Actica Consulting

Independent ICT consultancy for public sector

Senior Cyber Security Consultant - Defence

Security Governance, Risk & ComplianceUpdated on Nov 13

Full-timeGloucestershire, UKNo salary listedHybrid

About the Job

Requirements

Experience delivering cyber security, information assurance, technical consulting, or ICT services within complex environments.
Practical experience conducting cyber risk assessments and providing security assurance.
Strong understanding of enterprise ICT, cloud technologies, and modern digital architectures.
Experience applying Secure by Design principles throughout project and system lifecycles.
Ability to communicate complex security concepts clearly to technical and non-technical stakeholders.
Strong report-writing, documentation, and presentation skills.
Proven ability to deliver high-quality outcomes aligned with client requirements and business objectives.
Must be eligible and willing to obtain UK Government Security Clearance.
Strong stakeholder engagement and relationship-building skills.
Ability to influence and communicate effectively across all organisational levels.
Collaborative and inclusive approach to problem solving.
Adaptability and resilience within complex and evolving environments.
Proactive mindset with strong analytical and critical-thinking capabilities.
Commitment to continuous professional development and learning.

Responsibilities

Provide cyber security and Secure by Design expertise to complex Defence acquisition programmes, digital transformation initiatives, and Agile delivery teams.
Conduct cyber risk assessments and security risk analysis for systems handling sensitive or classified information.
Advise risk owners, programme leadership, and technical stakeholders on cyber threats, vulnerabilities, impacts, and risk treatment strategies.
Develop, review, and maintain security assurance artefacts in line with Defence, Government, and industry assurance frameworks.
Support security accreditation and assurance activities across the system development and operational lifecycle.
Assess and review security architectures to ensure Defence and Government security requirements are met.
Apply security-by-design principles across cloud, enterprise, and operational technology environments.
Define and scope security testing activities and communicate findings, remediation strategies, and residual risks to stakeholders.
Support governance, risk, and compliance activities within secure and regulated environments.
Depending on experience, lead consultancy engagements and workstreams.
Depending on experience, mentor and support the development of colleagues.
Depending on experience, act as a trusted adviser to senior client stakeholders.
Depending on experience, contribute to business development and the growth of Actica's Defence cyber security capability.
Work across Defence, government, and critical national infrastructure clients, independently or as part of a multidisciplinary team.
Travel for project work, including occasional overnight stays during the working week, where required.

Desired Qualifications

Experience supporting UK Defence, MOD, national security, government, or critical national infrastructure organisations.
Knowledge of Defence security policies, assurance approaches, and risk management methodologies.
Experience contributing to security assurance and accreditation activities for secure systems.
Familiarity with classified or sensitive environments and associated security controls.
Understanding of Defence procurement and capability delivery programmes.
Knowledge of government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001, and NIST.
Knowledge of risk management methodologies and security assurance frameworks.
Knowledge of enterprise and security architecture approaches including TOGAF and SABSA.
Knowledge of cloud security and secure digital transformation programmes.
Knowledge of security operations, vulnerability management, and incident response.
Knowledge of secure software development and DevSecOps practices.
Knowledge of ICT service management approaches including ITIL.

At Actica, our Cyber Security Consultants play a critical role in supporting Defence, national security, government and critical national infrastructure organisations and protecting some of the UK's most sensitive and mission-critical systems.

Working across complex Defence and MOD programmes, you will help clients embed Secure by Design principles, manage cyber risk, and deliver proportionate security assurance throughout the system lifecycle. Your expertise will support organisations operating in highly security-conscious environments where resilience, assurance and risk-informed decision making are paramount.

As a National Cyber Security Centre (NCSC) Assured Cyber Security Consultancy, we work on programmes that contribute directly to the UK's defence and security outcomes.

Location: Southwest England - Three Counties Region - Gloucestershire and surrounding areas (hybrid working and client-site engagement required)

Working independently or as part of a multi-disciplinary Actica team, you will deliver consultancy assignments across Defence, government and critical national infrastructure clients.

Responsibilities may include:

Providing cyber security and Secure by Design expertise to complex Defence acquisition programmes, digital transformation initiatives and Agile delivery teams.
Conducting cyber risk assessments and security risk analysis for systems handling sensitive or classified information.
Advising risk owners, programme leadership and technical stakeholders on cyber threats, vulnerabilities, impacts and risk treatment strategies.
Developing, reviewing and maintaining security assurance artefacts in line with Defence, Government and industry assurance frameworks.
Supporting security accreditation and assurance activities across the system development and operational lifecycle.
Assessing and reviewing security architectures to ensure Defence and Government security requirements are met.
Applying security-by-design principles across cloud, enterprise and operational technology environments.
Defining and scoping security testing activities and communicating findings, remediation strategies and residual risks to stakeholders.
Supporting governance, risk and compliance activities within secure and regulated environments.

Depending on experience, you may:

Lead consultancy engagements and workstreams.
Mentor and support the development of colleagues.
Act as a trusted adviser to senior client stakeholders.
Contribute to business development and the growth of Actica's Defence cyber security capability.

Essential

Experience delivering cyber security, information assurance, technical consulting or ICT services within complex environments.
Practical experience conducting cyber risk assessments and providing security assurance.
Strong understanding of enterprise ICT, cloud technologies and modern digital architectures.
Experience applying Secure by Design principles throughout project and system lifecycles.
Ability to communicate complex security concepts clearly to both technical and non-technical stakeholders.
Strong report writing, documentation and presentation skills.
Proven ability to deliver high-quality outcomes aligned to client requirements and business objectives.

Desirable

Experience supporting UK Defence, MOD, national security, government or critical national infrastructure organisations.
Knowledge of Defence security policies, assurance approaches and risk management methodologies.
Experience contributing to security assurance and accreditation activities for secure systems.
Familiarity with classified or sensitive environments and associated security controls.
Understanding of Defence procurement and capability delivery programmes.

Beneficial Knowledge

Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST.
Risk management methodologies and security assurance frameworks.
Enterprise and security architecture approaches including TOGAF and SABSA.
Cloud security and secure digital transformation programmes.
Security operations, vulnerability management and incident response.
Secure software development and DevSecOps practices.
ICT service management approaches including ITIL.

Additional Requirements

Must be eligible and willing to obtain UK Government Security Clearance. Find out more information about the Security Clearance (SC) process and requirements here.

Key Attributes for Success

We welcome applications from people with diverse backgrounds and experiences. Successful candidates are likely to demonstrate:

Strong stakeholder engagement and relationship-building skills.
The ability to influence and communicate effectively across all organisational levels.
A collaborative and inclusive approach to problem solving.
Adaptability and resilience within complex and evolving environments.
A proactive mindset with strong analytical and critical-thinking capabilities.
Commitment to continuous professional development and learning.

Working Arrangements

Hybrid working model with flexibility to work from home, client sites and Actica offices.
Typical working patterns may involve a combination of remote working and client-site engagement.
Some assignments may require more regular on-site attendance due to security, operational or programme requirements.
Projects may involve travel and occasional overnight stays during the working week.
Collaborative team environment with opportunities to contribute to internal innovation, capability development and knowledge sharing.

Career Development

Actica provides an exceptional environment for cyber security professionals seeking to develop expertise within Defence and secure government environments.

You will have opportunities to build specialist knowledge in Secure by Design, security assurance, cyber risk management and Defence security governance while working on nationally significant programmes.

We support professional development through mentoring, structured career pathways and industry-recognised certifications including:

CISSP
CISMP
CREST Certifications
ISO 27001 Lead Implementer/Auditor
SABSA
TOGAF
NIST Programmes
UK Cyber Security Council Professional Registration

Each consultant is supported by a dedicated Mentor and Performance & Development Manager to help achieve individual career goals.

Our Commitment to Diversity, Equity and Inclusion

At Actica, we believe diverse perspectives strengthen our teams and improve outcomes for our clients. We are committed to creating an inclusive workplace where everyone is treated with respect and has the opportunity to thrive.

We welcome applications from all suitably qualified candidates and make employment decisions based on skills, experience, potential and business requirements. We are committed to providing an inclusive recruitment process and accessible working environment for all.

About the Company

Actica Consulting

Independent ICT consultancy for public sector

Actica Consulting provides technical and management consulting to help public-sector organizations use ICT to meet their business goals. They combine deep technical expertise with process transformation to deliver measurable business benefits. They differentiate themselves through independence from software and hardware vendors, a strong public-sector focus, and a collaborative, value-driven approach that tailors solutions to client needs. Their goal is to help clients achieve better outcomes by leveraging ICT within budget and organizational constraints.

Company size: 201-500
Company stage: Not listed
Total funding: Not listed
Headquarters: Guildford, United Kingdom
Founded: 1998

Recently Posted Jobs

Explore more opportunities at Actica Consulting

See more jobs