Principal Cyber Security Consultant - Critical National Infrastructure (CNI)

Qodea
London, England
10 months ago
Applications closed

Related Jobs

View all jobs

Principal Security Consultant

Experis Corsham, Wiltshire, SN13 0HB, United Kingdom
£70,000 – £80,000 pa Hybrid Clearance Required

Principal Architect - NetSec

Palo Alto Networks London, United Kingdom

Operational Technology Risk Manager

MBDA Middle Hulton, Manchester, BL5 1FJ, United Kingdom
£60,000 pa Hybrid Clearance Required

Operational Technology Risk Manager

MBDA Manchester, United Kingdom
£60,000 pa

Principal Cyber Security Engineer

Hays Technology London, City And County Of the City Of London, United Kingdom
£70,000 – £75,000 pa

Sr. Knowledge Engineer , Europe)

CrowdStrike London, SE10 0TW, United Kingdom
Remote
Posted
9 Jul 2025 (10 months ago)

Qodea is Europe’s largest Google Cloud specialist partner and a leading cloud consultancy with offices in the UK, Netherlands and Romania. This role is working for tmc3 who is part of the Qodea group of companies.

tmc3 is a cyber security consultancy that helps organisations of all sizes protect, comply and thrive in the digital era. Our leadership team founded tmc3 with a shared goal of making data protection and cyber security a business enabler. We strive for passion, collaboration, and perseverance to ensure the best outcomes for our customers and partners every time.

We are looking for a Principal Cyber Security Consultant to play a key role to our success within the Critical National Infrastructure (CNI) sector, focusing on the successful delivery of projects and identifying opportunities to partner with organisations in this space.

Please note:There would be a requirement for the role holder to undergo SC Clearance. We are unable to consider candidates who are unable to obtain SC level clearance.

How You'll Shape Our Success

We are looking for a leader with enviable consulting experience helping public sector organisations with complex cyber security challenges. As a Principal Consultant, you will be a key member of the tmc3 team, developing new business and strong customer relationships while leading and delivering great work.

With one foot in the delivery, one foot in the strategic and a leading proposition development, this role is highly varied and calls for someone who is autonomous and a self-starter.

With a range of customers across the public sector, we’ll offer you fascinating work, excellent opportunities for growth and the freedom to realise your potential. Combining strategies, technologies and innovation, we make cyber security a business enabler, delivering enduring results and enabling you to build a successful and rewarding career.

To do this, we would expect you to have strong contacts in relevant sectors and be passionate about leveraging your network and your technical knowledge to meet customer’s needs. This is an exciting chance to drive cyber security change through helping customer organisations navigate this ever-changing space.

What You’ll Do:

  • Build and manage excellent networks and customer relationships (typically at CIO, CTO, COO, CISO or Head of Technology level) across a range of organisations within the public sector.
  • Take accountability for the delivery of cyber security engagements and leading multiple engagements on a day to day basis.
  • Be a trusted and respected leader. Building and running a highly effective team that delivers customer outcomes and develops the team and individuals.
  • Introduce systems, processes and experience to improve delivery output.
  • Support business development initiatives and produce compelling consultancy propositions for public sector opportunities.
  • Draw on your sector network and take responsibility for initiating, leading and winning new business.
  • Develop and maintain industry awareness and best practices, relating to legislation & regulations, emerging threats, areas of operation and technology, surrounding Information Security and Data Protection; and compete in knowledge transfer activities.
  • Offer advice and guidance on Information Security and Data Protection, to employees at all levels, to safeguard the confidentiality, integrity and availability of client and business information.

Core Responsibilities

  • Build and manage excellent networks and customer relationships (typically at CIO, CTO, COO, CISO or Head of Technology level) across a range of organisations within the public sector.
  • Take accountability for the delivery of cyber security engagements and leading multiple engagements on a day to day basis.
  • Be a trusted and respected leader. Building and running a highly effective team that delivers customer outcomes and develops the team and individuals.
  • Introduce systems, processes and experience to improve delivery output.
  • Support business development initiatives and produce compelling consultancy propositions for public sector opportunities.
  • Draw on your sector network and take responsibility for initiating, leading and winning new business.
  • Produce thought-provoking pieces to raise the profile of tmc3 in the sector
  • Lead, engage and motivate the Information Security team to execute customer delivery objectives.
  • Build the capability of the team by providing subject matter expertise, support and coaching.
  • Develop and maintain industry awareness and best practices, relating to legislation & regulations, emerging threats, areas of operation and technology, surrounding Information Security and Data Protection; and compete in knowledge transfer activities.
  • Offer advice and guidance on Information Security and Data Protection, to employees at all levels, to safeguard the confidentiality, integrity and availability of client and business information.

What You’ll Need to Succeed

  • Proven experience delivering major cyber security or digital transformation programmes within Critical National Infrastructure (CNI), ideally across energy generation, utilities, or similar regulated sectors.
  • Strong understanding of Operational Technology (OT) environments, with hands-on experience in securing and modernising legacy systems, including DCS, SCADA, and ICS, aligned to NCSC CAF, IEC 62443, and NIST 800-82.
  • Direct experience supporting Ofgem regulatory reporting and compliance, including preparation of ISSA returns, evidence packs, and action tracking in line with NIS Regulations and sector-specific cyber expectations.
  • Demonstrated ability to lead complex programme delivery, including resource prioritisation, mobilisation of multidisciplinary teams, and effective engagement with business, technical, and regulatory stakeholders.
  • Skilled in operating at both strategic and delivery levels, with a track record of aligning cyber and digital programmes to broader organisational goals, risk appetites, and performance outcomes.
  • Competitive Market Salary
  • Annual and referral bonus schemes
  • 25 days holiday (increasing after time)
  • Remote working
  • Flexible Working (around core office hours)
  • Company Pension
  • Dedicated training and development budget
  • Professional membership budget
  • Home office equipment (for remote working employees)
  • Electric Vehicle Scheme
  • Group Life Insurance
  • Private Medical Cover
  • Enhanced Maternity / Paternity
  • Employee discount and rewards platform
  • Vision Care
  • Regular team social events


#J-18808-Ljbffr

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Where to Advertise Cyber Security Jobs in the UK (2026 Guide)

Where to advertise cyber security jobs UK in 2026: the specialist boards, communities and channels that reach offensive, defensive and GRC security talent. The candidate pool is small, heavily vetted and in high demand across government, financial services, critical national infrastructure and the private sector simultaneously. Many of the strongest candidates hold active security clearances, are not actively job-searching through general platforms, and move primarily through specialist networks and trusted referrals. General job boards reach a broad audience but lack the specificity that security professionals expect. Specialist platforms, government-affiliated channels and cleared candidate networks each serve a different part of the market. This guide, published by CybersecurityJobs.tech, covers where to advertise cyber security roles in the UK in 2026, how the main platforms compare, what employers should expect to pay, and what the data says about hiring across different role types.

Cyber Security Jobs UK 2026: What to Expect Over the Next 3 Years

Cyber Security Jobs UK 2026: roles, salaries and the threat intelligence, cloud security and zero-trust hiring trends shaping UK cyber careers. Cyber security is one of the few sectors where demand for talent has never once dipped. Every major technological shift of the past decade — cloud migration, remote working, AI adoption, the proliferation of connected devices — has expanded the attack surface that security professionals are expected to defend. And every expansion of that attack surface has generated more jobs. But the cyber security jobs market of 2026 is not simply a larger version of what it was three years ago. It is a structurally different market. The threats have evolved, the technologies used to combat them have changed, the regulatory environment has tightened considerably, and the roles being created reflect all of that. A job seeker who understands only the cyber security landscape of 2023 is already working with an outdated map. The candidates who will thrive over the next three years are those who understand where the sector is heading — which specialisms are attracting the most investment, which technologies are reshaping defensive and offensive security practice, and how the definition of a cyber security professional is broadening well beyond the traditional image of a network defender in a SOC. This article breaks down what the UK cyber security jobs market is likely to look like through to 2028 — covering the titles emerging right now, the technologies driving employer demand, the skills that will matter most, and how to position your career ahead of the curve.

Penetration Tester Jobs in the UK: What Employers Actually Want in 2026

Penetration Tester Jobs UK 2026: the skills, certifications (OSCP, CREST, CEH) and experience UK employers actually want from ethical hackers this year. The demand for skilled professionals in cyber security has never been higher, and penetration testers sit at the very heart of this rapidly evolving industry. As organisations across the UK continue to digitise their operations, protect sensitive data, and defend against increasingly sophisticated threats, the need for ethical hackers has grown dramatically. If you are considering a career in this field—or looking to advance within it—it is essential to understand what employers are really looking for in 2026. This guide breaks down the current expectations, required skills, certifications, and practical experience that can help you stand out in a competitive job market.