Cyber Security Technical Consultant (Manager)

• →Leading client engagements as a cyber security technical authority

• →Developing, justifying and implementing organisational and system security management strategies that address risk and control requirements, ensuring a UK Gov't Secure by Design approach

• →Selecting, understanding and adapting/adopting appropriate security control frameworks

• →Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements

• →Performing threat modelling and risk assessments to develop a holistic picture of threat

• →Ensuring security principles are applied during solution planning, design, test, deployment and operations to reduce risk and ensure compliance, including:

• →Developing secure solution designs to mitigate the risks posed by new technologies and business practices

• →Leading third-party and supply chain security assessments, including vendor due diligence, secure procurement, software supply chain risk and ongoing assurance of externally sourced technology

• →Applying identity-led and zero-trust security principles, including strong authentication, least privilege, contextual access control and segmentation of services, users and devices

• →Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence

• →Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails

• →Identifying and monitoring environmental and market trends and proactively assessing impact on business strategies, benefits and risks

• →Assessing our client needs, understanding how these may differ from their wants, and appropriately managing stakeholder relationships

• →Delivering high-quality work to agreed milestones and adapting quickly to unfamiliar client environments.

• →Leading the client technical engagements, including pitches and presentations

• →Helping to support & grow Daintta by actively inputting into the company strategy and helping to shape our future

• →Representing us and our core values: Transparency, fairness and being daring.

• You have 5+ years of practical experience in cyber security engineering, architecture, design and technical assurance, with evidence of applying that knowledge credibly in client-facing consulting engagements

• You have led technical client deliveries and teams across a range of cyber security related projects

• You have demonstrable working-level experience across several of the following domains: Security Architecture; Security Operations; Identity & Access Management; Cloud, Infrastructure and Platform Security; Network and Connectivity Security; Application Security and DevSecOps; Data Security and Privacy; Governance, Risk & Compliance.

• You have experience embedding security into agile, DevSecOps and iterative delivery models, including design reviews, security requirements management and pragmatic risk treatment in fast-moving projects

• You have experience aligning business requirements with security control standards and frameworks including: ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others

• You have demonstrable continuous personal development, supported by relevant certifications and accreditations

• You have good interpersonal skills at both the business and technical level

• You have UK security clearance at SC or above or are eligible and willing to go through clearance

Desirable:

• You have experience working with security controls within cloud-based infrastructure (e.g. Azure, AWS, GCP). This may include design, configuration, or protective monitoring.

• Knowledge of digital identity and authentication systems

• Experience applying data classification, handling requirements, data residency and sovereignty considerations to solution design, particularly where sensitive, regulated or operationally critical data is involved

• Understanding of security risks and controls for AI-enabled systems, including data governance, access control, prompt injection, model misuse, third-party AI services and monitoring of sensitive data exposure

• Application and governance of fine-grained access control and permissions

• Experience in UK Gov't public sector or defence