Cyber Security Consultant
About this role
As part of our continued growth and increasing demand for cyber and information security services, Moore Kingston Smith is seeking an experienced Cyber Security Consultant to join our Risk Advisory team. You will be part of an NCSC-recognised cyber security practice, operating within our wider business, technology and compliance risk advisory team, helping clients strengthen their cyber resilience and manage evolving security risks.This is a hands-on consulting role that will see you working with a wide variety of organisations, ranging from scale-ups to established businesses across multiple sectors. Whether clients are just beginning their security journey or enhancing mature programs, you will provide tailored, actionable advice to support their operational resilience and regulatory compliance.With access to a diverse portfolio of clients, this is an excellent opportunity to deepen your InfoSec expertise and play a meaningful role in helping businesses improve their defences in a fast-evolving threat landscape. We are looking for a proactive well-rounded consultant with strong technical fundamentals, an ability to think critically, and a genuine interest in helping clients succeed. Lead and support the delivery of cyber and information security assessments, audits, and control reviews across diverse industries.Identify and assess security control weaknesses, articulate associated risks, and provide pragmatic recommendations tailored to client environments.Produce high-quality, concise documentation including audit reports, risk assessments, and advisory outputs.Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials.Maintain up-to-date knowledge of cyber threats, mitigation strategies, regulatory requirements, and industry best practices.Contribute to the continuous improvement of internal methodologies and security services.Build and maintain strong client relationships with a service-focused mindset.Identify client challenges and future needs that may lead to service expansion opportunities.Contribute to business development and client growth by supporting proposal creation, project scoping, thought leadership (e.g., blogs, webinars), and collaborating on presentations, tenders, and workshops with senior team members.A proactive, client-oriented mindset with a passion for continuous learning and improving security outcomes. EssentialExperience within cyber security consulting, security auditing, or risk advisory roles.Experience in delivering client-facing cyber risk advisory services.Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR.Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. Experience planning and delivering engagements independently and as part of a team, within tight timescales, to budget and a high level of quality. Competent in working with a range of clients, from SMEs to large enterprise environments.Experience preparing, supporting, or auditing certification audits (e.g., ISO 27001, SOC 2, Cyber Essentials)DesirableIndustry-recognised certifications such as ISO 27001 Lead Auditor/Implementer, CISSP, CISA, CISM, or similar.Exposure to penetration testing, or hands-on vulnerability assessment (even if not a primary role).Experience with public cloud platforms (e.g., AWS, Azure, GCP, MS365) and understanding of cloud security principles.Experience in Operational Technology (OT) and understanding of SANS standards.Familiarity with modern security technology and tools, SIEM, and security automation.Hands-on experience in security or IT engineering, including implementing technical controls, hardening systems, securing networks, or supporting secure architecture design.
What this role is, and what else it is called
Employers in London advertise this kind of work as Security Engineer, Fire & Security Engineer, IT Security Analyst and Application Security Engineer too, so it is worth searching more than one wording. It is a mid-level Cybersecurity role in London, advertised as hybrid, splitting time between home and the office.
About hiring at Mooreks
Mooreks has 1 other live technology role on its careers page. Elsewhere in its adverts Mooreks asks for Python, Linux, Microsoft 365 and PowerShell. See all Mooreks roles, salaries and stack.
How this role compares to the market
1,459 live UK roles list AWS right now, from 503 employers. The median advertised salary is £80,000; 28% are advertised as remote. Browse AWS roles.
1,139 live UK roles list Azure right now, from 443 employers. The median advertised salary is £55,000; 28% are advertised as remote. Browse Azure roles.
London has 4,323 live IT vacancies across 1,366 employers, with a median advertised salary of £70,000. Browse London roles.
Market figures are today's snapshot of live UK roles on employer careers pages; see hiring trends.
Technologies mentioned
Detected on Mooreks's careers page. ProdReady Recruitment lists this vacancy as an aggregator and is not the employer; applications go to the employer's own site. More IT jobs in London.