Senior Cyber Risk & Compliance Consultant

About the role

Fsp is seeking a highly skilled Senior Cyber Risk & Compliance Consultant to join our dynamic team. This position is ideal for professionals who are passionate about cybersecurity and compliance, and who have a proven track record in managing cyber risk within organizations. The successful candidate will play a critical role in helping our clients navigate the complex landscape of regulatory requirements and cybersecurity threats. This role can be based in either Glasgow or Reading, Berkshire, offering flexibility and the opportunity to work in a vibrant environment.

Key facts

What you'll do

• Lead comprehensive risk assessments to identify vulnerabilities in clients' cybersecurity frameworks and compliance processes.
• Develop and implement tailored risk management strategies that align with industry standards and regulatory requirements.
• Collaborate with cross-functional teams to ensure that cybersecurity policies and procedures are effectively communicated and enforced across the organization.
• Provide expert guidance on compliance with relevant laws and regulations, including GDPR, PCI-DSS, and ISO 27001.
• Conduct regular audits and assessments to evaluate the effectiveness of existing cybersecurity measures and compliance initiatives.
• Prepare detailed reports and presentations for stakeholders, summarizing findings and recommending actionable improvements.
• Stay current with emerging cybersecurity threats and compliance trends, ensuring that clients are informed and prepared.
• Mentor and train junior staff on best practices in cyber risk management and compliance, fostering a culture of security awareness within the organization.
• Engage with clients to understand their unique business needs and tailor solutions that enhance their cybersecurity posture.
• Participate in incident response planning and execution, helping clients to effectively manage and mitigate security breaches.
• Build and maintain strong relationships with clients, acting as a trusted advisor on all matters related to cyber risk and compliance.
• Contribute to the development of thought leadership content, showcasing Fsp's expertise in the field of cybersecurity and compliance.

Requirements

• A minimum of 5 years of experience in cybersecurity, risk management, or compliance roles, preferably within a consulting environment.
• Strong understanding of cybersecurity frameworks and standards, such as NIST, ISO 27001, and CIS Controls.
• Proven experience in conducting risk assessments and developing risk mitigation strategies.
• Familiarity with regulatory requirements, including GDPR, PCI-DSS, and other relevant compliance frameworks.
• Excellent analytical and problem-solving skills, with the ability to interpret complex data and make informed decisions.
• Strong communication skills, both written and verbal, with the ability to present findings to diverse audiences.
• Relevant certifications such as CISSP, CISM, or CISA are highly desirable.
• Experience with security tools and technologies, including SIEM, vulnerability management, and incident response solutions.
• Ability to work independently and manage multiple projects simultaneously in a fast-paced environment.

Nice to have

• Experience in specific industry sectors such as finance, healthcare, or technology.
• Knowledge of cloud security principles and practices, particularly in AWS or Azure environments.
• Familiarity with data privacy laws and regulations beyond GDPR, such as CCPA or HIPAA.
• Previous experience in a client-facing role, demonstrating strong relationship management skills.

Skills & tools

• Proficiency in risk assessment tools and methodologies.
• Familiarity with security information and event management (SIEM) systems.
• Knowledge of vulnerability assessment and penetration testing tools.
• Understanding of incident response frameworks and best practices.
• Strong project management skills, with the ability to lead initiatives from conception to execution.

Practical notes

• This position may require occasional travel to client sites, depending on project needs.
• The role may involve working outside of standard hours during critical incidents or project deadlines.
• Candidates must be eligible to work in the UK and may require sponsorship for a work visa, depending on their current status.

Fsp is committed to fostering a diverse and inclusive workplace. We encourage applications from all qualified individuals, regardless of background or identity. If you are ready to take the next step in your career and make a significant impact in the field of cybersecurity and compliance, we invite you to apply for this exciting opportunity.