Cyber Security SME

Role purpose

The International Cyber Security SME provides deep subject matter expertise across cyber resilience, assurance and technical advisory services. The role is responsible for leading complex assessments, shaping control improvements, advising on incident management and technical resilience, and providing specialist input into international service delivery and client decision-making.

Key responsibilities

• Provide expert cyber security input across risk management, information assurance, technical controls, emerging technologies, incident management and resilience improvement.
• Lead detailed assessments against frameworks and standards such as ISO 27001, NIST CSF, Cyber Essentials, CAF and NIS.
• Identify control gaps, non-conformities, vulnerabilities and resilience weaknesses, and develop practical remediation recommendations.
• Support the design and review of security architectures, control environments, operating procedures and technical resilience measures.
• Advise on incident response planning, playbooks, lessons learned and improvements to security operations and resilience capability.
• Contribute to client reporting, technical papers, assurance outputs and stakeholder briefings.
• Review and quality assure deliverables produced by advisors and support staff.
• Support service adaptation in response to evolving threat, regulatory and operational requirements.

Essential qualifications and experience

• Degree in Cyber Security, Computer Science, Information Security or related field; postgraduate qualification desirable.
• Strong demonstrable experience in cyber security advisory, technical assurance, risk assessment or specialist cyber consulting.
• Deep knowledge of security frameworks, controls, risk treatment and resilience practices.
• Experience in technical writing, stakeholder workshops and translating technical issues into business risk.
• Strong analytical skills and ability to work across complex, international environments.

Desirable certifications

• CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor/Implementer, GIAC, CREST or equivalent, depending on specialism.
• Knowledge of incident response, vulnerability management and operational resilience.
• Experience working in central government, critical national infrastructure or international regulated sectors.

Security and suitability requirements

• Must be eligible for BPSS; CTC or SC eligibility highly desirable for secure client environments.
• Willingness to travel internationally where required.

Why join Mastek?

Mastek offers the chance to work across diverse cyber resilience programmes with opportunities to deepen technical expertise and broaden consulting exposure. Funded development and certification support are available, subject to role alignment and performance, alongside future pathways into architecture, specialist tools, resilience leadership and strategic advisory work