Cyber Security Consultant

Job Title: Cyber Security Consultant (Healthcare – DSPT/CAF Specialist)

Role Summary

We are looking for a highly skilled Cyber Security Consultant with proven healthcare sector experience and deep expertise in the DSPT and Cyber Assessment Framework (CAF). The successful candidate must have hands-on experience writing and implementing policies aligned to DSPT/CAF. Experience with EDRMS solutions is strongly desirable.

Key Responsibilities

• Lead cyber security delivery for healthcare clients, ensuring full alignment with DSPT and CAF requirements.
• Produce high-quality policies, procedures, and governance documentation mapped directly to DSPT/CAF controls.
• Conduct security assessments, audits, and evidence reviews to support DSPT submissions and CAF assurance.
• Provide clear, actionable security advice to technical and non-technical stakeholders.
• Support security design, risk mitigation, and assurance activities across healthcare environments.
• Advise on secure configuration and governance for EDRMS platforms (desirable).
• Contribute to incident response planning and readiness activities.

Essential Experience

• Healthcare cyber security experience (NHS or wider healthcare ecosystem).
• Mandatory DSPT and CAF experience, including:
• Completing DSPT/CAF assessments
• Creating security evidence and documentation
• Writing DSPT/CAF-aligned policies
• Strong working knowledge of healthcare regulatory/security requirements (NHS Digital, IG, UK data protection).
• Ability to produce concise, high-quality security documentation and reports.
• Solid grounding in security risk management and common security frameworks (NCSC, ISO 27001, NIST, etc.).
• Excellent communication, advisory, and stakeholder engagement skills.

Desirable

• Experience with EDRMS implementation, security configuration, or governance.
• Relevant certifications (e.g., CISSP, CISM, ISO 27001 Lead Auditor/Implementer).
• Experience supporting DPIAs, cloud security assessments, or security architecture reviews.