Lead new and existing information and cybersecurity engagements.
Deliver ISO27001 implementations, from gap assessment through to certification readiness.
Deliver cyber incident exercising, including tabletop scenarios and simulations.
Lead internal audits aligned to ISO27001.
Support clients through external audits and certification processes.
Drive remediation activities to close audit findings and strengthen control effectiveness.
Conduct risk assessments and support the development of risk treatment plans.
Develop and implement policies, standards, and controls aligned to ISO27001.
Support clients in embedding effective governance, risk, and compliance practices.
Work directly with client stakeholders to manage delivery, expectations, and outcomes.
Communicate clearly with both technical and non-technical audiences.
Manage multiple engagements and priorities effectively.

Minimum 5 years’ experience in cyber or information security roles, with a focus on governance, risk, and compliance.
Proven experience delivering ISO27001 implementations end-to-end, including audit readiness.
Hands-on experience leading internal audits and supporting external audits.
Strong, practical knowledge of ISO27001 and ISMS implementation.
ISO27001 Lead Auditor certification.
Experience in consulting or project-based environments, with strong stakeholder management and communication skills.
Nice to Have: Experience delivering cyber incident exercising.
Knowledge of additional frameworks such as: CAF (Cyber Assessment Framework), NIST Cyber Security Framework, ISO22301 Lead Auditor certification (Business Continuity), ISO42001 Lead Auditor certification (AI Management Systems).
Experience working in regulated or public sector environments.
Eligibility for, or holding, UK Security Clearance (SC).

Recognition That Matters: A discretionary annual performance bonus that rewards your impact and contribution to our success.
Flexibility Built In: Flexible working arrangements and summer hours, because life isn’t 9 to 5, and balance matters.
Financial Security: A highly competitive pension scheme with generous employer contributions, private healthcare, and life assurance for peace of mind.
Health & Wellbeing: Employee Assistance Programme, mental health support, cycle-to-work scheme, and regular social events to keep our culture vibrant.
Time to Recharge: 35 days holiday, enhanced maternity pay, and family-first policies so you can focus on what matters most.
Learning Never Stops: From courses to certifications, we’ll invest in your development so you can keep growing and shaping what’s next.
Community & Culture: Opportunities to volunteer, give back, and be part of initiatives that make Instil a truly inclusive and connected workplace.

Senior Cybersecurity Consultant

Key skills