Consultant/Senior Consultant, Cyber Strategy & Transformation

Basic information

Location
Bristol, Edinburgh, London, Manchester
Business Line
Technology \& Transformation
Job Type
Permanent / FTC
Date published
18\-Sep\-2026
Req \#
25131

Job description

Connect to your Industry

Cyber security is a critical business issue. Organisations are navigating an increasingly complex threat and regulatory landscape while transforming their businesses, adopting new technologies and seeking to grow with confidence. The choices they make about cyber risk can directly affect resilience, customer trust, regulatory outcomes and the ability to deliver on their strategic priorities.

Deloitte’s Cyber practice helps organisations make those choices and turn them into action. We bring together cyber, technology, transformation and industry expertise to help clients understand their most important risks, define the right response and deliver sustainable change. You’ll join a market\-leading UK Cyber practice of more than 450 people, within Deloitte’s broader Technology \& Transformation business.

Our work includes

Our Cyber Strategy \& Transformation team works with senior leaders on complex, enterprise\-level cyber challenges spanning three connected areas:

Cyber strategy and risk

Helping organisations understand the cyber risks that matter most, make informed choices about where to focus and invest, and define practical strategies aligned to business priorities and risk appetite:

• Assess cyber risk, capability and maturity to identify priority areas for action.


• Develop enterprise cyber strategies, investment priorities and risk\-based roadmaps.


• Support executives and boards to understand cyber risk and make clear, evidence\-based decisions.


• Interpret relevant regulations, standards and emerging threats in the context of an organisation’s strategy and operating environment.

Cyber transformation and delivery

Turning cyber strategy into measurable change by shaping, mobilising and delivering transformation programmes that strengthen capabilities, improve resilience and embedding cyber into wider business and technology change.

• Translate strategy and assessment findings into prioritised transformation programmes and delivery plans.


• Shape programme scope, outcomes, governance, dependencies and investment cases.


• Lead or support complex cyber transformation programmes across multiple capabilities and stakeholder groups.


• Help clients track outcomes, manage delivery risk and sustain improvements beyond the programme.

Cyber governance and operating models

• Helping organisations establish clear accountability and effective ways to govern, manage and oversee cyber risk across the enterprise.


• Design or evolve cyber governance, decision rights, roles and accountabilities.


• Develop cyber operating models that connect security teams with technology, risk and the wider business.


• Define proportionate policies, oversight mechanisms, metrics and reporting that support effective decision\-making.


• Help embed cyber risk management into business\-as\-usual processes and wider enterprise governance

Connect to your career at Deloitte

Deloitte drives progress. Using our vast range of expertise, we help our clients' become leaders wherever they choose to compete. To do this, we invest in outstanding people. We build teams of future thinkers, with diverse talents and backgrounds, and empower them all to reach for and achieve more.

What brings us all together at Deloitte? It’s how we approach the thousands of decisions we make every day. How we behave, our beliefs and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead every decision we make and action we take, guiding us to deliver impact how and where it matters most.

Connect to your opportunity

As a Consultant or Senior Consultant in Cyber Strategy \& Transformation, you will work as part of multidisciplinary teams helping clients understand and solve complex cyber challenges. You will build your cyber, consulting and industry expertise through hands\-on delivery and regular exposure to client stakeholders.

At Senior Consultant level, you will additionally be expected to begin owning workstreams within projects, taking responsibility for deliverables, supporting junior team members, and contributing to the development of project approaches and methodologies.

The level of independence, workstream responsibility and coaching of others will reflect your experience and grade.

• Deliver high\-quality analysis and client outputs across cyber strategy and risk, cyber transformation and delivery, and cyber governance and operating models.


• Break down complex problems, gather and assess evidence, identify insights and contribute to practical recommendations.


• Work directly with client stakeholders through interviews, workshops and day\-to\-day project delivery, communicating clearly with both technical and non\-technical audiences.


• Own defined activities and deliverables; at Senior Consultant level, take increasing responsibility for coordinating workstreams and supporting more junior colleagues.


• Collaborate with subject matter experts, technology teams and industry experts across Deloitte to bring the right expertise to client challenges.


• Contribute to proposals, research, thought leadership and the development of new propositions as you build your understanding of our clients and market.


• Use technology, data and AI thoughtfully to improve analysis, delivery and the quality of outcomes for clients.

You will have the opportunity to work on some of the most complex and strategically important cyber agendas in the market, collaborate with multidisciplinary teams, and engage with client stakeholders. You will build a distinctive profile in an area of strategic importance to our clients, developing your expertise and broadening your experience. We will support you in your professional growth, helping you strengthen your consulting skills and expand your knowledge.

Connect to your skills and professional experience

We are looking for people who combine an interest in cyber security with strong analytical, communication and problem\-solving skills. You do not need to have followed one particular career path, and we do not expect every candidate to meet every point below. Relevant experience may have been gained in consulting, industry, government or another complex organisation.

Cyber experience

• Awareness of, or experience in, one of our three core areas, together with the ambition to expand your knowledge and expertise.


• An understanding of core cyber security concepts and how cyber risk connects to technology and business priorities.


• Experience analysing information, identifying issues and translating findings into clear, structured outputs and recommendations.


• Awareness of, or experience in, at least one recognised cyber security framework, standard or regulatory requirement, such as NIST CSF, ISO 27001, NCSC CAF, CRI, NIS2 or equivalent. Deep expertise across all of these is not expected.

Consulting and delivery skills

• Problem solving: Curiosity and structured thinking, with the ability to work through unfamiliar or ambiguous problems and form evidence\-based conclusions.


• Communication: Strong written and verbal communication skills, including the ability to create clear reports, presentations and other client deliverables.


• Client collaboration: Confidence working with a range of stakeholders, listening to different perspectives and building effective working relationships.


• Delivery: Strong organisation and attention to detail, with the ability to manage your own activities, priorities and deadlines within a wider project team.


• Teamwork: A collaborative approach and willingness to learn from others, share knowledge and contribute to an inclusive, high\-performing team.


• Growth mindset: An interest in developing cyber, consulting and industry expertise and taking on increasing responsibility over time.

Additional experience that would be helpful

The following experience is helpful, but not essential:

• Previous experience in cyber security, technology, risk, transformation or consulting.


• Experience supporting projects or programmes using agile, waterfall or other delivery approaches.


• Relevant cyber security, risk or technology qualifications or certifications, or progress towards them.


• Experience using AI and other emerging technologies to support research, analysis, delivery or day\-to\-day ways of working.


• Experience working with large or complex organisations, or exposure to a particular industry sector.

We value different backgrounds and perspectives. If you bring relevant experience, curiosity and the ambition to build a career in Cyber Strategy \& Transformation, we encourage you to apply.

Connect to your business \- Technology and Transformation

Distinctive thinking, deep expertise, innovation and collaborative working. That’s what connects us. That’s what makes us Deloitte. If you want to help solve some of the biggest tech and transformational challenges around, join us. Together, we’ll make an impact that matters.

Cyber

The modern world is more complex than ever before, and we are navigating an ever\-changing landscape. We help clients to operate with resilience and grow with confidence to secure success and minimise risk.

Personal independence

Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to a number of audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints (e.g., in relat

This listing is from Indeed. View original listing ↗