Security Consultant

Overview

In this role you will lead cyber risk assessments for client engagements and help raise supply chain security maturity. You will operate on client sites and remotely, shaping secure solutions and ensuring compliance. You will apply risk frameworks, perform supplier due diligence, and contribute to incident response planning with the IR team. You’ll produce clear, actionable reports for stakeholders, driving risk mitigation and stronger assurance across supplier ecosystems. This is a critical CN I–focused role offering hands-on impact in a collaborative, cross-functional environment.

Pay / Benefits

• competitive pension scheme
• employee share plans
• flexible discounted health and wellbeing benefits
• green car scheme
• private health plans
• shopping discounts

Responsibilities

• Conduct cyber risk assessments and supplier due diligence assessments
• Implement cyber security assessment methodologies on suppliers and sub-tier suppliers
• Develop and maintain supplier cyber security policies and standards for assessments
• Advise on improving supplier assurance risk management processes
• Utilise threat intelligence in assessments and participate in supplier security incident response
• Prepare clear reports and communicate requirements to stakeholders

Key requirements

• Passion for cyber security trends and threats
• Experience with risk management frameworks such as NIST CSF and ISO 27001
• Consulting experience
• Strong business acumen and understanding of cyber security challenges in organizations and supply chains
• Ability to conduct F2F engagements with stakeholders at a technical level
• Experience with supply chain risk management tools and related tooling (e.g., BitSight, Panorays, Prevalent, CoreStream, ServiceNow, PowerBI)
• Excellent written and verbal communication and presentation skills
• Ability to prioritise workload and manage customer and company expectations
• SC clearance or ability to obtain
• Location flexibility for hybrid arrangements

• strong communication
• stakeholder engagement
• ability to work under pressure
• NIST CSF
• ISO 27001
• supplier risk management tools (BitSight, Panorays, Prevalent, CoreStream)

…