Vulnerability Consultant

Vulnerability Consultant

Manchester, Cheltenham or London

We are a leading global cybersecurity company dedicated to helping organizations protect their digital assets and ensure compliance with industry standards. Our team is passionate about innovation, collaboration, and delivering exceptional results for our clients.

We are seeking an experienced Cyber Essentials Assessor to join our dynamic team. The ideal candidate will have a strong background in cybersecurity, excellent team-working skills, and a proactive, creative approach to problem-solving. This role involves assessing organizations against the Cyber Essentials framework, providing expert guidance, and working closely with clients to enhance their cybersecurity posture.

This is an opportunity to join a technically advanced and talented team and help NCC Group to continue to deliver customer centric assessments and advice for our Cyber Essentials services to our customers.

Your expertise in Cyber Essentials assessments, collaborative and proactive approach, and a customer-centric approach will be crucial in driving customer satisfaction, team success, and business growth.

Key Responsibilities

• Conduct comprehensive assessments of the range of size and complexity of client organisations against the Cyber Essentials framework.
• Collaborate with clients to understand their cybersecurity needs and provide tailored recommendations.
• Prepare detailed assessment reports and present findings to clients.
• Work closely with internal teams to ensure seamless project delivery.
• Stay up to date with the latest cybersecurity trends and best practices.
• Contribute to the development of innovative assessment methodologies and tools.
• Build support and trust with all customers.
• Running and manually verifying network and application vulnerability scans.
• Analysis of external and internal outputs, to identify and communicate noncompliance.
• Work directly with customers to provide prioritization for remediation.
• Providing support and answering queries from clients.
• Own the operational relationships with your customers.
• Assist the operational teams in fixing issues that arise during the operation of services.
• Act as the SME to customers to improve the quality of service they are receiving and maintain a roadmap for those customers.
• Mentor more junior consultants, providing guidance and support in delivering exceptional service to our clients.
• Foster a collaborative and positive team culture, promoting knowledge sharing and continuous improvement.
• Work with the Departmental Leadership team, as a SME, to ensure success.

Technical Skills & Knowledge

• Proven experience as a Cyber Essentials Assessor or similar role.
• In-depth knowledge of the Cyber Essentials framework and cybersecurity principles.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Ability to work effectively both independently and as part of a team.
• Proactive, creative, and solution-oriented mindset.
• Relevant certifications (e.g., Cyber Essentials Assessor, VA+, CPSA or CRT). CISM/CISSP are a plus.
• Excellent understanding of basic cyber security principles.
• Good understanding and exposure to network and web application security.
• Good experience using network and application scanning tools and utilities, such as Nexpose Rapid 7, Qualys, HP WebInspect, IBM AppScan, Tenable Nessus, Burp, NMAP etc.
• Strong interpersonal and communication skills.
• Ability to work and manage time and tasks independently.
• Ability to communicate with customers in a clear and concise manner.
• Strong customer handling skills.
• Good consultancy skills.

Values

• Team Working: Ability to collaborate effectively with colleagues and clients to achieve common goals.
• Collaboration: Strong emphasis on working together to share knowledge and achieve the best outcomes.
• Proactive: Taking initiative to identify and address potential issues before they become problems.
• Creative: Bringing innovative ideas and approaches to enhance assessment processes and client solutions.

Ways of working

Focusing on Clients and Customers.
Working as One NCC.
Always Learning.
Being Inclusive and Respectful.
Delivering Brilliantly.

Our company

At NCC Group, our mission is to create a more secure digital future. That mission underpins everything we do, from our work with our incredible clients to groundbreaking research shaping our industry. Our teams partner with clients across a multitude of industries, securing new products, and emerging technologies, as well as solving complex security problems. As global leaders in cyber and escrow, NCC Group is a people-powered business seeking the next group of brilliant minds to join our ranks.

Our colleagues are our greatest assets, and NCC Group is committed to providing an inclusive and supportive work environment that fosters creativity, collaboration, authenticity, and accountability. We want colleagues to put down roots at NCC Group, and we offer a comprehensive benefits package, as well as opportunities for learning and development and career growth. We believe our people are at their brilliant best when they feel bolstered in all aspects of their well-being, and we offer wellness programs and flexible working arrangements to provide that vital support.

What do we offer in return?

We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits including flexible working, financial & investment options, pension, life assurance, share save scheme, maternity & paternity leave, community & volunteering programmes, green car scheme, cycle scheme, employee referral program, lifestyle & wellness, learning & development, diversity & inclusion.

About your application

We review every application received and will get in touch if your skills and experience match what we're looking for. If you don't hear back within 10 days, your CV may be kept on our database for future vacancies. For data privacy or requests, contact global.ta@nccgroup.com. The role involves mandatory pre-employment background checks including BS7858 screening.