Deliver hands-on cyber and information security assessments, audits, and control reviews. Identify control weaknesses, articulate risks, and provide pragmatic recommendations aligned to frameworks (ISO27001, NIST, CIS, Cyber Essentials). Produce client-facing reports, support certification audits, collaborate with stakeholders on security control design, and contribute to business development and internal methodology improvements.
As part of our continued growth and increasing demand for cyber and information security services, Moore Kingston Smith is seeking an experienced Cyber Security Consultant to join our Risk Advisory team. You will be part of an NCSC-recognised cyber security practice, operating within our wider business, technology and compliance risk advisory team, helping clients strengthen their cyber resilience and manage evolving security risks.
This is a hands-on consulting role that will see you working with a wide variety of organisations, ranging from scale-ups to established businesses across multiple sectors. Whether clients are just beginning their security journey or enhancing mature programs, you will provide tailored, actionable advice to support their operational resilience and regulatory compliance.
With access to a diverse portfolio of clients, this is an excellent opportunity to deepen your InfoSec expertise and play a meaningful role in helping businesses improve their defences in a fast-evolving threat landscape. We are looking for a proactive well-rounded consultant with strong technical fundamentals, an ability to think critically, and a genuine interest in helping clients succeed.
This is a hands-on consulting role that will see you working with a wide variety of organisations, ranging from scale-ups to established businesses across multiple sectors. Whether clients are just beginning their security journey or enhancing mature programs, you will provide tailored, actionable advice to support their operational resilience and regulatory compliance.
With access to a diverse portfolio of clients, this is an excellent opportunity to deepen your InfoSec expertise and play a meaningful role in helping businesses improve their defences in a fast-evolving threat landscape. We are looking for a proactive well-rounded consultant with strong technical fundamentals, an ability to think critically, and a genuine interest in helping clients succeed.
Key Responsibilities
- Lead and support the delivery of cyber and information security assessments, audits, and control reviews across diverse industries.
- Identify and assess security control weaknesses, articulate associated risks, and provide pragmatic recommendations tailored to client environments.
- Produce high-quality, concise documentation including audit reports, risk assessments, and advisory outputs.
- Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials.
- Maintain up-to-date knowledge of cyber threats, mitigation strategies, regulatory requirements, and industry best practices.
- Contribute to the continuous improvement of internal methodologies and security services.
- Build and maintain strong client relationships with a service-focused mindset.
- Identify client challenges and future needs that may lead to service expansion opportunities.
- Contribute to business development and client growth by supporting proposal creation, project scoping, thought leadership (e.g., blogs, webinars), and collaborating on presentations, tenders, and workshops with senior team members.
- A proactive, client-oriented mindset with a passion for continuous learning and improving security outcomes.
Skills, Knowledge and Expertise
Essential
- Experience within cyber security consulting, security auditing, or risk advisory roles.
- Experience in delivering client-facing cyber risk advisory services.
- Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR.
- Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables.
- Experience planning and delivering engagements independently and as part of a team, within tight timescales, to budget and a high level of quality.
- Competent in working with a range of clients, from SMEs to large enterprise environments.
- Experience preparing, supporting, or auditing certification audits (e.g., ISO 27001, SOC 2, Cyber Essentials)
Desirable
- Industry-recognised certifications such as ISO 27001 Lead Auditor/Implementer, CISSP, CISA, CISM, or similar.
- Exposure to penetration testing, or hands-on vulnerability assessment (even if not a primary role).
- Experience with public cloud platforms (e.g., AWS, Azure, GCP, MS365) and understanding of cloud security principles.
- Experience in Operational Technology (OT) and understanding of SANS standards.
- Familiarity with modern security technology and tools, SIEM, and security automation.
- Hands-on experience in security or IT engineering, including implementing technical controls, hardening systems, securing networks, or supporting secure architecture design.
Benefits
About
At Moore Kingston Smith, we believe in the potential of people to make a positive impact, fuelled by the power of genuine understanding. Working with small, medium and large clients, we are a multi-disciplinary advisory, tax and audit firm with expertise across multiple sectors, uniquely positioned to help people realise their ambitions. Our London and regional teams deliver quality results locally and nationally, and worldwide alongside the Moore Global network. Through respect, collaboration and active listening, understanding is at the heart of everything we do with our clients, colleagues and communities. We value people and projects that promote positive change for the future. Come and join us to make a difference.
Similar Jobs
Artificial Intelligence • Cloud • Information Technology • Cybersecurity
Lead delivery of multiple cyber security consulting engagements, managing teams to perform maturity, gap and risk assessments. Advise on security strategy, governance, compliance (ISO 27001, NIST, CIS, Cyber Essentials, GDPR, DORA), cloud and infrastructure reviews, vulnerability management, and incident preparedness. Support business development, mentor junior staff, assure report quality, and help clients achieve certifications and remediation roadmaps.
Top Skills:
Cis ControlsCloud EnvironmentsCyber EssentialsCyber Essentials PlusDoraGdprIso 27001Nist Cybersecurity FrameworkVulnerability Management
Consulting
Lead and deliver cyber security risk assessment and advisory engagements across EMEA, manage client relationships, line-manage juniors, act as virtual CISO, support crisis response, and contribute to business development and proposals.
Top Skills:
Iso27001It InfrastructureNetwork InfrastructureNist Csf 2.0Nist Sp 800-53Operational Technology (Ot)
Professional Services • Consulting • Financial Services
Deliver hands-on penetration tests across web applications, APIs, and network infrastructure, plus Cyber Essentials Plus and wider technical security reviews. Identify and validate vulnerabilities, explain business risk, and provide remediation. Produce reports, present findings, manage engagement scope, and contribute to advisory work, business development, and continuous improvement of methodologies and tooling.
Top Skills:
Active DirectoryAWSAzureBashBurp SuiteCis BenchmarksCyber Essentials PlusGCPIasmeKali LinuxLinuxMicrosoft 365Microsoft Entra IdMitre Att&CkNessusNmapOwasp Web Security Testing GuidePowershellPtesPythonQualysTcp/IpWindows
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
