National AI Awards 2025Discover AI's trailblazers! Join us to celebrate innovation and nominate industry leaders.

Nominate & Attend

Principal Consultant - Security Auditor

Leonardo
Bristol City
1 year ago
Applications closed

Related Jobs

View all jobs

Principal Security Consultant

Principal Security Consultant

Principal Security Consultant

Principal Security Consultant

Penetration Tester (Principal Consultant)

Senior Aviation Security Consultant

Job Description:

We have an exciting opportunity for a Principal Cyber Security Consultant - Auditor, to join Leonardo Cyber & Security Solutions Division.

This is a highly rewarding role with exposure across both traditional and cutting-edge enterprise IT as well as bespoke Operational Technology systems with a clear and defined pathway to achieve chartership, NCSC certification and greater responsibility. Your work at Leonardo will see you inspire and lead in solving customer problems in an agile, innovative and team centric manner. We are after creative, passionate, technically savvy and personable people to help grow our practice and solve some of the most challenging, exciting and critical security challenges to the UK’s digital landscape.

For this role, you will be working on one of our most high-profile programmes, conducting security assessments against well-known frameworks and helping a key customer to transform the way that they understand and improve their security maturity.

The role is based at our offices in Bristol or Luton (hybrid working) and travel will be required to other UK company and client locations.

Relate - Our customers and their problems are at the heart of what we do. As a Consultant and Auditor you will help to actively listen and empathise with our customers to build intimacy. Understand – We add value by solving problems, as a Consultant and Auditor you will help define potential solutions to these problems with only limited information based on your experience and technical knowledge. Assure – Giving our customers confidence that security is where it needs to be is a key requirement across heavily regulated industries. As a Consultant and Auditor you will assist in defining, implementing and performing assessments of our customer’s environment against a given set of criteria spanning people, process and technology. You will develop requirements and recommendations that the customer should enact to correct any observations made. Assess – At Leonardo we adopt a risk-based approach to any security problem. As a Consultant and Auditor you will need to identify, measure and analyse the risks attracted by a given digital system and its information assets through the completion of risk assessments. You will also assist in defining appropriate and proportionate security solutions to those risks, spanning people, process and technology. Develop – All our offerings are based on a core set of products. As a Consultant and Auditor you will assist in building a viable offering as part of the Leonardo business winning process for a customer as well as help in the technical development of our products to be used across our customer sectors. At least one of the following qualifications: CCP IA/Auditor Senior, CISM, CRISC, CISA, ISO27K Lead Auditor or Lead Implementer Demonstrable experience in Cyber Risk Management or Auditing in a Defence and/or public sector context. Experience of directly managing project delivery and associated metrics such as time, cost and quality. Experience of and ability to manage multiple stakeholders and their needs with empathy, finding an appropriate balance of listening and speaking. UK SC Clearance or the ability obtain it as well as other more in-depth security clearances. An Expert understanding of security maturity & detailed knowledge of a security maturity framework such as NIST CSF and its Implementation Tiers, C2M2 and NCSC CAF. An understanding of other security frameworks such as ISO27001, CIS and/or SOC2 would also be beneficial. Extensive experience in measuring compliancy of an organisation or digital system against a given set of security criteria. An Expert understanding of security compliance & detailed knowledge of a control framework such as NIST SP800-53 and ISO270002, IEC62443. Be certified by a well-known standards body in the provision of audits such as ISACA. Extensive experience in the development and mentoring of junior team members. An ambitious and creative drive to help safeguard UK national infrastructure and become a recognised cyber expert. Evaluating internal security systems, controls and policies. Ensuring compliance with application laws and regulations. Ability to write technical reports that analyse and interpret audit results. Leading and facilitating Audit Workshops to clients prepare for audit. A good understanding of TCP/IP based networking concepts across the OSI model layer as well as the common protocols in use and their risks.

Security Clearance

:

Life at Leonardo

With a company funded benefits package, a commitment to learning and development, and a flexible approach to working hours focused on the needs of both our employees and customers, a career with Leonardo has never offered as many opportunities or been more accessible to as many people.

Flexible Working:Flexible hours with hybrid working options. For part time opportunities, please talk to us

Company funded flexible benefits:Access to private healthcare, dental schemes, Workplace ISA, Go Green Car Scheme, technology and lifestyle options (£500 annual allowance)

Holidays:25 days plus bank holidays, option to buy/sell leave and to accrue up to 12 additional flexi leave days per year

Pension:Award winning pension scheme (up to 10% employer contribution)

Wellbeing: Employee Assistance Programme with access to free mental health support, financial wellbeing support and network groups to demonstrate our ongoing commitment to diversity & inclusion (Enable, Pride, Equalise, Reservists, Carers)

Lifestyle:Discounted Gym membership, Cycle to work scheme

Training:Free access to more than 4000 online courses via Coursera

Referral Incentive:You can earn a reward for successfully referring a friend or family member

Bonus:Scheme in place for all employees at management level and below

National AI Awards 2025

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

How to Find Hidden Cyber Security Jobs in the UK Using Professional Bodies like BCS, CIISec & More

The demand for skilled cyber security professionals in the UK has never been higher. With threats increasing in sophistication and frequency, organisations are urgently hiring ethical hackers, threat analysts, GRC specialists, and security architects. But many of the most valuable roles—particularly in government, defence, and critical infrastructure—are never publicly advertised. Instead, these jobs are shared behind the scenes through trusted networks, private communities, and professional bodies. In this article, we explore how to uncover hidden cyber security jobs in the UK using organisations like the BCS (The Chartered Institute for IT), CIISec (The Chartered Institute of Information Security), ISACA, and ISC² UK Chapter. We’ll show you how to use membership directories, special interest groups, CPD events and informal networks to gain early access to roles most people never see.

How to Get a Better Cyber Security Job After a Lay-Off or Redundancy

Redundancy is never easy—especially in a fast-moving field like cyber security, where your skills and experience are constantly evolving. But if you’ve recently been made redundant from a cyber security role, know this: the UK cyber workforce remains in high demand, and your expertise is more valuable than ever. Whether you’re a SOC analyst, penetration tester, incident responder, security architect or GRC specialist, there are still thousands of opportunities across sectors including finance, defence, government, retail, and critical infrastructure. This guide will help you turn redundancy into a career relaunch, with a clear action plan tailored to the UK cyber security job market.

Cyber Security Jobs Salary Calculator 2025: Check Your Market Value in Seconds

Why yesterday’s pay survey no longer protects you. “Could I earn more at a managed SOC?” “Is that fintech’s offer really competitive?” Every UK cyber‑security professional asks some version of those questions—usually after another colleague lands a pay rise, a recruiter sends a tempting JD, or a fresh breach makes headline news. Yet salary guides published even last year feel as out‑of‑date as a forgotten antivirus signature. Since 2024, ransomware gangs switched to double‑extortion, deepfake phishing exploded, & the EU’s NIS2/DORA regulations bled into UK contracts despite Brexit. With each shift, salary bands move. To cut through stale averages, CybersecurityJobs.tech distilled a three‑factor formula that lets you estimate a realistic 2025 salary in under a minute. Feed in your role, your UK region, & your seniority level. The output arms you with data‑driven leverage for your next appraisal, job application, or freelance rate card. This article explains the formula, reveals the forces pushing cyber pay ever higher, & outlines five practical moves to boost your market value within ninety days.