NCC Group
Managing Consultant - Business Resilience

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Department: Cyber Services and Capabilities Location: GBR Cheltenham Jessop House
Description
Managing Security Consultant – Cyber Business Resilience and Recovery Location: Cheltenham, Manchester or London - occasional office presence and client site visits
Why this role? Do you thrive on helping organisations prepare for, withstand, and recover from cyber incidents? At NCC Group, you’ll be part of a team that bridges the gap between cyber operations and business continuity — ensuring our clients can respond confidently when disruption strikes. You’ll work across incident response readiness, cyber recovery planning, crisis management exercises, and resilience assessments that protect real-world business outcomes. It’s meaningful, high-impact work that blends strategy, governance, and hands-on resilience engineering.
Key Responsibilities
What you’ll do Build cyber resilience strategies: Design and deliver tailored cyber resilience and recovery frameworks that integrate business continuity, IT disaster recovery, and incident response. Assess and improve readiness: Conduct cyber resilience maturity assessments and tabletop exercises; identify and prioritise gaps in recovery capabilities. Design recovery playbooks: Create actionable recovery and communication plans aligned with NIST, ISO 22301, and industry best practice. Test and validate: Lead scenario-based simulations and recovery testing to validate processes, people, and technology readiness. Integrate with security operations: Collaborate with SOC and IR teams to align resilience and recovery capabilities with detection, containment, and response functions. Engage stakeholders: Translate technical findings into clear, business-relevant recommendations; present outcomes to executives and boards. Advise on resilience architecture: Support the design of resilient infrastructure, backup strategies, and cloud recovery configurations. Mentor and contribute: Coach junior consultants and share lessons learned through internal knowledge sessions and reusable playbook templates.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Skills, Knowledge and Expertise
What you’ll bring Strong experience in cyber resilience, business continuity, and disaster recovery consulting, ideally within complex enterprise environments. Practical understanding of incident response, crisis management, and cyber recovery operations. Familiarity with frameworks and standards such as ISO 22301, NIST CSF, NIST SP 800-34, and BS 65000. Proven ability to engage at all levels — from technical recovery teams to C-suite executives. Experience running or facilitating tabletop exercises, war-gaming sessions, or simulation testing. Knowledge of resilience tooling (e.g., backup orchestration, DR automation, configuration baselining). Strong written and verbal communication — able to produce concise reports and deliver persuasive presentations. Nice-to-haves (not show-stoppers) Exposure to cloud resilience (Azure/AWS/GCP) and hybrid recovery architectures. Experience with risk management frameworks (ISO 27005, FAIR). Understanding of supply chain resilience and third-party risk. Certifications such as CBCI, ISO 22301 Lead Implementer/Auditor, CISSP, CISM, or CRISC.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Benefits
What do we offer in return?
We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits: Flexible Working: Balance your work and personal life with our flexible working options. Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave. Medicash & Critical Illness Scheme Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme. Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities. Green Car Scheme: Drive green and save money with our eco-friendly car scheme. Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme. Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet. Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills