Average Security Consultant salary in the UK

Work on Technology That Protects What MattersAt SiXworks, we build secure digital solutions that support Defence and National Security missions. Our teams work on complex problems where reliability, security, and speed of innovation matter.We’re looking for a Security Consultant who enjoys solving difficult technical challenges and wants their work to have real operational impact.What You’ll DoAs a Security Consultant, you’ll help design, build, and deliver secure digital solutions in highly secure environments. You’ll work alongside engineers, architects, and delivery specialists to develop technology that enables faster, safer decision-making for critical operations.Your key responsibilities will include the following:Cyber Risk Management within a Defence and Security Sector.Providing strategic security governance, risk and compliance (GRC) direction of projects.Engagement with relevant stakeholders across the MOD, including project teams, users and policy owners to identify key security objectives and requirements. Work closely with various teams across the business (Software Engineering, DevSecOps Engineering, Infrastructure Engineering, Agile Development, Support) to achieve security outcomes.What We’re Looking ForWe value people who take ownership, think critically, and enjoy working as part of a collaborative team tackling complex challenges. You don’t need to tick every box, but we’re particularly interested in people with skills/experience as described below.Essential experience includes:Experience of working on risk assessments using industry approved methodologies (such as NIST, ISO 27005).Producing clear, actionable risk treatment plans aligned to security objectives to treat /mitigate the identified risks.Experience supporting compliance and assurance activities, including audits, control testing, and evidence gatheringCreation of security documentation to support the development of an information system, these could include: Security Aspects of Design, Risk Assessments, Risk Management Plans, Security Policies, Security Test Plans/Results.Ability to translate technical security risks into business language for senior stakeholders and decision-makersHigh standards in written report and/or design documentation.Desirable experience includes:Knowledge of MOD policies (JSP 440, 453/604, 892).Knowledge and experience of Agile, DevSecOps, CI/CD principles and their application in secure environmentsRelevant certifications (e.g., CISSP, ChCSP, etc)Experience of working with MOD Cyber Assurance/Accreditors.Just as important are curiosity, strong problem solving ability, and the motivation to continuously improve how technology is designed and delivered.About SiXworksSiXworks is a specialist digital innovation partner delivering secure, mission-critical technology to Defence and National Security organisations. We focus on digital experimentation, secure-by-design architecture, cloud technologies, and rapid application development to help our customers move faster and stay ahead of evolving challenges.Our team combines expertise from across technology, business, and operational backgrounds including the armed forces creating a collaborative environment where practical thinking and innovation thrive.Why Join UsOur culture is guided by six principles: Agility, Security, Innovation, Quality, Collaboration and Inclusivity our North Star for how we work. SiXworks is a leading provider of secure digital solutions, specialising in digital experimentation and focused on fail-safe-fast cutting-edge technology solutions deployed in highly secure environments.As an end-to-end digital innovation and delivery partner, we turn complex challenges into mission-critical digital advantages. This is a thrilling time for us, with ambitious plans for growth. We are looking for brilliant, experienced, driven and self-motivated people to join the team on our journey.We offer competitive salaries and a package that supports your wellbeing and development, including 25 days annual leave + bank holidays, free Private Medical cover and Life Assurance, Generous pension (10% employer, 5% employee contribution), Bonus and Professional development and training support. In addition to secure parking, gym, café & restaurant on site and lots of open break out spaces.A word on UK Security ClearanceDue to the secure nature of the position and working environment, you must have or be eligible to obtain Security Clearance. More details relating to UK Security Clearance can be found on the GOV UK website.Interested?Please apply!

Job Title: Cyber Security SpecialistLocation: DoncasterSalary: £70,000 - £75,000 per yearJob Type: Full Time, 12 Month Fixed Term ContractAt DB Cargo UK, we keep the UK moving. As the UK's leading rail freight operator, we provide safe, reliable and sustainable rail logistics services that support businesses, communities and the wider economy. We are investing in our technology, resilience and cyber security capability and are looking for an experienced Cyber Security Specialist to join us on a 12 month fixed term contract.This is a key role within our IT Governance & Security function. Acting as DB Cargo UK's cyber security subject matter expert, you will lead cyber security governance, operations, compliance and resilience activities across a diverse portfolio of business-critical applications, cloud services and operational railway systems. You will help ensure cyber security enables business performance, supports innovation and protects our people, customers and operations.Please note that successful candidates will need to go through national security vetting.What You Will Be Doing:Lead and continually improve cyber security governance, risk, compliance and resilience activities across the organisation.Own and maintain the Information Security Management System (ISMS), policies, standards and governance processes.Lead compliance with NIS Regulations, GDPR and DB Group security requirements.Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management.Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities.Provide governance across Azure, AWS, Microsoft 365, Entra ID and Intune environments.Lead information protection, DLP, retention, eDiscovery and security assurance activities.Support customer assurance, procurement reviews, supplier risk assessments and tender submissions.Provide cyber security leadership for ERTMS and ETCS transformation programmes.Deliver cyber awareness initiatives and senior leadership reporting.What We Are Looking For:Demonstrable experience in cyber security, information security or IT risk management.Experience of security operations, incident response and security monitoring.Knowledge of governance, risk management, compliance frameworks and assurance processes.Experience securing cloud, endpoint and identity platforms, ideally within Microsoft environments.Excellent stakeholder engagement and communication skills.Ability to balance security, operational requirements and commercial priorities.Degree in IT, Cyber Security or a related field is desirable.CISSP, CISM, ISO27001 or Microsoft Security certifications are advantageous.Why Join Us?You will have the opportunity to shape cyber security strategy and influence decision making across a critical national infrastructure organisation. We are looking for someone who combines strong technical expertise with sound commercial awareness, recognising that the best cyber security solutions protect people, support operational delivery and enable long-term business success.What's In It For You?Defined Contribution Pension Scheme with employer contributions of up to 10%.Health Cash Plan Scheme.Employee Benefits Portal with discounts across a wide range of retailers and services.Annual Leave Purchase Scheme.Cycle to Work Scheme.Charge & Go EV Vehicle Scheme.Employee Recognition Programme.Access to learning, development and career progression opportunities.Our Commitment:DB Cargo UK is committed to creating an inclusive workplace where everyone is valued, respected and able to thrive. We welcome applications from candidates of all backgrounds and are committed to building a diverse workforce that reflects the communities we serve.Please click APPLY to send your CV for this role.Candidates with experience of: Cyber Security Specialist, Cybersecurity Specialist, Information Security Specialist, Cyber Security Analyst, Senior Cyber Security Analyst, Information Security Analyst, Senior Information Security Analyst, Cyber Security Engineer, Information Security Engineer, Cyber Security Consultant, Information Security Consultant, Cyber Security Manager, Information Security Manager, Cyber Security Governance Specialist, Information Security Governance Analyst, Cyber Security Risk Analyst, may also be considered for this role.

Cyber Security ConsultantSalary: £50,000 - £70,000 + benefits Fully Remote | UK-based | Occasional Client TravelAbout the RoleAn exciting opportunity for a Cyber Security Consultant to join a growing, specialist cyber security consultancy focused on helping organisations build better, more practical security.This isn't your traditional Big Four-style consultancy. The business works predominantly with ambitious SME and high-growth organisations, giving clients pragmatic, commercially focused security advice without unnecessary layers of process or bureaucracy.This role sits within the Cyber Security Consulting team, working directly with clients to understand their challenges, identify and manage risk, and help them actually get things done.The demand for cyber security consulting is growing rapidly, and the business is at an exciting stage of expansion. There is plenty of opportunity to make an impact, take ownership and help shape how the consulting practice develops.Most importantly, personality matters. We're looking for someone who is curious, proactive and genuinely enjoys working with people. Someone who doesn't need to be told what to do at every step, is happy to roll their sleeves up and get stuck in, and wants to build something rather than simply occupy a role.Key ResponsibilitiesAs a Cyber Security Consultant, you will work across a range of client engagements, providing practical security advice across governance, risk, compliance and technical security.You will have the opportunity to work at both a strategic and operational level, depending on the needs of the client, and will increasingly take ownership of engagements and client relationships.Responsibilities will include:Client DeliveryDeliver cyber security consultancy engagements across a range of clients, from growing SMEs through to larger organisations.Conduct cyber security maturity assessments, gap analyses and risk assessments.Develop practical, prioritised remediation plans and security roadmaps.Support clients with ISO 27001 implementation, maintenance and audit preparation.Advise clients against recognised frameworks including ISO 27001, NIST CSF and CIS Controls, as well as supporting SOC 2 and other compliance requirements.Develop and improve security policies, procedures and governance frameworks.Establish and maintain risk registers and support security governance forums.Support incident response planning, tabletop exercises and crisis management activities.Provide advice across areas including vulnerability management, identity and access management, cloud security, security operations and supplier assurance.Support Secure SDLC and broader security transformation initiatives.Provide vCISO / outsourced security management support where required.Design and facilitate client workshops, discovery sessions and stakeholder interviews.Translate technical security issues into clear business risks and practical recommendations.Produce high-quality, client-ready reports, assessments, roadmaps and presentations.Manage multiple client engagements and priorities simultaneously while maintaining a high standard of delivery.Client & Stakeholder ManagementBuild strong relationships with clients and become a trusted security adviser.Communicate confidently with technical teams, operational stakeholders and senior management.Take ownership of client conversations and engagements as your experience develops.Who We Are Looking For4-6 years' experience working in information security or cyber security, with some client-facing or consultancy experience.A good understanding of information security governance, risk and technical controls.Practical experience with ISO 27001 and/or other recognised security frameworks.Experience conducting security assessments, gap analyses or risk assessments.The ability to understand a client's business and provide pragmatic, proportionate security advice.Strong written and verbal communication skills, with the ability to explain complex security concepts clearly to both technical and non-technical audiences.Experience producing professional, client-ready reports and recommendations.Knowledge or experience in areas such as the following would be beneficial:ISO 27001 / ISO 27005NIST CSFCIS ControlsSOC 2NIS2 / DORARisk management and governanceSecurity operations and monitoringIncident responseVulnerability managementCloud security, particularly Microsoft Azure and Microsoft 365This is a UK-based role and applicants must have the full and permanent right to work in the UK."Apply Now" for immediate review!Cyber Security Consultant, Security Consultant, Cyber Security Consultant, Cyber Security, Cyber Security Consultant, 27001, Cyber Security Consultant, SOCCircle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter - @Circle_Rec and LinkedIn - Circle Recruitment.