About this role
Salary: £117,000 - 130,000 per year
Requirements: Experience with ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC, and Cyber Risk Profile (CRP) workExperience in cyber report writingRelevant ISO certification, such as ISO 27001 Lead Auditor or equivalent, is desirableExperience in auditing, compliance, or risk management, ideally within the Public Sector, particularly DefenceUnderstanding of NCSC CAF v3.2/v4.0Some MoD experience is desirable but not essentialStrong analytical and problem-solving skillsExcellent communication and interpersonal skillsAbility to work independently and as part of a teamWe require applicants to hold or be eligible to hold UK Security Clearance to SC level Responsibilities: Plan and conduct audits of customer processes and systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssureSupport audit activity and, over time, help lead it, ensuring findings are properly documented and reportedCommunicate audit findings and recommendations, working collaboratively with management to develop and implement effective corrective actionsMaintain accurate and current records of audit activities, including audit reports and documentation of corrective actions takenStay current with regulatory requirements and industry best practice relating to auditing, compliance, and risk managementContribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Technologies: SupportSecurity More:
We are Conventus, and we require a Junior Cyber Audit Consultant to join our Defence-focused Cyber Assurance team on a 12-month contract. This is a hybrid role with travel to Corsham and other South Military sites, offered at a rate of £450-£500 per day inside IR35. You will play a supporting role to senior consultants delivering audits across customer processes and systems, with a strong focus on Defence Cyber Risk Profile (CRP) audit work. This is an excellent opportunity for someone looking to develop their career in cyber assurance within a Defence environment.
last updated 32 week of 2026