Senior or Principal Security Consultant (Risk Management)

Logiq; Bristol; Hybrid; GBP 50,000 - 90,000; Full time

Job description

Senior or Principal Security Consultant (Risk Management)

Location: Hybrid; with occasional travel expected to client site or Logiq’s offices in Bristol, Chippenham or Exeter.

Salary: Negotiable Dependent on Experience, plus car allowance, plus up to 10% performance bonus*, plus excellent benefits package.

Logiq is a fast-growing Technology Company, providing cutting-edge solutions to high-risk clients across Private and Public Sector. Due to rapid growth in our Security Capability, we are looking for experienced Security Consultants to join our team.

What is Cyber Risk Management?

Cyber risk management ensures that organisations can anticipate, withstand, and recover from cyber incidents, aligning security efforts with business objectives, regulatory requirements, and industry best practices. It involves applying risk-based decision-making to ensure security measures are proportionate to the threats faced, balancing protection, operational effectiveness, and compliance with the organisations need and context.

As leading players in MOD’s cyber security transformation to Secure by Design (SbD), we are looking for team members and leaders who share our vision that cyber risk management is driven by business requirements and a holistic view of security that can guide clients to secure solutions that support their business objectives.

The Role:

We are seeking an exceptionally capable Security Consultant to join the company within the Risk Management team within the Security Practice. Our consultants are engaged across Security Engineering and Assurance tasks, working on parallel projects and workstreams, and take the lead on day-to-day client interface. You will also be comfortable enhancing customer relationships with new opportunities and assisting with bids and presales where necessary.

You will have experience of working across system lifecycles and be capable of supporting clients through business-focused requirement specification and definition. You will have a broad experience of technical security, producing technical risk assessments and solution architecture documents.

The ideal candidate will be both experienced and invested in ensuring that our clients' solutions are Secure by Design. To enable this, strong inter-personal skills are essential, e.g. ability to lead workshops, engage with business leaders, and interact with diverse project teams and stakeholders.

With your experience you will be comfortable operating in a ‘customer friend’ type role, supporting the client to develop and deliver secure systems, understanding risks and managing complex system security whilst communicating effectively with technical and non-technical stakeholders.

Your experience will include:

• Expertise in Defensive Cyber, Enterprise Architecture, Secure Systems, Network & Cloud Security, System Hardening, Cryptographic Controls (PKI, Data at Rest/In Transit), Protective Monitoring, and Security Auditing.
• Strong understanding of the ISO 27000 series, NIST Cyber Security & Risk Management Frameworks, NCSC CAF, and other industry standards.
• Familiarity with NCSC guidance and legacy Information Assurance (IA) standards.
• Experience with MOD security frameworks including JSP 604, JSP 440, JSP 902, and DEFCON 659A.
• Experience in business growth and bid development is desirable.

What We’re Looking for:

• Certified Information System Security Professional (CISSP), Certified Information Security Manager (CISM), or another industry recognised cyber security certification.
• Full Membership of the Chartered Institute of Information Security (CIISec) - highly desirable.
• Chartered or Principal status via the UK Cyber Security Council for Risk Management.
• IEng or CEng registered with UK Engineering body.
• Chartership through the British Computer Society.

Other information:

Logiq is committed to investing in people, offering clear progression pathway into our consultancy service, and we will passionately support professional growth to develop our employees.

Flexible working is available including part-time / term time working patterns. All suggestions are welcomed to be discussed as part of a proposed employment package. We are an equal-opportunities employer.

*Bonus payments are discretionary and awarded upon successful completion of probation.

Seniority level

Not Applicable

Employment type

Full-time

Job function

Consulting, Engineering, and Information Technology

Industries

Computer and Network Security, Defense and Space Manufacturing, and Security and Investigations