IT Security Auditor

In this role you will perform Cyber Essentials assessments and support wider information security audits for a growing cyber security consultancy. You will work closely with clients to review evidence, discuss security controls and deliver clear findings and recommendations. The role covers technical controls across networks, endpoints and cloud, with funded training to broaden your scope into ISO 27001 and related frameworks. You’ll join a specialist team with clear routes to senior audit responsibilities in a collaborative environment.

• hybrid working
• funded professional development and certifications
• clear route toward senior audit responsibilities
• flexible working
• career progression
• right to work in the UK (sponsorship-free)

• Deliver and support Cyber Essentials and Cyber Essentials Plus assessments
• Engage with clients to review evidence, discuss controls and explain findings
• Assess technical controls across networks, endpoints and cloud environments
• Produce clear audit reports with practical recommendations
• Develop involvement in wider information security audits and assurance projects

• Good knowledge of CE/CE+ requirements and practical assessment experience
• Strong communication skills and confident client-facing demeanor
• Sound technical security foundation (networks, access controls, patching, secure configuration)
• Exposure to ISO 27001, IASME Cyber Assurance or CAF-based schemes
• Enthusiastic about developing audit expertise
• Relevant assessor or auditor certifications are advantageous (Cyber Essentials Plus Assessor or ISO 27001 Lead Auditor)

• strong communication
• client-facing confidence
• thorough
• Cyber Essentials
• Cyber Essentials Plus
• networks security