoring of information and cyber security risks. The role is responsible for delivering effective control assurance, validating that security control objectives are met across people, process and technology, and support the business in making well informed, risk based decisions. Working collaboratively with business, technology and delivery teams, the role provides independent challenge, expert advice and pragmatic guidance to ensure security risks are understood, managed and remediated in line with organisational risk appetite and recognised best practice frameworks (e.g. ISO 27001, NIST, CIS Controls). Key Responsibilities Deliver security risk identification, assessment, analysis and logging activities, ensuring risks are clearly articulated, consistently scored and recorded in approved Information Security Risk Management (ISRM) tools. Perform control assurance activities to validate how control objectives are being met in practice, working closely with technical delivery teams to understand design and implementation. Identify and document control gaps, assess residual risk, and clearly articulate outcomes within control and assurance artefacts. Support the delivery, rollout and continuous improvement of Information Security Risk Management methodologies, including the discovery, review and transformation of historic risk assessments into an updated, consistent approach. Manage allocated assignments end to end, ensuring all control, assurance and risk outputs are delivered accurately and in a timely manner. Maintain oversight of risk remediation activities, tracking actions through to implementation and ensuring ongoing risk treatment and control effectiveness. Provide advice, guidance and intelligent challenge on enterprise control alignment during reviews of solution designs, security documentation and architecture artefacts. Lead and facilitate collaborative control and risk workshops with business and technical stakeholders to drive shared understanding, surface key risks and agree appropriate outcomes. Contribute to post incident and remedial assurance activities, ensuring lessons learned are captured and embedded into control improvements. Provide input into formal scoping, ensuring key security risks are reflected in test scope and that critical controls are robustly assessed against expected security outcomes. Prepare clear, concise risk summary statements and assurance outputs for senior stakeholders and risk owners, translating technical issues into business focused language to enable effective information risk decisions. Present assurance findings and risk positions at governance forums and stakeholder meetings, representing the security assurance function with credibility. Ensure effective knowledge transfer on key assignments, building capability and understanding across business and technical stakeholders. Contribute to the continuous improvement of assurance practices, maintaining awareness of emerging threats, vulnerabilities and industry best practice. What We're Looking For Experience in information security, risk management, or assurance roles. Desirable qualifications - CISM, CRISC, CISSP, CISA, CGEIT, ISO 27001 Lead Auditor (or equivalent). Hold an active and transferable SC clearance. Strong analytical skills with the ability to interpret technical and procedural evidence. Excellent written and verbal communication skills. Ability to work collaboratively within a multidisciplinary team. Familiarity with security frameworks and standards (e.g., ISO 27001, NIST, CIS Controls). Attention to detail and commitment to producing high quality documentation. Inclusive Hiring We understand that one size doesn't fit all. If you need adjustments during the recruitment process, we're here to support you. Cyberfort is proud to be a Disability Confident Employer, a CyberFirst partner, and a signatory of the Armed Forces Covenant.

Cyberfort is seeking an Information Security Consultant to support client engagements across multiple security frameworks, helping organisations assess, improve, and evidence their security posture. You will work independently and with senior consultants across ISO standards, NIST, CAF, Cyber Essentials, CSA CCM and related frameworks. The role blends advisory work with hands-on delivery, offering exposure to varied industries and maturity levels while developing consulting and technical

Cyberfort Group is seeking a Senior Information Security Consultant to lead and deliver information security engagements from a remote base with occasional travel. You will advise clients, manage complex projects, and align security with business objectives. You will drive governance, risk and compliance programmes, conduct risk assessments, and contribute to service delivery improvements while supporting account growth and knowledge sharing within the practice.

Cyberfort Group is seeking an experienced Information Security Consultant to join their team. This role involves supporting client engagements by assessing and improving security postures across various frameworks including ISO and NIST. Applicants should possess hands-on experience with security assessments, strong problem-solving approaches, and excellent communication skills. The position allows for remote working with occasional travel.

Cyberfort Group is seeking a Senior Information Security Consultant to lead consulting engagements and provide strategic security guidance. This role involves managing projects from initiation to completion and acting as a trusted advisor to clients across various security frameworks. If you possess strong project management skills and experience in information security governance, we would love to hear from you. Join us to help protect businesses from cyber threats while enjoying a competitive salary and flexible working options.

A leading cybersecurity firm is seeking a Security Architect to join their Consultancy team. In this remote role, you will work with clients across various sectors to define and implement security architectures. Responsibilities include providing secure design advice, ensuring solution compliance with security standards, and conducting risk analysis. Strong knowledge in cybersecurity and relevant certifications are essential. This position offers a competitive salary, flexible working options, and excellent benefits.