About CFGI:

CFGI is a global consulting firm that helps organisations navigate complex business challenges with confidence. With a strong presence in the UK, we partner with companies across industries to deliver best-in-class advisory services in accounting, risk, cyber security, technology, and business transformation.

We pride ourselves on combining technical expertise with a practical, hands-on approach, helping our clients strengthen resilience, meet regulatory requirements, and stay ahead in an increasingly digital and risk-driven landscape.

Technical and Domain Experience:

• Conduct cybersecurity maturity and risk assessment and for clients.

• Practical experience implementing security controls, in areas such as MDR, IAM, Network Security, Cloud Deployments.

• Advise clients on cybersecurity strategy, metrics and reporting for various levels of stakeholders, including Audit Committees and Board of Directors.

• Build risk management practices for clients, including policies, procedures, Risk Register, etc.

• Previous experience as a systems administrator, systems engineer, or security analyst.

• Understanding of operating system hardening principles, network design principles, and systems security.

• Guide clients in establishing cybersecurity policies, standards, and procedures.

• Manage cybersecurity training & awareness services for clients from design to implementation.

• Understanding of security analysis, security events, and penetration testing.

Soft Skills:

• Strong interpersonal and communication skills; experience with cross-cultural communications.

• Calmness and clarity of thought under pressure and ability to maintain positive attitude.

• Agile and flexible, capable of dealing with ambiguity, and confronting challenges and opportunities with speed, endurance, and decisiveness.

• Confidence to manage upwards, provide forward thinking ideas and actively participate in improving CFGI's cyber offering.

Technical Qualifications and Certifications:

• Industry certifications are preferred, but not required: CISSP, CISM, etc.

• Technology specific qualifications in technology or security solutions.

Experience:

• Whilst we will judge the quality of candidates not their time-served in the industry, a good gauge for this role would be around 5 years' experience in technology and security related fields.

• Your experience does not have to be purely cyber security consulting. We believe individuals with practical skillsets from in-house roles, broader technology management or GRC, for example, would be well placed in our team.

• We know great candidates bring a mix of skills and experiences, you don't need to have done everything listed in this job description to apply.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.