Senior Cyber Consultant
Amethyst delivers a range of specialist cyber security professional services. We help businesses to understand the value of their information assets, assess the associated security risks and develop the technical and procedural controls to manage them. We work across all sectors, including the public sector where much of our work has a focus on the management of compliance and security accreditation for information systems and applications. We specialise in taking ownership of the entire through-life process and seek to develop long term trusted relationships with our clients.
As part of our growth strategy we are looking for a talented Managing Senior Consultant, Government Team Lead who is experienced in managing people, alongside security and supplier assurance duties, to join our team and work alongside some of the leading Consultants in this field.
About the Role
As a Managing Senior Consultant, you will be responsible for influencing and managing a team of over 10 consultants who have a variety of GRC skills. You will also act as Technical Lead/ Project Manager for at least one client.
Alongside your management role, you will also be in a client-facing consultancy role, managing information risk for our clients by enforcing measures that protect and defend information systems and implementing or reviewing the ongoing execution of Security Assurance. You will be working closely with clients to ensure the delivery of expertise in information security assurance and supplier assurance with good technical ability combined with the skills to deliver business risk advice at all levels.
Management Responsibilities include:
Managing your team’s workload ensuring any reporting deadlines are met
Work with the management team to solve issues, as well as advising on additional resources
to implement solutions
Review utilisation to assess staff performance and project spend
Develop and expand client accounts
Manage team’s performance and appraisals; agrees and monitors targets and professional
development and mentor as required.
Essential Skills & Experience:
A clear understanding of Information Security and Risk Management
Understanding of and/or experience of working with security audit techniques
Understanding of and/or experience of working with Legal and Commercial teams to deliver
security outcomes
Understands how cyber security should be applied and has experience of applying knowledge
to a variety of complex tasks, whilst understanding industry and market trends, helping to
determine implications for service offerings
Proven leadership experience and the ability to engage and communicate easily and
confidently with people at all levels
Ability to represents the company at client meetings and working groups
Understand and interpret security information quickly; provide advice and guidance on
requirements to stakeholders at all levels
Experience of working in an HMG environment
Good knowledge of NCSC guidance
Relevant experience in a cyber security related role
Good understanding and working knowledge of Governance, Risk & Compliance
Knowledge of Industry standards and best practice for IT management and cyber security
Excellent understanding of risk management and assessment principles and frameworks
Strong written, verbal and interpersonal communication skills
Demonstrates significant personal responsibility, with little need for supervision or
intervention.
Desirable Skills & Experience:
Knowledge of NIST and ISO27001
Demonstrate knowledge of applying Computer Misuse Act, DPA 98 and now GDPR 2018
Knowledge of Freedom of Information Act 2000 and RIPA 2000 in the cyber security field
Working with suppliers and assuring security in their equipment deliveries
Working on a HMG multi-national equipment delivery programme.
Desirable Qualifications
ISO 27001 Lead Auditor • CISSP or CISM • CISMP • CISM • CRISC certification • CCP SIRA.
Candidates must be:
Ideally have an SC clearance – if not, willing to undergo government security clearance process
Eligible to work in the UK and have the appropriate right to work documents
Be aligned to the Skills Framework for the Information Age (SFIA) Levels 4 and 5