About this role
Salary: £50,000 - 60,000 per year
Requirements: Strong experience in ISO 27001 implementation, internal audit, ISMS maintenance, and engagement with external auditorsSolid understanding of the Data Protection Act and GDPRExperience in security management, including risk, incident, and ISMS management, security working groups, and monitoring and measuring maturityExperience working with frameworks such as NIST CSF, CIS, and NCSC CAFExperience in supplier management, including third-party supplier security assessmentsExperience managing risk and recommending mitigating actionsKnowledge of Cyber Essentials and IASME Cyber Assurance standardsOutstanding written and verbal communication skills with an emphasis on confidentiality, tact, and diplomacyAbility to multitask, work as part of a team, and work independentlyFormal ISO certifications such as Lead Auditor or Lead Implementer are desirableFormal Data Protection Officer certification is desirablePrincipal or Chartered Cyber Security Professional status in Cyber Security Audit and Assurance or Cyber Security Governance and Risk is desirableCertified IASME Cyber Assurance Assessor status is desirableCertified IASME DCC Assessor status is desirableGood technical skills and understanding of IT and cloud services are desirableSolid understanding of AI Governance and ISO 42001 is desirable Responsibilities: Lead and support client ISO 27001 implementation projects from initiation to certificationConduct client Defence Cyber Certification (DCC) assessments and help clients gain formal certificationProvide information security, cyber security, and data privacy/GDPR consultancy to clientsLead PCI and SOC2 client engagementsSupport clients with the implementation of AI governance capabilities and formal certification to ISO 42001Perform cyber security maturity assessments using recognised frameworks from CIS and NIST and make recommendations for improvementProvide vCISO and vDPO services to clients and support client security working groupsSupport sales and marketing initiatives in promoting our consultancy and managed security services Technologies: AICloudSupportMarketingSecurity More:
We are an independent ISO and CREST certified cyber security consultancy providing security consultancy and managed security services to a wide range of clients and partners. We are hiring a Lead Security Consultant to join our team in Manchester on a hybrid basis. This full-time role offers a 40-hour working week, up to £60,000 per annum depending on skills and experience, up to 10% annual bonus, funded InfoSec training, time for self-study, 25 days holiday plus bank holidays, private health care, company pension, career development opportunities, and regular team meals and activities.
last updated 34 week of 2026