Senior Principal Consultant - Cyber Security Audit

Principal/Managing Consultant - Cyber Security Audit

Skills, Experience, Qualifications, If you have the right match for this opportunity, then make sure to apply today.

Hybrid | With travel to client sites and offices in Bristol

Frontier Resourcing is working with a growing technology and cyber security consultancy to recruit an experienced Cyber Security Auditor to join as a Senior Principal/Managing Consultant and support a range of public and private sector clients.

Specialising in assurance against Cyber Assurance Framework (CAF), this is an opportunity to lead security audits and assurance activities, helping organisations strengthen their cyber resilience, assess risk and ensure effective security controls across complex systems.

The Role

You will lead client engagements, deliver independent security assessments and provide practical recommendations to improve security posture and compliance. You'll work across multiple projects, engaging with technical teams and senior stakeholders, with opportunities to contribute to bids and business development.

Key responsibilities:

• Lead cyber security audits and assessments against recognised frameworks, including the NCSC Cyber Assessment Framework (CAF).
• Evaluate security controls, organisational resilience and compliance throughout the system lifecycle.
• Identify vulnerabilities, risks and areas for improvement, producing clear, actionable reports.
• Facilitate assurance workshops and engage with stakeholders at all levels.
• Advise clients on secure system design, risk management and security best practice.
• Support bid development and pre-sales activities where required.

Essential Experience

• Proven experience leading cyber security audits and assurance engagements.
• Strong knowledge of the NCSC CAF, ISO 27000-series standards, NIST frameworks and associated risk management practices.
• Understanding of legacy information assurance standards and NCSC guidance.
• Familiarity with MOD security frameworks, such as JSP 453, JSP 440, JSP 902 and DEFCON 659A.
• Technical knowledge spanning defensive cyber security, enterprise architecture, secure systems, network and cloud security, system hardening, cryptographic controls and protective monitoring.
• Confident stakeholder management skills, with the ability to communicate complex findings clearly to technical and non-technical audiences.

Qualifications

Essential: CISA, CISSP, CISM or another recognised cyber security certification.

Desirable: Membership of CIISec at an appropriate level, or professional registration with the UK Cyber Security Council in audit and assurance.

Package & Working Arrangements

• Competitive salary, dependent on experience.
• Car allowance and discretionary performance bonus.
• Competitive pension scheme and private healthcare.
• Hybrid working, with occasional travel to client sites and offices in Bristol.
• Professional development and clear career progression opportunities.
• Additional paid leave provisions for eligible Reservists and Cadet Force Adult Volunteers.

Security Clearance: Successful candidate will need to be eligible for SC Clearance – requires minimum 5 years' continuous UK residency and British passport holder.

Interested? xwzovoh

If you have a strong background in cyber security audit, assurance and risk management, and want to work on challenging engagements across government and commercial environments, we'd welcome a confidential conversation.