What we’re looking for
You don’t need to tick every box, but you’ll likely bring strong hands-on experience in:
- Cyber Security, cyber risk, cyber controls, and associated engineering and implementation work.
- Security testing (e.g. threat-led testing, vulnerability management, scenario testing, ISO Standards).
- Threat intelligence or proactive threat monitoring.
- Experience working in Financial Services environments (banks, regulated firms).
- Previous Consultancy experience where you’re comfortable with ambiguity, pace, and client expectations.
- Confidence leading workstreams and coordinating other consultants.
- Enough governance and risk knowledge to contextualise your technical work, even if it’s not your core strength.
- Explain complex security topics without the jargon overload.
- A versatile and flexible person who also has experience in delivery or contribution to Resilience themed projects such as TPRM, DORA and Operational Resilience regulatory driven projects.
Tools & environment
Our clients’ toolsets vary, but you’ll feel at home if you’ve worked with:
- Common security tooling (SIEMs, vulnerability scanners, cloud security platforms, Firewalls).
- Data protection and incident response capabilities.
- Threat intelligence sources and industry information sharing.
- Identity Access Management processes and tooling.
Why this role is different
- A chance to shape how cyber security work is delivered, rather than stepping into a rigid or pre-defined model.
- Real influence over delivery quality, client relationships, and the future development of cyber capability.
- A role that balances hands-on technical delivery with leadership and visibility.
- An environment that values quality, pragmatism, and clear accountability.
- An opportunity to work on other Resilience themed projects such as TPRM, and Operational Resilience.
We care far more about how you think and deliver than whether you’ve used one specific vendor tool.