Cyber Security Consulting - Managed Cyber Services

As a cyber security consultant on PA Consulting’s Digital & Data team, you will bring clear, practical cyber expertise to strengthen security across complex IT and OT environments. You’ll act as the cyber security authority for projects, technology releases, and product implementations, collaborating with client security leadership and delivery teams. You’ll address meaningful security challenges in regulated sectors and national infrastructure, shaping secure-by-design outcomes. This role offers cross-functional collaboration, relevant training, and a path to technical growth within a supportive consulting community.

• private healthcare for you and family
• 25 days annual leave (plus half-day Christmas Eve)
• generous pension
• bonus based on performance
• PA share ownership
• cycle to work benefits

• Provide authoritative cyber security guidance within client delivery teams across design, implementation and operation of security controls
• Act as a trusted cyber security SME to support secure-by-design activities and risk-based decision making
• Translate frameworks (NIST CSF, ISO 27001, IEC 62443, NCSC CAF) into practical requirements for clients
• Support security assurance, risk assessment and control implementation across programs
• Develop reusable tools, playbooks, and guidance to improve delivery consistency
• Coach and share knowledge within the cyber community and mentor consultants
• Own an assigned business area or technology, managing relationships between managed services and internal stakeholders
• Capture lessons learned and codify best practices to accelerate client outcomes
• Build relationships with senior stakeholders, program teams, and suppliers

• Cyber security consulting experience delivering assurance or secure-by-design work across IT and/or OT
• Ability to manage multiple engagements with high quality
• Strong stakeholder management with senior security leaders and technical teams
• Experience with threat and risk assessments and recognized frameworks (NIST CSF, ISO 27001, IEC 62443, NCSC CAF, GDPR, PCI DSS, NIS)
• Knowledge in cloud security, OT/IoT security, network/security architecture or related areas
• Consultative communication across the organization to align stakeholders around a shared vision

• Consultative approach
• Stakeholder influence
• Team collaboration
• Threat and risk assessments
• Secure-by-design
• Security architecture and controls