Consultant, Consulting

About Crowe 

Crowe is a leading national firm offering audit, tax, advisory, and consulting services with global reach and local expertise. As an independent member of Crowe Global, one of the top 10 accounting networks worldwide, we have access to over 46,000 professionals across 150+ countries and more than 800 offices globally.  

Our vision is to be a leader in our chosen markets, creating lasting value for our clients and our people and being a trusted partner in their success.  

We are dedicated to driving client success, empowering our people, embracing sustainability, delivering technological change and acting in the public interest.  

We are seeking a motivated Consultant to join our growing Cyber Security consulting team. This role is suited to someone with relevant early-career experience who is looking to develop their career in cyber security advisory, governance, risk and assurance within a supportive professional services environment.

You will work alongside experienced cyber security specialists to help clients understand their cyber risks, assess the maturity of their security arrangements and improve their resilience to cyber incidents. The role offers exposure to a broad range of client engagements across different sectors, with opportunities to build your knowledge of cyber security frameworks, regulatory expectations and good practice.

As a Consultant, you will support the delivery of client work by gathering and reviewing evidence, contributing to assessments, documenting findings and helping prepare clear, practical outputs for clients. You will be expected to bring curiosity, strong attention to detail and a willingness to learn, while developing the confidence to engage with both technical and non-technical stakeholders.

Key Responsibilities

• Support cyber security maturity assessments, governance reviews, risk assessments and assurance engagements under the guidance of more experienced colleagues.
• Assist with gathering, reviewing and organising client evidence, including policies, procedures, risk registers, supplier documentation, incident response materials and control artefacts.
• Help identify cyber security risks, control gaps and areas for improvement, and contribute to clear, evidence-based observations and recommendations.
• Contribute to the development and review of cyber security policies, procedures, standards, response plans and supporting governance documentation.
• Support third-party and supplier cyber security reviews by assessing due diligence information and helping document practical findings.
• Prepare first drafts of client reports, meeting notes, working papers, presentations and other deliverables for review by senior team members.
• Participate in client meetings and workshops, helping to capture key discussion points, actions, risks and follow-up items.
• Work collaboratively with colleagues across Consulting and the wider firm to support high-quality delivery for clients.
• Maintain awareness of cyber security developments, threats, regulatory expectations and industry good practice relevant to client work.
• Support internal team initiatives, including methodology development, knowledge sharing, service development and marketing activity where appropriate.

Key Skills

• A developing understanding of cyber security, information security, governance, risk management or technology controls.
• Ability to analyse information, identify key points and draw sensible conclusions from client evidence and discussions.
• Good written communication skills, with the ability to produce clear, structured and accurate working papers, reports and presentation materials.
• Good verbal communication skills, with confidence to ask questions, listen carefully and engage professionally with colleagues and clients.
• Strong attention to detail and a commitment to producing high-quality work.
• Ability to manage time effectively, meet agreed deadlines and keep senior team members informed of progress, issues and dependencies.
• A proactive, curious and problem-solving mindset, with a willingness to learn and take feedback positively.
• Collaborative and team-oriented, with the ability to build effective working relationships and contribute positively to team delivery.
• Comfortable working across multiple tasks or engagements with appropriate support and supervision.
• Good working knowledge of Microsoft Word, Excel, PowerPoint and Outlook, with the ability to prepare professional client-facing materials.

Qualifications And Understanding

• 1-2 years of relevant experience in cyber security, information security, technology risk, IT audit, governance, risk and compliance, or a related advisory or assurance role.
• Awareness of recognised cyber security and information security frameworks, such as NIST CSF, ISO 27001, Cyber Essentials or similar standards.
• An understanding of common cyber security domains, including access management, incident response, vulnerability management, third-party risk, security awareness and policy governance.
• Relevant practical experience, a degree, apprenticeship, professional qualification or equivalent background in cyber security, information technology, computer science, risk management or a related field would be beneficial.
• Progress towards, or interest in pursuing, relevant certifications such as CISMP, Security+, ISO 27001 Foundation/Lead Implementer, or equivalent would be advantageous but is not essential.
• Experience in a consulting, professional services, internal audit, risk, compliance or client-facing environment would be helpful, but we are also interested in candidates with strong potential and a clear interest in cyber security consulting.