Logo of Huzzle

Principal Consultant

  • Job
    Full-time
    Expert Level
  • Consulting
    IT & Cybersecurity
  • Madrid
  • Quick Apply

AI generated summary

  • You must have knowledge of NIST, ISO 27001, and PCI DSS; experience in risk assessments; strong communication skills; and technical expertise in areas like SOC, Zero Trust, and cloud security.
  • You will mentor a consulting team, build client relationships, conduct assessments, translate findings into remediation plans, ensure compliance with policies, and support sales efforts.

Requirements

  • Minimum Required Skills
  • You will have working knowledge of core control frameworks, such as, NIST, SANS Top 20 CSC, ISO 27001, Privacy, NIS and CAF.
  • Have experience of delivering risk assessments using common risk methodologies like ISO 27005, IRAM and FAIR.
  • Have experience of common compliance standards such as PCI DSS.
  • You are diligent and time conscious to deliver projects on time and in budget, and to a high level of customer satisfaction – exercising customer care at all times.
  • Demonstrate a strong ability to develop a rapport with customers and to engender long lasting trusted relationships.
  • Have strong business, consultancy and technical skills within the cyber security industry.
  • Excellent communication, consulting soft skills and presentation skills.
  • Exceptional written communication and reporting skills.
  • Desired Skills and Qualifications
  • Demonstrable capability and qualifications across multiple of the following technical areas is advantageous.
  • SOC / SIEM assessments and tooling
  • Identity and Zero trust
  • Security design and architecture
  • Operational Technology (OT)
  • ISA 62443
  • Artificial Intelligence
  • Cloud related certifications across AWS/GCP/Azure
  • CISM / CISSP / CRISC / ISO 27001 LI/LA / CISA

Responsibilities

  • Build and mentor a team of technically gifted and cyber aware consultants.
  • Build and maintain sustainable trusted client relationships through high-quality delivery and business development activities.
  • Conduct onsite and remote activities to advise, assess, analyse, and report in line with the engagement and client business requirements. This will involve meeting client stakeholders, conduct of documentation reviews, auditing technical solutions and systems as well as presenting information and advice to senior business partners.
  • Translate the technical and non-technical findings from an assessment or exercise into relevant, actionable remediation road maps for customers.
  • Responsible for adhering to all internal policy and procedures in relation to security and quality best practice.
  • Engage heavily with Sales colleagues to identify and build an enviable client base.
  • Assist with sales proposals, bids and tenders for delivery of Assurance & Compliance services.

FAQs

What is the role of a Principal Consultant at NCC Group?

The Principal Consultant is responsible for leading the development of capability and team presence within the Spain Consulting and Implementation division, building and mentoring a team, maintaining client relationships, and delivering a range of cyber assurance services.

What are the core services offered by NCC Group in the Consulting and Implementation division?

The core services include strategy and governance, on-demand augmentation roles, data discovery and mapping, risk advisory and assurance, business resilience, data privacy and GDPR ISO 27001 assessments, supply chain assurance, incident response readiness and planning, cyber maturity assessments, and incident response planning.

What qualifications and skills are required for the Principal Consultant position?

Candidates should have knowledge of core control frameworks (NIST, ISO 27001), experience in risk assessments, compliance standards (PCI DSS), strong technical and consultancy skills in cybersecurity, excellent communication abilities, and the ability to build trusted client relationships.

Is prior consulting experience necessary for this role?

Yes, extensive prior consulting experience and commercial exposure within the cyber and assurance field are necessary for this role.

Will the Principal Consultant have opportunities for business development?

Yes, the Principal Consultant will engage heavily with Sales colleagues to identify and build a strong client base and will assist with sales proposals, bids, and tenders.

What kind of team dynamics can be expected?

The Principal Consultant will be expected to build and mentor a team of technically gifted and cyber-aware consultants.

Are there opportunities for learning and professional development?

Yes, NCC Group offers comprehensive learning and development opportunities to support career growth.

What kind of work culture does NCC Group promote?

NCC Group promotes a culture that focuses on clients and customers, inclusivity, collaboration, continuous learning, and delivering high-quality results.

What benefits are offered to employees?

Benefits include flexible working arrangements, financial and investment offerings (like pension and life assurance), community and volunteering programs, wellness initiatives, and support for diversity and inclusion.

Are there mandatory pre-employment checks for this role?

Yes, the role involves mandatory pre-employment background checks due to the nature of the work at NCC Group, and candidates must be willing to undergo the vetting process.

At the heart of cyber innovation - helping to make the world safer and more secure

Technology
Industry
1001-5000
Employees

Mission & Purpose

We assess, develop and manage cyber threats across our increasingly connected society. We advise global technology, manufacturers, financial institutions, critical national infrastructure providers, retailers and governments on the best way to keep businesses, software and personal data safe. With our knowledge, experience and global footprint, we are best placed to help businesses identify, assess, mitigate & respond to the risks they face. We are passionate about making the Internet safer and revolutionising the way in which organisations think about cyber security. Headquartered in Manchester, UK, with over 35 offices across the world, NCC Group employs more than 2,000 people and is a trusted advisor to 15,000 clients worldwide.