Junior Security Consultant

Job Title: Junior Security Consultant

Role Overview:

Ergo are seeking a Junior Security Consultant for a hybrid role in our Eastpoint offices. The successful candidate will join our market-leading Cyber Security Team where you will learn from some of the best in the business while developing your own consultancy skills.

The Junior Security Consultant will work with the more established members of the team to assess IT systems, infrastructure, policies and cyber security measures for a broad range of customers to determine their risk posture and advise on appropriate mitigation measures/cyber security roadmaps.

What will you do?

• Assist in cyber security assessments designed to evaluate an organisations security posture using established frameworks such as CIS, NIST, and ISO 27001.
• Support Penetration testing, including steering the activity, walkthroughs of the results and providing remediation paths to customers.
• Inform the business on emerging threats and advising on mitigation strategies.
• Supporting compliance activity, ISO 27001, Cyber Essentials, Secure Score and MCSB, advise on monitoring and provide opportunities for continual improvement initiatives
• Risk Management – build risk universes that account for inherent and residual risk profiles taking into account the control measures as well as the risks themselves
• Advise on Security Training and Awareness
• Legislative conformity wrt GDPR, Cloud Act, NIS2, DORA, AI act etc
• Maintain technical documentation and how-to guides.
• Work closely with SOC engineers to support SOC/SIEM service delivery.
• Flexibility to travel to project sites, industry events, and trade shows is required.
• Advise on tooling
• 
  

What do you need?

• 2+ years in a similar cybersecurity role.
• Proven experience in conducting compliance assessments and collaborating on governance initiatives.
• Comprehensive and up to date understanding of frameworks such as ISO 27001, NIST, CIS and associated regulations/directives such as NIS2, DORA, AI Act, GDPR etc.
• Experience using a ticketing or ITSM system (for example ServiceNow or similar).
• Exceptional analytical and critical thinking skills, enabling thorough evaluation of complex data and development of effective policies.
• Excellent communication skills, with the ability to convey technical information clearly to both technical and non-technical stakeholders.
• Strong leadership and collaboration capabilities and the ability to manage relationships effectively.