Security Consultant

Security Consultants advise clients across strategy, GRC, technical transformation, M&A diligence, and crisis. UK market is led by Big 4 (Deloitte, EY, KPMG, PwC), the boutiques (NCC, BAE Digital Intelligence, WithSecure Consulting, PA), and Accenture / Capgemini. The role rewards client-fluency as much as technical depth. ## Career milestones ### Year 0 (grad scheme) — Associate / Analyst _Salary: £35k–£45k_ Support seniors on engagements, run workshops, draft deliverables. ### Year 2–4 — Senior Consultant / Manager _Salary: £55k–£85k_ Own workstreams, lead small engagements, mentor juniors, sell follow-on work. ### Year 5–8 — Senior Manager / Associate Director _Salary: £85k–£130k_ Own multi-million engagements, account leadership, hire and grow a team. ### Year 8+ — Director / Partner _Salary: £140k–£400k+ (partner equity)_ P&L, sales, practice strategy, brand presence (speaking, publishing, regulator engagement). ## Core skills - Client communication and exec presence - Workshop facilitation - Deliverable craft (Word / PowerPoint / Visio) - Engagement scoping and pricing - Multi-framework fluency (ISO, NIST, SOC, PCI, sector-specific) - Selling and account management - Industry vertical knowledge (FS, healthcare, public sector, retail) - Team leadership across distributed engagements ## Recommended certifications - `security-plus` - `cissp` - `cism` - `iso-27001` ## First 90 days in the role Shadow 3 different engagement types. Read every recent proposal — pricing, scope, deliverables. Build a personal Rolodex of internal SMEs you can pull into bids. ## Common pitfalls Staying technical too long. Consulting promotes on chargeability and client-development; senior consultants who can't sell or run accounts get capped at Senior Manager.