Lead Cyber Security Consultant (Defence)

UK Remote (travel required approx. 60% / 3 days onsite per week)

Full-time & Permanent | Consultancy

Competitive salary + Excellent benefits

About the Opportunity

We’re working with an established and growing UK cybersecurity consultancy expanding its Defence and Public Sector practice.

This is a great opportunity for an experienced security professional to lead high-impact programmes, influence senior stakeholders, and shape security outcomes across MOD and wider Defence environments.

The Role

As a Lead Cyber Security Consultant, you’ll take ownership of multiple client engagements, delivering expert advice across governance, risk, compliance, and Secure by Design practices.

You’ll work closely with senior stakeholders to assess risk, define security controls, deliver assurance activities, and support secure architecture across complex, high-profile systems.

This is a hands-on, strategic role that combines leadership, client engagement, and technical depth.

Key Responsibilities

Lead Secure by Design and security assurance activities across MOD and Public Sector programmes
Support and guide the application of risk management frameworks, ISMS, and Enterprise Security Risk Management
Conduct and lead workshops with technical and business stakeholders
Produce clear, actionable reporting on risk, vulnerabilities, and remediation
Provide pragmatic, proportionate recommendations aligned to business goals
Support secure design across cloud and on-premise platforms
Contribute to internal knowledge sharing and thought leadership

Experience & Expertise

Strong background in Technical/Security Architecture or Governance, Risk & Compliance
Experience working in Defence / MOD environments
Strong analytical and communication skills, with the ability to influence senior stakeholders
Passion for continuous learning and high-quality security outcomes

Desirable Knowledge

SAC (Security Assurance Coordinator) or Delivery Team Security Lead experience
MOD/GDS Secure by Design

Familiarity with:

JSP440, JSP604/453, JSP490
Supplier Chain Assurance
GDPR, PCI DSS, ICO
ISO 27001, NIST CSF, CIS Controls v8

Skills in:

Threat modelling (kill chain, attack trees, etc.)
Cloud security (AWS, Azure), containerisation, firewalls
Secure SDLC
HLD/LLD review
ITHC scoping and remediation

Certifications (Highly Desirable)

CIISEC
UK Cyber Security Council registration (Chartered or Principal)
AWS/Azure Security (Professional)
CCSP, CISSP, CISM
ISO 27001 Lead Auditor

Security Vetting / Clearance

Active and transferable DV clearance is essential
Must be a sole British National and UK‑based

Benefits

Competitive salary and benefits package
Private healthcare & wellbeing support
Flexible working (remote with travel)
Career pathways, mentoring and continuous learning
Inclusive, supportive culture

Interested?

Submit your application to learn more about this exciting opportunity.

Sanderson Government & Defence

Latest Jobs

Lead Cyber Security Consultant (Defence)