Cyber Security Consultant

As a Cyber Security Consultant, you will oversee large-scale security initiatives and collaborate with internal teams and external suppliers to align projects with our standards. You will identify vulnerabilities, guide risk mitigation, and strengthen defences across systems, networks, and applications. You’ll provide expert security recommendations and stay ahead of evolving threats in a hybrid work setting. This role offers a chance to influence security posture at scale within a diverse, collaborative environment.

• 33 days’ annual leave
• Flexible leave
• Generous employee discounts
• Private healthcare
• Workplace pension
• Hybrid work (three days home, two days office)

• Oversee large-scale security projects involving multiple parties and teams
• Conduct comprehensive security assessments of systems, networks, and applications
• Identify vulnerabilities, weaknesses and threats in Arnold Clark’s security postures
• Develop and implement strategies to mitigate risks and strengthen security defences
• Provide expert guidance and recommendations on best practices for securing systems and data
• Assist with implementing security controls and solutions
• Stay up to date on the latest cyber security threats, trends, and technologies
• Communicate effectively with internal and external stakeholders, both verbally and in writing, to convey technical information and recommendations
• Work collaboratively with IT teams to remediate findings identified through penetration testing
• Assist members of Cyber Security with any relevant issues that may arise
• Assist GRC team with policy and standard writing/updating

• Minimum five years’ cyber-related experience
• Experience in stakeholder management
• Experience in coaching and mentoring fellow Cyber Security team members
• Experience in implementing solutions that meet the requirements of NIST CSF, CIS v8.0 and CE+
• Ability to work under the direction of the Security Advisory Manager
• Ability to work under pressure
• Ability to complete project documentation in line with processes
• Establish and maintain relationships with all internal stakeholders and third parties

• stakeholder management
• communication
• collaboration
• NIST CSF
• CIS v8.0
• CE+