Principal Cyber Security Consultant - Vciso and Ncsc Assurance

Principal Cyber Security Consultant – vCISO & NCSC Assurance UK remote-first | Occasional client travel | Existing ChCSP status essential £115,000 base + 10% bonus Build a vCISO service. Lead the journey towards NCSC assurance. Shape a growing cyber security consultancy. Our client, a specialist UK cyber security consultancy, is looking for a Chartered Cyber Security Professional to take a leading role in developing its advisory services. This is an opportunity for an experienced consultant or security leader who combines board-level credibility with the practical experience to build a service and deliver it. You will help the organisation achieve NCSC Assured Cyber Security Consultancy (ACSC) status and establish a vCISO capability that gives clients clear direction, effective governance and measurable improvements in security. Working closely with the leadership team, you will influence the consultancy's service offering, delivery standards and growth while remaining directly involved in client engagements. Mandatory chartership You must already hold UK Cyber Security Council Chartered Cyber Security Professional (ChCSP) status in at least one of the following specialisms:

• Cyber Security Audit and Assurance
• Cyber Security Governance & Risk Management
• Secure Systems Architecture & Design Existing chartership is an essential requirement. Professional memberships and other certifications do not replace it. The opportunity Lead the work towards NCSC ACSC status You will take a leading role in preparing the consultancy for NCSC assurance within your relevant specialism. This will include assessing readiness, addressing gaps and developing the methodologies, quality controls and evidence needed to support the application and assessment process. You will work with the leadership team and technical specialists to embed applicable NCSC guidance into client delivery and establish standards that support ongoing assurance. Build and deliver the vCISO capability You will shape the vCISO proposition from service design through to delivery: defining its scope, engagement model, core deliverables and reporting approach. As a trusted adviser to client leadership teams, you will translate business priorities and cyber risk into practical security strategies, governance structures and prioritised improvement plans. You will help boards understand their exposure, make informed investment decisions and track progress. The role requires someone who can both develop a repeatable service and personally lead complex client engagements. Help grow the advisory practice Alongside delivery, you will support opportunity scoping, proposals and the development of long-term client relationships. You will mentor colleagues and connect strategic advice with the technical expertise needed to put it into practice. What you will bring
• Current ChCSP status in at least one of the three specialisms listed above.
• Proven experience building or developing a vCISO service, including shaping the offering, establishing delivery processes and leading engagements.
• Experience acting as a vCISO, CISO or senior security adviser, with the credibility to advise and challenge boards and executive teams.
• Practical experience applying NCSC guidance and translating it into clear, defensible client outcomes.
• Strong cyber security governance, risk management and assurance expertise, supported by enough technical depth to work confidently with security architects and engineers.
• A track record of turning complex security issues into proportionate recommendations and achievable delivery plans.
• The ability to own consulting engagements from initial scoping through to delivery and ongoing client relationships. Experience supporting an organisation through NCSC ACSC assessment or delivering within an assured consultancy would be particularly valuable. Why join? This is a chance to take ownership of a significant part of a growing consultancy's future. You will have direct access to the leadership team, meaningful influence over how services are built and the autonomy to establish a vCISO capability that clients value. The environment is collaborative and remote-first, with opportunities to contribute across both strategic advisory and technical delivery. If you hold the required chartership and have the experience to build and lead a vCISO service, apply now.