Cyber Security Technical Consultant (Manager) at Daintta in London

Job description

Daintta are a rapidly growing, values-driven team of specialists who work with government clients across Cyber, Telecommunications and Data. We are seeking a talented and motivated Cyber Security Technical Manager to join our team and contribute to our mission of protecting the UK through data-driven insights and solutions. As a technical Manager, you will be expected to demonstrate versatility as you work closely with our public sector clients, governmental departments and project teams. You will lead a team to design, document and support the build of secure networks or systems, helping solve some of the UK’s most exciting cyber security challenges. Responsibilities Leading client engagements as a cyber security technical authority Developing, justifying and implementing organisational and system security management strategies that address risk and control requirements, ensuring a UK Gov't Secure by Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment and operations to reduce risk and ensure compliance, including: Developing secure solution designs to mitigate the risks posed by new technologies and business practices Leading third-party and supply chain security assessments, including vendor due diligence, secure procurement, software supply chain risk and ongoing assurance of externally sourced technology Applying identity-led and zero-trust security principles, including strong authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying and monitoring environmental and market trends and proactively assessing impact on business strategies, benefits and risks Assessing our client needs, understanding how these may differ from their wants, and appropriately managing stakeholder relationships Delivering high-quality work to agreed milestones and adapting quickly to unfamiliar client environments. Leading the client technical engagements, including pitches and presentations Helping to support & grow Daintta by actively inputting into the company strategy and helping to shape our future Representing us and our core values: Transparency, fairness and being daring. Skills/Knowledge You have 5+ years of practical experience in cyber security engineering, architecture, design and technical assurance, with evidence of applying that knowledge credibly in client-facing consulting engagements You have led technical client deliveries and teams across a range of cyber security related projects You have demonstrable working-level experience across several of the following domains: Security Architecture; Security Operations; Identity & Access Management; Cloud, Infrastructure and Platform Security; Network and Connectivity Security; Application Security and DevSecOps; Data Security and Privacy; Governance, Risk & Compliance. You have experience embedding security into agile, DevSecOps and iterative delivery models, including design reviews, security requirements management and pragmatic risk treatment in fast-moving projects You have experience aligning business requirements with security control standards and frameworks including: ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others You have demonstrable continuous personal development, supported b