Senior Cyber Security Consultant Supply Chain Security Consultancy

Hybrid Working from one of our Regional Centres

Active SC Clearance required

Cyber GSeC

The Government Security Centre for Cyber (Cyber GSeC) develops and provides, consultancy and advice services to government departments to build their cyber security resilience, and the cyber security posture across HMG. We work directly in support of the Government Cyber Security Strategy (GCSS).

The Cyber GSeC is hosted by, and sits with HMRC Security, which is part of the Chief Digital and Information Officer (CDIO) area of HMRC. Though the GSeC sits within these functions, it is a distinct entity that is separate from the day-to-day HMRC security function.

The Team

As a Senior Cyber Security Professional carrying out service delivery within Cyber GSeC, you will play a key role in improving the cyber security posture of His Majesty’s Government. Championing the outcomes of the Government Cyber Security Strategy you will oversee the design, implementation, uptake, and continued improvement of Cyber Security best practice and Cyber GSeC services that provide tangible improvement to the cyber security of Lead Government Departments and their underlying ALBs. You may also be required to contribute to other outcomes of HMRC’s Cyber Security Technical Services function.

You will be assigned to one of our technical services, delivering against dedicated milestones. You will be confident in your ability to engage at senior levels across the UK security community and will be expected to be involved in our engagement with a wide range of key stakeholders that may include the Government Security Group (GSG) and National Cyber Security Centre (NCSC).

The core element of the Senior Cyber Security Professional role will be to provide targeted, expert and risk-based technical security advice and guidance across the breadth of HM Government. The successful candidate will be able to evidence their technical skills and experience in cyber security fields relevant to the services we deliver.

Responsibilities can include:

• Delivering outcomes against one of our service lines or projects in support of the Government Cyber Security Strategy (GCSS).
• The development, implementation, delivery, and continuous improvement of Cyber GSeC advice and guidance services across circa 400 government organisations, ensuring alignment to relevant cyber security standards and architectural requirements.
• Selecting suitable security techniques, tools, and test strategies to confirm compliance with relevant HMG security standards, providing suggested remediation actions.
• Leading the development of Security Principles, Policies and Technical Standards aligned to business context and risk appetites and curating communication campaigns for a wide range of stakeholders to encourage an improved cyber security stance and the uptake of Cyber GSeC services.
• Supporting the delivery of balanced and efficient cyber security risk management decisions, identifying vulnerabilities and resolutions in sophisticated technical environments.
• Recognising when security measures impact on users or business needs, providing targeted and expert advice to inform business decision making, and handle partner concerns.
• Identifying, raising, and advancing cyber risks in keeping with HMG risk appetite and delivering effective cyber services from our catalogue.
• Research, identify, validate, and lead the adoption of new technologies and methodologies and engage with and contribute to a wider security technology and tooling strategy providing direction to the organisation and HMG.

The Role

Cyber GSeC, acting on behalf of the Government Security Group (GSG) is leading the development of a new cross-government service to strengthen supply-chain security and supplier assurance frameworks. This initiative is a key component of the Government Cyber Security Strategy and aims to address systemic risks across government procurement and supplier ecosystems.

We are seeking a Senior Cyber Security Professional to provide subject matter expertise in supply-chain security and play a central role in shaping and delivering this new capability. The role will focus on developing comprehensive methodologies for supply-chain risk assessment, supplier security evaluation and procurement security guidance all aligned with government policy and standards.

The supply-chain security landscape presents complex challenges, including multi-tier supplier relationships, diverse risk profiles and an evolving threat environment. This role will help address critical capability gaps across contracts, suppliers and goods and services reviews, supporting departments in building robust assurance processes and effective risk management frameworks.

Key deliverables will include the creation of artefacts such as guidance documents, risk assessment templates, supplier evaluation frameworks, procurement security requirements and procedures for ongoing supplier monitoring. The role will also involve developing training materials and best practice guidance tailored for government procurement teams.

You will work closely with senior stakeholders across government, including National Technical Authorities, third-party service providers, supplier organisations and departmental leads. This engagement will ensure alignment with government policy, industry best practice and the effective transfer of knowledge across the public sector.

Essential Criteria

At application and interview, you must demonstrate extensive experience of:

• Minimum 5 years’ experience working as a Cyber Security Consultant or IT Security Consultant.
• Demonstrate extensive senior stakeholder management across partner organisations, clients, and suppliers, using strong communication skills to communicate effectively at all levels to technical and non-technical audiences.
• Security and privacy risks and associated threats with a solid understanding of key considerations such as confidentiality, integrity, availability, non-repudiation, and privacy.
• Successful delivery of security aspects of major projects, demonstrating professional credibility and authority.
• Crafting and conveying information security and risk management guidance aligned to corporate risk appetite across several enterprises.
• Working with leading standards such as NIST, ISO, CIS, and Cyber Essentials
• Extensive experience consulting on security assurance and conducting audits

Please ensure your CV clearly demonstrates how you meet this essential criteria.

Desirable Qualifications

It is desirable that candidates hold some relevant qualifications.

Relevant IT Security qualifications include (but are not limited to):

• NCSC Certified Cyber Professional (CCP)
• Certified Information System Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• Certified Information Security Manager (CISM)

Please note that SC Clearance is required for this position.