Principal Cyber Security Consultant

Location: United States / Hybrid

Employment Type: Permanent

Level: Consultant / Senior Consultant

Salary: Competitive + Benefits

Sector: Cyber Security Consulting

About the Role

We are looking for an ambitious and technically capable Cyber Security Consultant to join a growing cyber security consulting team.

This is an opportunity to work with a broad range of clients, helping organisations understand, manage and reduce their cyber security risk. You will work across client engagements, supporting the delivery of cyber security assessments, risk programmes, security improvements and strategic advisory projects.

The role would suit someone who combines strong technical understanding with excellent communication skills and wants exposure to complex, high-profile client environments.

Key Responsibilities

Deliver cyber security consulting engagements across a range of industries and client environments.

Conduct cyber security assessments, maturity assessments and gap analyses.

Identify, assess and articulate cyber security risks and provide practical recommendations.

Support the development and implementation of cyber security strategies and roadmaps.

Review security controls, policies, standards and operating models.

Support clients with governance, risk and compliance activities.

Assist with security architecture and control reviews where appropriate.

Contribute to cyber risk assessments and threat-informed security programmes.

Produce high-quality client reports, presentations, risk registers and remediation plans.

Present findings and recommendations to client stakeholders, including senior management.

Support incident response, cyber resilience and crisis management engagements where required.

Work collaboratively with technical, risk, compliance and business stakeholders.

Contribute to proposals, tenders and business development activity.

Develop trusted relationships with clients and become a credible cyber security adviser.

Maintain awareness of emerging cyber threats, technologies, regulations and industry developments.

Experience Required

We are looking for candidates with a strong foundation in cyber security and experience working either within a consulting environment or an internal security function.

Essential:

Experience in cyber security, information security or a closely related discipline.

Understanding of cyber security frameworks, controls and risk management principles.

Experience conducting assessments, audits, reviews or security improvement programmes.

Ability to translate technical cyber security issues into clear business risks and recommendations.

Strong written and verbal communication skills.

Experience producing professional client-facing documentation and presentations.

Strong analytical and problem-solving capability.

Ability to manage multiple priorities and work effectively within project teams.

Willingness to work directly with clients and travel where required.

Desirable:

Experience in one or more of the following:

Cyber security strategy

Cyber risk management

Security governance

Security architecture

Threat and vulnerability management

Cyber resilience

Incident response

Security operations

Third-party / supply-chain security

Cloud security

Identity and access management

Regulatory compliance

Security frameworks and standards