Careers

Overview 

Toro is expanding its network of experienced Cyber Resilience Consultants to support the delivery of an international cyber resilience programme across the UK and overseas. 

We are seeking independent consultants with experience in cyber security, resilience, governance, risk, training delivery and capability development who are interested in supporting future project-based assignments. 

Assignments may range from short-term advisory engagements through to larger multi-month delivery workstreams and may involve remote, hybrid or international on-site delivery. 

This opportunity is particularly suited to experienced consultants who combine strong technical or governance expertise with excellent stakeholder engagement and communication skills.

Nature of Engagement 

This opportunity is intended for independent consultants interested in joining Toro's preferred delivery network. 

Successful applicants may be considered for future project-based assignments aligned to their expertise, availability, security clearance status, and client requirements. 

Please note that inclusion within the consultant network does not guarantee immediate project allocation or a minimum volume of work. 

Typical Assignment Areas 

Depending on client requirements, consultants may support: 

Cyber Resilience Advisory 

• Cyber resilience assessments and reviews 

• Governance, risk, and assurance activities 

• Cyber maturity and capability assessments 

• Strategic cyber security advisory services 

• Policy and framework development 

Technical Cyber Security Support 

• Security control reviews 

• Security architecture input 

• Technical risk assessments 

• Security improvement planning 

• Cyber resilience enhancement activities 

Training & Capability Building 

• Development of cyber security training materials 

• Workshop facilitation 

• Tabletop exercises 

• Executive awareness sessions 

• Technical and non-technical training delivery 

Programme Support 

• Stakeholder engagement 

• Discovery and needs assessment activities 

• Delivery planning 

• Reporting and evaluation 

• Lessons learned and continuous improvement activities 

Core Skills & Experience 

We are interested in consultants with experience in one or more of the following areas: 

• Cyber security and information assurance 

• Cyber resilience and business resilience 

• Cyber governance, risk, and compliance 

• Information security management systems (ISO 27001) 

• NIST Cybersecurity Framework 

• Security strategy and operating models 

• Data protection and privacy 

• Security awareness and training 

• Incident preparedness and response 

• Third-party and supply chain risk management 

Essential Skills 

Successful consultants will typically demonstrate: 

• Strong stakeholder engagement skills 

• Excellent written and verbal communication 

• Experience delivering consultancy engagements 

• Ability to adapt content and delivery style to different audiences 

• Experience working to agreed deliverables and reporting requirements 

• Ability to operate independently and manage workstreams effectively 

Desirable Experience 

Experience in one or more of the following areas would be advantageous: 

• International development or overseas delivery programmes 

• Government or public sector environments 

• Security sector reform or resilience programmes 

• Delivery in culturally diverse environments 

• Training design and facilitation 

• Security architecture or technical security leadership 

• Existing UK security clearance 

Security & Availability 

Depending on assignment requirements, consultants may be required to: 

• Be eligible for UK security vetting (BPSS, SC or DV) 

• Travel internationally, sometimes at short notice 

• Work flexibly across time zones 

• Support remote, hybrid, or on-site delivery 

Personal Attributes 

We are particularly interested in consultants who demonstrate: 

• Professionalism and integrity 

• Strong cultural awareness 

• Adaptability and resilience 

• Pragmatism and sound judgement 

• Collaborative working style 

• Commitment to high-quality delivery 

Engagement Model 

• Engagement Type: Independent Consultant / Associate Consultant 

• Assignment Basis: Fixed-price or time-and-materials work packages 

• Duration: Project-based assignments ranging from short-term support through to longer delivery engagements 

• Location: UK and international opportunities (remote, hybrid, or on-site depending on assignment) 

• Start Dates: Vary according to client requirements and programme demand 

Why Join the Network? 

Successful consultants will have the opportunity to contribute to high-impact cyber resilience programmes supporting governments, public sector organisations, and international stakeholders, while maintaining the flexibility of independent consulting work.