Vulnerability Consultant
Manchester, Cheltenham or London
We are a leading global cybersecurity company dedicated to helping organizations protect their digital assets and ensure compliance with industry standards. Our team is passionate about innovation, collaboration, and delivering exceptional results for our clients.
We are seeking an experienced Cyber Essentials Assessor to join our dynamic team. The ideal candidate will have a strong background in cybersecurity, excellent team-working skills, and a proactive, creative approach to problem-solving. This role involves assessing organizations against the Cyber Essentials framework, providing expert guidance, and working closely with clients to enhance their cybersecurity posture.
This is an opportunity to join a technically advanced and talented team and help NCC Group to continue to deliver customer centric assessments and advice for our Cyber Essentials services to our customers.
Your expertise in Cyber Essentials assessments, collaborative and proactive approach, and a customer-centric approach will be crucial in driving customer satisfaction, team success, and business growth.
Key Responsibilities

This is an opportunity to work in a fun and challenging environment, using market leading security testing tools and platforms to provide security testing services to our large client base. You will play a key role in delivering and managing Cyber Essentials security programs all year round, as well as building relationships with clients and ensuring that our services meet their needs. You will also have the responsibility of working with other vulnerability consultants to support the direction and development of the service.

• Conduct comprehensive assessments of the range of size and complexity of client organisations against the Cyber Essentials framework.
• Collaborate with clients to understand their cybersecurity needs and provide tailored recommendations.
• Prepare detailed assessment reports and present findings to clients.
• Work closely with internal teams to ensure seamless project delivery.
• Stay up to date with the latest cybersecurity trends and best practices.
• Contribute to the development of innovative assessment methodologies and tools.
• Build support and trust with all customers.
• Running and manually verifying network and application vulnerability scans
• Analysis of external and internal outputs, to identify and communicate noncompliance.
• Work directly with customers to provide prioritization for remediation.
• Providing support and answering queries from clients
• Own the operational relationships with your customers.
• Assist the operational teams in fixing issues that arise during the operation of services.
• Act as the SME to customers to improve the quality of service they are receiving and maintain a roadmap for those customers.
• Mentor more junior consultants, providing guidance and support in delivering exceptional service to our clients.
• Foster a collaborative and positive team culture, promoting knowledge sharing and continuous improvement.
• Work with the Departmental Leadership team, as a SME, to ensure success.

What we are looking for in you

Technical Skills & Knowledge

• Proven experience as a Cyber Essentials Assessor or similar role.
• In-depth knowledge of the Cyber Essentials framework and cybersecurity principles.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Ability to work effectively both independently and as part of a team.
• Proactive, creative, and solution-oriented mindset.
• Relevant certifications (e.g., Cyber Essentials Assessor, VA+, CPSA or CRT). CISM/CISSP are a plus.
• Excellent understanding of basic cyber security principles
• Good understanding and exposure to network and web application security
• Good experience using network and application scanning tools and utilities, such as Nexpose Rapid 7, Qualys, HP WebInspect, IBM AppScan, Tenable Nessus, Burp, NMAP etc.
• Strong interpersonal and communication skills
• Ability to work and manage time and tasks independently.
• Ability to communicate with customers in a clear and concise manner.
• Strong customer handling skills
• Good consultancy skills

Values

• Team Working: Ability to collaborate effectively with colleagues and clients to achieve common goals.
• Collaboration: Strong emphasis on working together to share knowledge and achieve the best outcomes.
• Proactive: Taking initiative to identify and address potential issues before they become problems.
• Creative: Bringing innovative ideas and approaches to enhance assessment processes and client solutions.

Ways of working
Focusing on Clients and Customers.
Working as One NCC.
Always Learning.
Being Inclusive and Respectful.
Delivering Brilliantly.
Our company
At NCC Group, our mission is to create a more secure digital future. That mission underpins everything we do, from our work with our incredible clients to groundbreaking research shaping our industry. Our teams’ partner with clients across a multitude of industries, delving into, securing new products, and emerging technologies, as well as solving complex security problems. As global leaders in cyber and escrow, NCC Group is a people-powered business seeking the next group of brilliant minds to join our ranks.
Our colleagues are our greatest assets, and NCC Group is committed to providing an inclusive and supportive work environment that fosters creativity, collaboration, authenticity, and accountability. We want colleagues to put down roots at NCC Group, and we offer a comprehensive benefits package, as well as opportunities for learning and development and career growth. We believe our people are at their brilliant best when they feel bolstered in all aspects of their well-being, and we offer wellness programs and flexible working arrangements to provide that vital support.
Come join us?
What do we offer in return?

We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits:

• Flexible working

  Financial & Investment
  Pension
  Life Assurance
  Share Save Scheme
  Maternity & Paternity leave

  Community & Volunteering Programmes

• Green Car Scheme

  Cycle Scheme
  ‍ ‍ Employee Referral Program
  Lifestyle & Wellness
  Learning & Development
  ‍ Diversity & Inclusion
  So, what’s next?
  If this sounds like the right opportunity for you, then we would love to hear from you! Click on apply to this job to send us your CV and cover letter and the relevant member of our global talent team will be in touch with you. Alternatively send your details to
  global.ta@nccgroup.com .
  About your application
  We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles.
  If you do not want us to retain your details, please email
  global.ta@nccgroup.com
  . All personal data is held in accordance with the NCC Group Privacy Policy (
  candidate-privacy-notice-261023.pdf (nccgroupplc.com)
  ). We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.
  Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process. This role being advertised will be subject to BS7858 screening as a mandatory requirement.

• Conduct comprehensive assessments of the range of size and complexity of client organisations against the Cyber Essentials framework.
• Collaborate with clients to understand their cybersecurity needs and provide tailored recommendations.
• Prepare detailed assessment reports and present findings to clients.
• Work closely with internal teams to ensure seamless project delivery.
• Stay up to date with the latest cybersecurity trends and best practices.
• Contribute to the development of innovative assessment methodologies and tools.
• Build support and trust with all customers.
• Running and manually verifying network and application vulnerability scans
• Analysis of external and internal outputs, to identify and communicate noncompliance.
• Work directly with customers to provide prioritization for remediation.
• Providing support and answering queries from clients
• Own the operational relationships with your customers.
• Assist the operational teams in fixing issues that arise during the operation of services.
• Act as the SME to customers to improve the quality of service they are receiving and maintain a roadmap for those customers.
• Mentor more junior consultants, providing guidance and support in delivering exceptional service to our clients.
• Foster a collaborative and positive team culture, promoting knowledge sharing and continuous improvement.
• Work with the Departmental Leadership team, as a SME, to ensure success