*DSPT Experienced* Cyber Security Consultant
- Location
- London
- Salary Package
- £600 - £700 per day + Inside IR35
- Posted
- 8th Dec 2025
- Consultants
- Danny Meehan
Job Title: Cyber Security Consultant (Healthcare - DSPT/CAF Specialist)
Role Summary
We are looking for a highly skilled Cyber Security Consultant with proven healthcare sector experience and deep expertise in the DSPT and Cyber Assessment Framework (CAF). The successful candidate must have hands-on experience writing and implementing policies aligned to DSPT/CAF. Experience with EDRMS solutions is strongly desirable.
Key Responsibilities
- Lead cyber security delivery for healthcare clients, ensuring full alignment with DSPT and CAF requirements.
- Produce high-quality policies, procedures, and governance documentation mapped directly to DSPT/CAF controls.
- Conduct security assessments, audits, and evidence reviews to support DSPT submissions and CAF assurance.
- Provide clear, actionable security advice to technical and non-technical stakeholders.
- Support security design, risk mitigation, and assurance activities across healthcare environments.
- Advise on secure configuration and governance for EDRMS platforms (desirable).
- Contribute to incident response planning and readiness activities.
Essential Experience
- Healthcare cyber security experience (NHS or wider healthcare ecosystem).
- Mandatory DSPT and CAF experience, including:
- Completing DSPT/CAF assessments
- Creating security evidence and documentation
- Writing DSPT/CAF-aligned policies
- Strong working knowledge of healthcare regulatory/security requirements (NHS Digital, IG, UK data protection).
- Ability to produce concise, high-quality security documentation and reports.
- Solid grounding in security risk management and common security frameworks (NCSC, ISO 27001, NIST, etc.).
- Excellent communication, advisory, and stakeholder engagement skills.
Desirable
- Experience with EDRMS implementation, security configuration, or governance.
- Relevant certifications (e.g., CISSP, CISM, ISO 27001 Lead Auditor/Implementer).
- Experience supporting DPIAs, cloud security assessments, or security architecture reviews.
Eames Consulting is acting as an Employment Business in relation to this vacancy.
Apply for this job
Danny Meehan
Senior Consultant