Average Security Consultant salary in the UK

Work on Technology That Protects What MattersAt SiXworks, we build secure digital solutions that support Defence and National Security missions. Our teams work on complex problems where reliability, security, and speed of innovation matter.We’re looking for a Security Consultant who enjoys solving difficult technical challenges and wants their work to have real operational impact.What You’ll DoAs a Security Consultant, you’ll help design, build, and deliver secure digital solutions in highly secure environments. You’ll work alongside engineers, architects, and delivery specialists to develop technology that enables faster, safer decision-making for critical operations.Your key responsibilities will include the following:Cyber Risk Management within a Defence and Security Sector.Providing strategic security governance, risk and compliance (GRC) direction of projects.Engagement with relevant stakeholders across the MOD, including project teams, users and policy owners to identify key security objectives and requirements. Work closely with various teams across the business (Software Engineering, DevSecOps Engineering, Infrastructure Engineering, Agile Development, Support) to achieve security outcomes.What We’re Looking ForWe value people who take ownership, think critically, and enjoy working as part of a collaborative team tackling complex challenges. You don’t need to tick every box, but we’re particularly interested in people with skills/experience as described below.Essential experience includes:Experience of working on risk assessments using industry approved methodologies (such as NIST, ISO 27005).Producing clear, actionable risk treatment plans aligned to security objectives to treat /mitigate the identified risks.Experience supporting compliance and assurance activities, including audits, control testing, and evidence gatheringCreation of security documentation to support the development of an information system, these could include: Security Aspects of Design, Risk Assessments, Risk Management Plans, Security Policies, Security Test Plans/Results.Ability to translate technical security risks into business language for senior stakeholders and decision-makersHigh standards in written report and/or design documentation.Desirable experience includes:Knowledge of MOD policies (JSP 440, 453/604, 892).Knowledge and experience of Agile, DevSecOps, CI/CD principles and their application in secure environmentsRelevant certifications (e.g., CISSP, ChCSP, etc)Experience of working with MOD Cyber Assurance/Accreditors.Just as important are curiosity, strong problem solving ability, and the motivation to continuously improve how technology is designed and delivered.About SiXworksSiXworks is a specialist digital innovation partner delivering secure, mission-critical technology to Defence and National Security organisations. We focus on digital experimentation, secure-by-design architecture, cloud technologies, and rapid application development to help our customers move faster and stay ahead of evolving challenges.Our team combines expertise from across technology, business, and operational backgrounds including the armed forces creating a collaborative environment where practical thinking and innovation thrive.Why Join UsOur culture is guided by six principles: Agility, Security, Innovation, Quality, Collaboration and Inclusivity our North Star for how we work. SiXworks is a leading provider of secure digital solutions, specialising in digital experimentation and focused on fail-safe-fast cutting-edge technology solutions deployed in highly secure environments.As an end-to-end digital innovation and delivery partner, we turn complex challenges into mission-critical digital advantages. This is a thrilling time for us, with ambitious plans for growth. We are looking for brilliant, experienced, driven and self-motivated people to join the team on our journey.We offer competitive salaries and a package that supports your wellbeing and development, including 25 days annual leave + bank holidays, free Private Medical cover and Life Assurance, Generous pension (10% employer, 5% employee contribution), Bonus and Professional development and training support. In addition to secure parking, gym, café & restaurant on site and lots of open break out spaces.A word on UK Security ClearanceDue to the secure nature of the position and working environment, you must have or be eligible to obtain Security Clearance. More details relating to UK Security Clearance can be found on the GOV UK website.Interested?Please apply!

Cyber Security ConsultantSalary: £50,000 - £70,000 + benefits Fully Remote | UK-based | Occasional Client TravelAbout the RoleAn exciting opportunity for a Cyber Security Consultant to join a growing, specialist cyber security consultancy focused on helping organisations build better, more practical security.This isn't your traditional Big Four-style consultancy. The business works predominantly with ambitious SME and high-growth organisations, giving clients pragmatic, commercially focused security advice without unnecessary layers of process or bureaucracy.This role sits within the Cyber Security Consulting team, working directly with clients to understand their challenges, identify and manage risk, and help them actually get things done.The demand for cyber security consulting is growing rapidly, and the business is at an exciting stage of expansion. There is plenty of opportunity to make an impact, take ownership and help shape how the consulting practice develops.Most importantly, personality matters. We're looking for someone who is curious, proactive and genuinely enjoys working with people. Someone who doesn't need to be told what to do at every step, is happy to roll their sleeves up and get stuck in, and wants to build something rather than simply occupy a role.Key ResponsibilitiesAs a Cyber Security Consultant, you will work across a range of client engagements, providing practical security advice across governance, risk, compliance and technical security.You will have the opportunity to work at both a strategic and operational level, depending on the needs of the client, and will increasingly take ownership of engagements and client relationships.Responsibilities will include:Client DeliveryDeliver cyber security consultancy engagements across a range of clients, from growing SMEs through to larger organisations.Conduct cyber security maturity assessments, gap analyses and risk assessments.Develop practical, prioritised remediation plans and security roadmaps.Support clients with ISO 27001 implementation, maintenance and audit preparation.Advise clients against recognised frameworks including ISO 27001, NIST CSF and CIS Controls, as well as supporting SOC 2 and other compliance requirements.Develop and improve security policies, procedures and governance frameworks.Establish and maintain risk registers and support security governance forums.Support incident response planning, tabletop exercises and crisis management activities.Provide advice across areas including vulnerability management, identity and access management, cloud security, security operations and supplier assurance.Support Secure SDLC and broader security transformation initiatives.Provide vCISO / outsourced security management support where required.Design and facilitate client workshops, discovery sessions and stakeholder interviews.Translate technical security issues into clear business risks and practical recommendations.Produce high-quality, client-ready reports, assessments, roadmaps and presentations.Manage multiple client engagements and priorities simultaneously while maintaining a high standard of delivery.Client & Stakeholder ManagementBuild strong relationships with clients and become a trusted security adviser.Communicate confidently with technical teams, operational stakeholders and senior management.Take ownership of client conversations and engagements as your experience develops.Who We Are Looking For4-6 years' experience working in information security or cyber security, with some client-facing or consultancy experience.A good understanding of information security governance, risk and technical controls.Practical experience with ISO 27001 and/or other recognised security frameworks.Experience conducting security assessments, gap analyses or risk assessments.The ability to understand a client's business and provide pragmatic, proportionate security advice.Strong written and verbal communication skills, with the ability to explain complex security concepts clearly to both technical and non-technical audiences.Experience producing professional, client-ready reports and recommendations.Knowledge or experience in areas such as the following would be beneficial:ISO 27001 / ISO 27005NIST CSFCIS ControlsSOC 2NIS2 / DORARisk management and governanceSecurity operations and monitoringIncident responseVulnerability managementCloud security, particularly Microsoft Azure and Microsoft 365This is a UK-based role and applicants must have the full and permanent right to work in the UK."Apply Now" for immediate review!Cyber Security Consultant, Security Consultant, Cyber Security Consultant, Cyber Security, Cyber Security Consultant, 27001, Cyber Security Consultant, SOCCircle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter - @Circle_Rec and LinkedIn - Circle Recruitment.

Cyber Security Consultant (Delivery Focus)Join a growing cyber security consultancy that helps organisations strengthen their security posture, manage risk, and navigate an increasingly complex threat landscape. This is a client-facing role where you'll play a key part in delivering trusted advice, leading engagements, and shaping long-term security strategies.Role Overview:Location: Central London/Hybrid (2 days per week on site)Package: £40,000- £50,000pa & BenefitsIndustry: Cyber Security ConsultingWhat You’ll Be Doing:Lead the delivery of cyber security consultancy projects across a diverse client base.Conduct cyber maturity assessments, risk reviews, and gap analyses to identify areas for improvement.Advise organisations on governance, risk management, compliance, and security best practice.Develop practical security roadmaps and recommendations aligned to business objectives.Support clients with certification and compliance initiatives, including recognised industry frameworks and standards.Review and enhance security policies, processes, and controls.Facilitate workshops, stakeholder meetings, and executive-level discussions.Provide guidance on security architecture, cloud security, and secure design principles.Assist with vulnerability management programmes and remediation planning.Evaluate third-party security risks and supplier assurance processes.Contribute to cyber resilience and incident preparedness initiatives.Support business development activities, proposals, and client presentations.Build strong client relationships and identify opportunities for additional consultancy services.Mentor junior consultants and contribute to the ongoing development of the wider team.Main Skills Needed:Proven experience within a consultancy or MSP environment.Minimum of 3 years experience in Project Management with a background delivering on Cyber Security projects to external clients.Strong understanding of cyber security frameworks and standards such as ISO 27001, NIST, CIS Controls, and Cyber Essentials.Experience delivering consultancy engagements directly to clients.Knowledge of risk assessment methodologies and security maturity reviews.Excellent stakeholder management and communication skills.Ability to translate complex technical concepts into clear business-focused recommendations.Strong report writing, presentation, and documentation skills.Solid project management and organisational abilities.Exposure to cloud security, security architecture, vulnerability management, or security operations environments.Relevant industry certifications such as CISSP, CISM, CRISC, ISO 27001, Microsoft Security, GIAC, or similar would be advantageous.What’s in It for You:Competitive salary and performance-related incentives.Private healthcare, healthcare cash plan, life insurance, and pension scheme.Structured learning and development pathways.Ongoing training and professional certification support.Clear opportunities for career progression within a growing consultancy practice.Flexible working arrangements that support work-life balance.A collaborative environment where knowledge sharing and professional growth are actively encouraged.The chance to work on varied and meaningful cyber security challenges across multiple sectors.Curious? Apply now or grab five minutes with us to hear more.We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.By applying you are confirming you are happy to be added to the Addition Solutions mailing list regarding future suitable positions. You can opt out of this at any time simply by contacting one of our consultants.