GRC Cyber Security Consultant

Description de l'emploi : Company Statement Airbus Protect is a wholly owned subsidiary of Airbus Group. We are a risk management leader in safety, cybersecurity and sustainability. We protect businesses and products from end-to-end, going beyond mere compliance to strengthen incident prevention and resilience at every level. The Role As a Cyber Security Consultant at Airbus Protect, you will act as a trusted advisor to our clients, delivering expert guidance across a diverse range of sectors.

This is a multi-faceted role designed for someone who can help our customers navigate the increasingly complex threat and regulatory landscapes. You will be navigating both tactical and technical compliance challenges alongside high-level strategic risk management. Due to the sensitive nature of the projects we deliver for our clients, it is an essential requirement that you currently hold, or meet the criteria to obtain, UK Government Security Clearance . This foundational requirement goes hand-in-hand with our need for a proven track record in cyber security consulting.

We expect your practical experience navigating complex GRC challenges to be firmly underpinned by recognised industry certifications—such as CISSP, CISM, or ISO 27001—demonstrating your established capability to advise clients with authority and technical rigor.

may include: Governance - Strategic Consulting: Advise clients on sound security architecture principles, including Secure by

• Design, network segmentation, and zero-trust frameworks, ensuring technical solutions align with business priorities.
• Technical Advisory: Lead engagements on specialised areas providing both high-level strategy and technical oversight. Providing consultancy on complex technical topics such as IDAM, PAM, and DLP, translating these into clear, actionable business advice.
• Regulatory Guidance: Advise and assure compliance against current and emerging frameworks/standards and regulations such as ISO27001, ISA/IEC62443, NIST CSF, NIST 800-53, NCSC CAF, NIS2, the Cyber Resilience Act, the AI Act, EASA Part-IS.
• AI Integration: Leverage AI tools to optimise internal delivery while consulting customers on the secure adoption and governance of AI within their own environments and in regulatory compliance.
• Multi-Project Leadership: Efficiently manage and execute multiple client engagements simultaneously, prioritising deliverables, driving project timelines, and consistently delivering quality consulting outputs while maintaining strong customer relationships across various industry sectors. Risk
• Risk Management: Produce high-quality risk assessments and assurance artefacts across the full system lifecycle, tailoring your approach to the client’s specific business context, including consideration of technical and human factors.
• Risk Mitigation & Guidance: Translate technical gaps and architectural risks into prioritised, actionable remediation plans, advising delivery teams and business stakeholders on achieving compliance and long-term cyber resilience.
• Gap assessment: Conduct comprehensive gap assessments against relevant cybersecurity standards, frameworks, and regulations (e.g., ISO27001, ISA/IEC62443, NIST CSF, NIST 800-53, NCSC CAF, NIS2, the Cyber Resilience Act, the AI Act, EASA Part-IS) to evaluate client security postures, identify control deficiencies, and deliver prioritised, actionable remediation roadmaps that guide clients toward full compliance readiness. Compliance
• Cyber Resilience: Devise and test strategies that ensure clients can withstand and respond to cyber incidents.
• Secure

Design & Baseline Assurance: Evaluate system architectures and technical configurations against established security baselines and Secure by

• Design principles. Identify design and configuration vulnerabilities early in the delivery lifecycle, providing actionable recommendations to guide customers toward secure, resilient, and compliant solutions. Supporting New Business: Beyond technical delivery, you will play a supporting role in the growth and market presence of Airbus Protect:
• Content Creation: Authoring technical blogs, white papers, and insights on emerging security trends to enhance our brand authority.
• Sales and Marketing

Support: Support to Sales and Marketing colleagues with technical representation at customer and marketing events. Developing compelling case studies and service descriptions aligned with our services portfolio. Representing Airbus at webinars, industry panels, and conferences to showcase our expertise. - Business Development: Active participation in the bid process and supporting ongoing customer relationship management to identify new opportunities.

The Individual We are seeking a proactive self-starter capable of taking a forward-looking approach to understanding customer requirements by providing effective inputs that add tangible benefit to the customer’s business. Essential

• Experience: 5–10 years of experience in a cyber security consulting or technical leadership role
• Clearance: Must hold, or have the ability to obtain, UK Government Security Clearance . -

At least one of the following certifications (CISSP, CISM, CCSP, CISA, ISO 27001, GICSP, ISA62443) or equivalents.

• Frameworks and Standards: Demonstrable experience of regulatory compliance and Standards adherence.
• Mindset: A self-starter who stays ahead of the curve on threat intelligence and industry best practices.
• Communication: Exceptional presentation skills; able to communicate complex technical topics to non-technical stakeholders.
• Collaboration: Proven ability to work autonomously while contributing effectively to multiple virtual and transnational teams and customers across concurrent projects.
• AI Literacy: Demonstrable understanding of how to use AI tools for productivity and the principles of securing AI environments.
• Business Acumen: Demonstrable evidence of business support benefits undertaken and realised
• Mobility: Full UK Driving Licence.
• Locality: Whilst this is a Hybrid Role, you will be expected to be in our Bristol office for at least 2-3 days a week. Remuneration &

Competitive Salary - Annual profit share scheme. - Comprehensive company benefits and private healthcare options consistent with a market-leading transnational organisation. Airbus Protect is an equal opportunities employer. At Airbus, inclusion means celebrating and valuing diversity in all its forms.. This commitment ensures every employee – irrespective of their socio-economic background, age, race, ethnicity, physical ability, neurodiversity, gender, sexual orientation, or any other characteristic – feels valued and included, empowering them to reach their full potential within a respectful environment."

Cet emploi exige une connaissance des risques de conformité potentiels et un engagement à agir avec intégrité, comme base de la réussite, de la réputation et de la croissance durable de la société. Unité légale : Airbus Protect Limited Type de contrat : CDI Niveau d'expérience : Expérimenté(e) Famille d'emplois : General Security En soumettant votre CV ou votre candidature, vous autorisez Airbus à utiliser et stocker des informations vous concernant à des fins de suivi de votre candidature ou de futurs emplois. Ces informations ne seront utilisées que par Airbus.

Airbus s'engage à assurer la diversité de sa main-d'œuvre et à créer un environnement de travail inclusif. Nous accueillons toutes les candidatures, quels que soient le milieu social et culturel, l'âge, le genre, l'invalidité, l'orientation sexuelle ou les croyances religieuses des postulants. Airbus est depuis toujours attaché à l'égalité des chances pour tous. En tant que tel, nous ne demanderons jamais aucun type d’avance de frais dans le cadre d'un processus de recrutement. Toute usurpation d'identité d'Airbus à cette fin doit être signalée à [email protected] .

Chez Airbus, nous vous aidons à travailler, à vous connecter et à collaborer plus facilement et de manière plus flexible. Dans la mesure du possible, nous favorisons les modalités de travail flexibles pour stimuler la pensée innovante.

L’offre est publiée sur le site de Airbus. Ouvrez l’offre originale ↗ pour y déposer votre candidature. Screeningpass ne remplit pas de formulaire à votre place.

Lancez une recherche de contact depuis cette page. Screeningpass vous propose jusqu’à trois personnes liées au poste. Vous choisissez celle à qui écrire, puis Screeningpass cherche son email professionnel et prépare un message. Vous le relisez et l’envoyez vous-même avec Gmail. Une adresse email n’est pas toujours disponible, et une réponse n’est jamais garantie.

Une recherche coûte 1 crédit. Le crédit vous est rendu si la recherche échoue. L’inscription offre 3 crédits, soit 3 recherches.

Screeningpass rassemble des offres de stage, d’alternance et d’emploi publiées par les entreprises. Pour une offre, Screeningpass trouve une personne à contacter dans l’entreprise, cherche son email professionnel et prépare un message à partir de votre CV. Voir le fonctionnement en détail.