Cyber Essentials Plus Consultant

A major organisation operating within a complex, business-critical environment is seeking an experienced Cyber Essentials Plus Consultant to lead a significant remediation and certification programme.

Following a recent review of the organisation's Cyber Essentials Plus readiness, a number of gaps have been identified that must be addressed before certification can be successfully achieved. The successful contractor will take ownership of the programme, driving remediation activity across technology teams and lead the organisation through to successful certification.

This is a delivery-focused role requiring an individual who understands the Cyber Essentials and Cyber Essentials Plus process from end to end and can move beyond advisory recommendations to deliver tangible improvements.

The Role:

You will be responsible for assessing the current position, identifying gaps against Cyber Essentials Plus requirements and leading the remediation activity required to achieve certification.

Working closely with technical and operational stakeholders, you will help improve security controls, challenge existing approaches and ensure regulatory and security requirements are embedded across the organisation.

Key responsibilities will include:

Leading Cyber Essentials Plus readiness and remediation activities
Taking ownership of the certification programme from planning through to assessment
Conducting gap analysis against Cyber Essentials Plus requirements
Developing and driving remediation plans across infrastructure, endpoint and operational teams
Reviewing security controls, policies and technical configurations
Advising on security frameworks, standards and best practice
Managing stakeholders across technology, security and operational functions
Tracking risks, dependencies and programme progress through to completionWhat We're Looking For

Proven experience delivering Cyber Essentials or Cyber Essentials Plus certification programmes
Strong understanding of Cyber Essentials Plus requirements and assessment methodology
Experience leading remediation initiatives and addressing audit or certification findings
Good understanding of wider security frameworks and controls
Technically minded with the ability to engage effectively with infrastructure, network, cloud and endpoint teams
Strong stakeholder management and communication skills
Comfortable operating in environments where security maturity is still developingContract Details

Outside IR35
Initial 6-month contract
£350 - £450 per day
Hybrid working
North West England
One-stage interview process
Immediate start availableThis role will suit a Cyber Security Consultant, Cyber Essentials Consultant, Information Security Consultant or GRC professional who enjoys hands-on delivery and can drive change within a complex operational environment.

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)
Only candidates based in UK and eligible to work in UK are allowed