At least 5 years of experience in cyber or information security, including consultancy, vCISO, or senior security roles.
Strong knowledge of security frameworks including ISO 27001, Cyber Essentials, IASME, NIST, or equivalent.
Experience developing and managing information security management systems, policies, risk registers, and compliance programmes.
Solid understanding of security technologies including firewalls, endpoint security, vulnerability management, identity and access management, and email security.
Ability to present confidently to boards, executives, and senior stakeholders.
Strong communication, report writing, and stakeholder management skills.
Ability to manage multiple client engagements in an organised and self-motivated manner.
Responsibilities
Act as the lead virtual chief information security officer for a portfolio of clients, owning delivery and client relationships.
Lead security governance, risk, and compliance activities aligned to frameworks such as ISO 27001, Cyber Essentials, IASME Cyber Assurance, and NIST.
Conduct security risk assessments, gap analyses, and compliance reviews.
Develop and maintain client information security management system documentation, policies, and procedures.
Deliver board and executive-level reporting, translating technical risks into business-focused recommendations.
Provide oversight of technical security controls, vulnerability management, access control, and incident readiness.
Facilitate security awareness training, tabletop exercises, and incident response planning.
Support client audits, certification programmes, supplier assurance activities, and regulatory requirements.
Mentor junior consultants and contribute to the ongoing development of the company's security services.
Desired Qualifications
CISSP, CISM, CISA, ISO 27001 Lead Implementer/Auditor, or similar certifications.
Experience within regulated industries, financial services, managed service providers, or managed security service providers.
Knowledge of GDPR, business continuity, disaster recovery, and third-party risk management.
Experience delivering security awareness training and incident response exercises.
Zensec provides virtual CISO (vCISO) and information security consultancy services to organisations across the Channel Islands and beyond. We help clients strengthen their security posture through governance, risk management, compliance, technical assurance, and executive-level security leadership.
The Role We're looking for an experienced Information Security Consultant to act as the vCISO lead across a portfolio of client engagements. You'll be a trusted advisor to senior stakeholders, driving security strategy, managing compliance programmes, overseeing risk management activities, and delivering board-level reporting. This is a highly client-facing role that combines strategic consultancy with hands-on security assurance, offering the opportunity to make a genuine impact across a diverse range of organisations.
Responsibilities
Act as the lead vCISO for a portfolio of clients, owning delivery and client relationships.
Lead security governance, risk, and compliance activities aligned to frameworks such as ISO 27001, Cyber Essentials, IASME Cyber Assurance, and NIST.
Conduct security risk assessments, gap analyses, and compliance reviews.
Develop and maintain client ISMS documentation, policies, and procedures.
Deliver board and executive-level reporting, translating technical risks into business-focused recommendations.
Provide oversight of technical security controls, vulnerability management, access control, and incident readiness.
Facilitate security awareness training, tabletop exercises, and incident response planning.
Support client audits, certification programmes, supplier assurance activities, and regulatory requirements.
Mentor junior consultants and contribute to the ongoing development of Zensec's security services.
Requirements
5+ years' experience in cyber or information security, including consultancy, vCISO, or senior security roles.
Strong knowledge of security frameworks including ISO 27001, Cyber Essentials, IASME, NIST, or equivalent.
Experience developing and managing ISMS, policies, risk registers, and compliance programmes.
Solid understanding of security technologies including firewalls, endpoint security, vulnerability management, IAM, and email security.
Confident presenting to boards, executives, and senior stakeholders.
Excellent communication, report writing, and stakeholder management skills.
Highly organised, self-motivated, and comfortable managing multiple client engagements.
Desirable
CISSP, CISM, CISA, ISO 27001 Lead Implementer/Auditor, or similar certifications.
Experience within regulated industries, financial services, MSPs, or MSSPs.
Knowledge of GDPR, business continuity, disaster recovery, and third-party risk management.
Experience delivering security awareness training and incident response exercises.
Benefits
Private Medical Insurance
Generous holiday allowance plus your birthday off
Flexible and hybrid working
Enhanced pension contributions
Ongoing training and development
Regular company social events
Why Join Zensec?
Lead meaningful security programmes as a trusted client advisor.
Work directly with boards, executives, and business leaders.
Genuine autonomy and ownership of client relationships.
Ongoing professional development and certification support.
Collaborative and supportive consultancy environment