Principal Cyber Security Consultant Role
Amethyst delivers a range of specialist cyber security professional services. We help businesses to understand the value of their information assets, assess the associated security risks and develop the technical and procedural controls to manage them. We work across all sectors, including the public sector where much of our work has a focus on the management of compliance and security accreditation for information systems and applications. We specialise in taking ownership of the entire through-life process and seek to develop long term trusted relationships with our clients. As part of our growth strategy we are looking for a talented Principal Cyber Security Consultant to join our team.
About the Role
As a Principal Cyber Security Consultant, you will be responsible for providing expert cyber security technical advice, guidance and support. You will have extensive working experience in your specialist field and within a consultancy role. You will have led or directed major, complex and business-critical projects; bringing genuine strategic insight. Specific responsibilities include:
Production of formal deliverables such as accreditation evidence, security policies and operating procedures
(SyOPs), risk assessments, and security assurance management plans.
As a principal consultant your role will involve significant stakeholder engagement, liaising directly with the
client, and ensure programme deadlines are adhered to
Understanding, assessing and articulating business and information risk at a technical and business process
level
Reviewing the effectiveness of existing security controls and proposing proportionate security improvements
Support business development by: managing, developing and expanding relationships with our clients
Provide encouragement and leadership in a mentoring capacity to other consultants to enable their
development and progression.
Essential Skills & Experience:
Relevant professional qualifications such as CISSP, CISA, CCSK, CISM, or similar
CCP SIRA (Senior SIRA is desirable)
5+ years working in HMG and to be familiar with HMG Security Policy Framework, NIST, ISO27001 and use of
the NCSC guidance (standards, GPGs, etc)
Knowledge and understanding of cloud security
Development and delivery of security deliverables
Extensive experience of HMG and MoD Information assurance (IA) requirements and the MoD security
accreditation lifecycle
ISO 27001 qualification and experience with working knowledge of Governance, Risk & Compliance
Knowledge of Industry standards and best practice for IT management and cyber security
Previous experience in providing the specialist technical/subject advice and guidance on at least four major
projects
Understanding of Government and public sector recognised methodologies and in-depth knowledge of the
public sector and current policy and political issues affecting it
Strong written, verbal and interpersonal communication skills
Ability to lead and manage a team
Working on a HMG multi-national equipment delivery programme
Candidates must be:
SC clearance – if not, willing to undergo government security clearance process
Eligible to work in the UK and have the appropriate right to work documents
Willing to travel.