About the role
About CFGI
CFGI is a global consulting firm that helps organisations navigate complex business challenges with confidence. With a strong presence in the UK, we partner with companies across industries to deliver best-in-class advisory services in accounting, risk, cyber security, technology, and business transformation.
We pride ourselves on combining technical expertise with a practical, hands-on approach, helping our clients strengthen resilience, meet regulatory requirements, and stay ahead in an increasingly digital and risk-driven landscape.
Technical and Domain Experience
- Conduct cybersecurity maturity and risk assessment and for clients.
- Practical experience implementing security controls, in areas such as MDR, IAM, Network Security, Cloud Deployments.
- Advise clients on cybersecurity strategy, metrics and reporting for various levels of stakeholders, including Audit Committees and Board of Directors.
- Build risk management practices for clients, including policies, procedures, Risk Register, etc.
- Previous experience as a systems administrator, systems engineer, or security analyst.
- Understanding of operating system hardening principles, network design principles, and systems security.
- Guide clients in establishing cybersecurity policies, standards, and procedures.
- Manage cybersecurity training & awareness services for clients from design to implementation.
- Understanding of security analysis, security events, and penetration testing.
Soft Skills
- Strong interpersonal and communication skills; experience with cross-cultural communications.
- Calmness and clarity of thought under pressure and ability to maintain positive attitude.
- Agile and flexible, capable of dealing with ambiguity, and confronting challenges and opportunities with speed, endurance, and decisiveness.
- Confidence to manage upwards, provide forward thinking ideas and actively participate in improving CFGI’s cyber offering.
Technical Qualifications and Certifications
- Industry certifications are preferred, but not required: CISSP, CISM, etc.
- Technology specific qualifications in technology or security solutions.
Experience
- Whilst we will judge the quality of candidates not their time-served in the industry, a good gauge for this role would be around 5 years’ experience in technology and security related fields.
- Your experience does not have to be purely cyber security consulting. We believe individuals with practical skillsets from in-house roles, broader technology management or GRC, for example, would be well placed in our team.
- We know great candidates bring a mix of skills and experiences, you don’t need to have done everything listed in this job description to apply.