Xcede
Cyber Security Consultant

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Security Capability Consultant
Contract: 6 months initially
IR35: Inside IR35
Location: Liverpool Street, London – onsite initially, moving to hybrid
Start: ASAP
We’re currently supporting a major global financial services organisation with an exciting Cyber Security capability and controls mapping programme.
We’re looking for an experienced Cyber Security Consultant / Security Architect / GRC Consultant who can assess the organisation’s current security landscape, identify and catalogue security technologies, and map capabilities and controls against recognised cybersecurity frameworks.
You’ll work across a complex enterprise environment, engaging with security, technology and business stakeholders to understand the organisation’s current security capabilities and how its technology estate supports security outcomes.
Key Responsibilities
- Identifying and cataloguing security tools and technologies across the organisation.
- Investigating IT platforms that provide security outcomes, even where security isn't their primary purpose.
- Building and maintaining a central inventory of security capabilities and supporting technologies.
- Mapping security technologies, capabilities and controls against frameworks including NIST CSF, NIST 800-53, CIS Critical Security Controls and CRI Profile.
- Establishing a baseline security capability model.
- Benchmarking current security capabilities against recognised industry frameworks and standards.
- Running workshops, interviews and discovery sessions with security and technology stakeholders.
- Challenging assumptions and validating information from multiple sources.
- Producing clear analysis, executive reporting and progress updates.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
We're looking for someone with a strong understanding of cybersecurity principles, controls and security architecture, with experience working across several security domains such as:
- Identity & Access Management
- Endpoint Security
- Vulnerability Management
- Network Security
- Detection & Response
- Data Protection
- Cloud Security
- Security Monitoring & Logging
You should also have practical experience working with one or more recognised security frameworks, ideally including:


Get help with your application
Your very own career expert that helps elevate your application to the next level.
- NIST Cybersecurity Framework (CSF)
- NIST 800-53
- CIS Critical Security Controls
- CRI Profile
Crucially, you'll have experience mapping technologies, controls or processes to security frameworks, control objectives or desired security outcomes.
Key Skills
- Cybersecurity / Information Security
- Security Controls & Control Mapping
- Security Capability Assessment
- Cybersecurity Frameworks
- NIST / CIS / CRI
- Security Maturity Assessments
- Security Architecture
- GRC / Cyber Risk
- Stakeholder Engagement
- Workshop Facilitation
- Strong analytical and investigative skills
- Excellent written and verbal communication
Desirable
- Financial services or other regulated industry experience.
- Experience developing security capability or maturity models.
- Experience working within large, complex enterprise environments.
If you have experience assessing enterprise security capabilities, mapping controls against frameworks and working with senior stakeholders, we'd be keen to hear from you.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location