Senior Security Consultant

Role Overview Primary Responsibilities: Join Our Growing Security & Compliance Team

We are seeking an experienced Compliance & Information Security Consultant to drive our security and compliance service offerings forward. You will work within the Information Security & Compliance team, supporting the operation, maintenance, and maturity of our information security programme for both DXR Cyber and our external-facing clients.

The ideal candidate will have hands-on experience implementing and auditing ISO 27001, combined with knowledge of NIST Cybersecurity Framework and other compliance frameworks. You will combine technical expertise with strong stakeholder management and communication skills.

Role Overview & Key Responsibilities

• Security & Compliance Delivery
• Ensure the protection of information assets and technologies across client engagements
• Conduct hands-on implementation and auditing of ISO 27001, ISO 27701, ISO 9001, NIST-CSF, and IASME Governance frameworks
• Perform internal audits for both DXR Cyber and external clients, documenting findings and recommendations
• Develop and maintain compliance documentation, policies, and procedures
• Support the achievement and maintenance of ISO certifications across the organisation
• Client & Stakeholder Engagement:
• Develop and leverage strong relationships with internal and external stakeholders
• Support the Sales team with engagement scoping, ensuring clients receive valued and tailored services
• Deliver security awareness training and be comfortable with public speaking and client presentations
• Manage Third Party Risk Management (TPRM), including vendor security assessments and programme reviews
• Communicate complex security concepts clearly to technical and non-technical audiences
• Programme Support:
• Contribute to the continuous improvement of DXR Cyber's information security programme
• Support the operation and maturity of our internal ISO 27001 ISMS
• Identify and escalate security risks and compliance gaps
• Contribute to incident response and security investigations where required
• Potential to act as a vCISO for client engagements
• Contribution to marketing activities such as pod casts and client events
• Comfortable presenting in public

Required Experience Essential Requirements & Experience

• Extensive Information Security Governance, Risk and Compliance (GRC) experience
• Hands-on InfoSec Operations experience
• Proven experience implementing and auditing ISO 27001
• Proven experience contributing to a Business Management System (BMS) certified to ISO standards
• Good knowledge of Cyber Essentials Plus scheme
• Strong understanding of UK & EU General Data Protection Regulation (GDPR) and the Data Protection Act 2018
• Ability to work autonomously and collaboratively within a team
• Excellent verbal and written communication skills
• Certifications (Preferred):
• ISO 27001 Lead Implementer or Internal Auditor
• ISO 9001 Implementor or Lead Auditor
• CISM or CISSP
• NIST CSF or equivalent cybersecurity framework knowledge

Personal Competencies & Skills

• Excellent time, priority, and task management
• Strong interpersonal skills; ability to build relationships with clients and team members
• Ability to anticipate problems, resolve ambiguity, and take decisive action
• Proactive problem-solver with analytical mindset
• Self-motivated and able to manage multiple engagements
• Comfortable with public speaking and client presentations
• Willingness to travel to client sites when required

Additional Requirements

• Eligibility for Security Clearance (UK-based)
• Valid UK Driving Licence
• Hybrid working arrangement with requirement to work from Head Office (Doncaster, with visits once or twice a month, depending on location)

Why Join Us? This is an excellent opportunity within a stable, dedicated cybersecurity organisation. You will work with a talented team delivering high-quality security and compliance services to blue-chip clients across multiple sectors. We invest in your professional development and support relevant certifications.

Benefits

• Competitive salary (commensurate with experience)
• Salary Sacrifice pension scheme
• Private Medical Insurance
• Buy/sell holiday scheme
• Birthday leave (paid)
• 33 days holiday (including bank holidays)
• Cycle-to-work scheme
• Employee Assistance Programme
• Government Childcare Scheme
• Professional development and training opportunities
• Flexible working arrangements