Security Consultant

Salary: £40,000 - 70,000 per year

Requirements:

• A passion for and understanding of cyber security trends and threats.
• Experience in use and application of security risk management frameworks such as NIST CSF and ISO 27001.
• Experience in a consulting environment.
• Effective business acumen and an understanding of the cyber security challenges faced by organisations and their supply chains.
• Ability to conduct face-to-face engagements to risk assess suppliers and articulate/pitch security advice directly to key customer and supplier stakeholders.
• Experience with relevant supply chain risk management toolsets and other related tooling such as BitSight, Panorays, Prevalent, CoreStream, ServiceNow, and PowerBI is desirable.
• Excellent interpersonal skills as well as both written and verbal communication and presentation skills.
• Ability to prioritise workload, work well under pressure, and concurrently manage both customer and BAE Systems expectations.
• Ideally holds SC clearance or meets the requirements to obtain it.

Responsibilities:

• Conduct cyber risk assessments and supplier due diligence assessments.
• Implement cyber security assessment methodologies on our customer’s suppliers and sub-tier suppliers.
• Develop and maintain supplier cyber security policies and standards for assessments.
• Advise clients on improving their supplier assurance risk management processes.
• Understand cyber threats and utilize threat intelligence for assessments.
• Participate in supplier security incident response, focusing on impact assessment and collaborating with the Incident Response Team to develop risk mitigation strategies.
• Prepare clear written reports and communicate cyber security requirements to stakeholders.

Technologies:

• Security
• ServiceNow
• Support

More:

We are BAE Systems, offering a competitive pension scheme, employee share plans, and a comprehensive range of flexible health, wellbeing, and lifestyle benefits, including a green car scheme and private health plans. Our new cyber security consultant will play a crucial role in our Critical National Infrastructure focused team, tasked with identifying, assessing, and mitigating cyber threats to ensure the integrity and security of our clients’ operations. We value an inclusive culture that embraces diversity of thought and fosters an environment where everyone can thrive.

last updated 33 week of 2026