Cyber Security Consultant

We are seeking a motivated and detail-oriented Cyber Security Consultant to join our team. In this role, you will focus on Governance, Risk, and Compliance, helping a diverse client base navigate regulatory requirements and cyber threats.

Periculo is a full stack security consultancy that provides a variety of services from penetration testing to governance risk and compliance, we service different industries but have a special focus on medical device companies and healthtech too. The type of people that we look for are independant go-getters that can manage their own workload, have the drive to continually improve and also is a team player that isn’t afraid to get stuck in to support the team.

Reporting to the Security Manager, you will play a key role in delivering effective security solutions and supporting our clients' security posture.

What does a day in the life look like?
- Monday morning we have the Periculo Pulse, a weekly brief on the industry, threats, and news that may help with your role
- Your day could start by performing daily checks for customers, monitoring alerts in their environments such as google workspace and office365
- You may then have a notification to review one of your customers risks and deal with stakeholders to advise on the best course of action
- A new threat may come into your customer feed requiring you to investigate and identify the impact to your customer.
- As you will be managing multiple customers you may then have time to review a procedure that is up for review, using your knowledge of the customer you may rewrite or add some additional processes to their documentation and update their security wiki.
- On a particularly busy day, a customer may notify you of a potential breach that they have identified which you will be responsible to investigate, ensuring that you get some good documentation for an upcoming ISO27001 audit

It truly is a varied role as you take up the ISMS management for our managed service customers, supported by the security lead when required.

If you are ready to make a significant impact and grow your expertise in cyber security, we want to hear from you

**Key Duties**:

- **Compliance Monitoring**: Monitor and ensure compliance with industry standards and regulations such as GDPR, ISO27001, and SOC2.
- **Client Engagement**:Participate in client meetings to understand their security needs and requirements. Maintain positive relationships with clients through regular communication and follow-up.
- **Document Development**: Assist in the development, implementation, and maintenance of security policies, procedures, standards, and guidelines.
- **Risk Monitoring**:Monitor risks using our compliance tool to identify and evaluate potential security threats to clients.
- **Security Audits**: Support internal and external security audits, including preparation, coordination, and follow-up on findings.
- **Incident Response**: Assist in the development and execution of incident response plans and procedures.
- **Training and Awareness**: Help develop and deliver security awareness training programs to staff.
- **Vendor Management**: Assist in evaluating third-party vendors' security practices and ensuring they meet organisational requirements.
- **Reporting**: Prepare and present regular reports on security risks, compliance status, and mitigation activities to senior management.
- **Continuous Improvement**: Stay up-to-date with the latest security trends, technologies, and regulatory changes to continuously improve the organisation's security posture.

**Work Environment**:

- Hybrid working with 3 days per week in the Melksham office.
- Comfortable office environment with pool table, ping pong table and shower.
- Onsite gym & access to recovery suite including sauna and ice bath.
- Additional days leave for birthday.
- From time to time there might be a need to travel to customers' premises.

**Skills & Qualifications**:

- Security Plus or another industry recognised certification
- Knowledge of security standards including GDPR & ISO27001.
- Strong problem-solving.
- Attention to detail.
- Excellent verbal and written communication.
- Client engagement and relationship building.
- Team collaboration.
- Effective time management.
- Multitasking ability.
- Proactive issue resolution.
- Willingness to learn
- Willingness to get stuck in with the team but be self sufficient

**Job Types**: Full-time, Permanent

Pay: £35,000.00-£45,000.00 per year

**Benefits**:

- Company events
- Company pension
- Free parking
- Health & wellbeing programme
- On-site gym
- On-site parking
- Private medical insurance
- Work from home

Schedule:

- Monday to Friday

Supplemental pay types:

- Yearly bonus

Ability to commute/relocate:

- Melksham: reliably commute or plan to relocate before starting work (required)

Application question(s):

- Are you able to commit to three days per week in the Melksham office?

**Experience**:

- Information Security: 2 y