Cyber Essentials & Cyber Essentials Plus Assessor

We're Hiring: Cyber Essentials & Cyber Essentials Plus Assessor

Location: Doncaster, South Yorkshire (Hybrid Working)

Salary: Depending on experience

Job Type: Permanent, Full-Time

Company: TwentyFour IT Services Ltd

About TwentyFour IT

TwentyFour IT is an established and growing Managed IT Services and Cyber Security provider, headquartered in Doncaster, supporting organisations across Yorkshire and throughout the UK.

We specialise in delivering secure, reliable IT services alongside comprehensive cyber security solutions, helping businesses strengthen their security posture, manage cyber risks and achieve recognised security certifications.

As we continue to expand our cyber security and compliance services, we are looking for an experienced Cyber Essentials and Cyber Essentials Plus Assessor to join our team.

This is an excellent opportunity for a technically capable cyber security professional who enjoys working directly with customers, conducting security assessments and helping organisations improve their cyber resilience.

The Role

You will be responsible for delivering Cyber Essentials (CE) and Cyber Essentials Plus (CE+) assessments for organisations across a variety of sectors.

Working as part of our cyber security team, you will undertake technical assessments, review security controls, identify vulnerabilities and produce clear, accurate assessment reports in accordance with IASME and NCSC scheme requirements.

You will work with customers ranging from small businesses to larger organisations with more complex IT environments.

You must already hold current qualifications enabling you to conduct both Cyber Essentials and Cyber Essentials Plus assessments. Lead CE+ Assessor status is not required.

Key Responsibilities

• Independently conduct Cyber Essentials assessments, reviewing submissions and validating compliance with scheme requirements.
• Deliver Cyber Essentials Plus technical assessments in accordance with current IASME and NCSC methodologies.
• Perform internal and external vulnerability assessments using appropriate scanning and testing tools.
• Assess Windows, macOS, Microsoft 365, cloud services, endpoints and network infrastructure against the relevant security requirements.
• Evaluate security controls covering firewalls, secure configuration, access management, malware protection and security update management.
• Identify technical vulnerabilities, configuration weaknesses and non-compliance issues.
• Produce comprehensive, accurate and professional assessment reports.
• Clearly communicate assessment findings to technical and non-technical stakeholders.
• Manage assessment evidence, documentation and testing records in line with scheme requirements.
• Coordinate assessment activities, testing schedules and customer communications.
• Maintain current knowledge of Cyber Essentials scheme changes, emerging vulnerabilities and cyber security best practices.
• Collaborate with our internal cyber security and technical teams whilst maintaining the independence and impartiality required for certification assessments.

Essential Skills and Qualifications

Applicants must have:

• Current IASME Cyber Essentials Assessor qualification.
• Current IASME Cyber Essentials Plus Assessor qualification or recognised authorisation to conduct CE+ assessments.
• Practical experience delivering Cyber Essentials and Cyber Essentials Plus assessments.
• Strong understanding of the five Cyber Essentials technical control areas.
• Hands-on experience conducting vulnerability assessments and interpreting scanning results.
• Good working knowledge of Microsoft 365, Entra ID, Windows operating systems and endpoint security.
• Sound understanding of networking, firewalls, TCP/IP, remote access and security configurations.
• Experience assessing patch management, user access controls, multifactor authentication and malware protection.
• Ability to independently manage assessments from initial scoping through to reporting and completion.
• Excellent written communication and technical documentation skills.
• Strong analytical and problem-solving abilities.
• A professional, customer-focused approach.
• Full UK driving licence and willingness to attend customer sites when required.

Desirable Skills and Experience

The following would be advantageous, but are not essential:

• Cyber Scheme Vulnerability Assessment Plus (VA+) qualification.
• CREST, Cyber Scheme, CompTIA Security+ or equivalent cyber security certifications.
• Experience working within a Managed Service Provider (MSP), Managed Security Service Provider (MSSP) or security consultancy.
• Knowledge of Microsoft Intune, Conditional Access and endpoint management.
• Experience with vulnerability management platforms such as Nessus, Qualys or similar tools.
• Familiarity with ISO 27001, IASME Cyber Assurance or other security assurance frameworks.
• Experience with penetration testing methodologies or technical security validation.
• Understanding of cloud security across Microsoft Azure and Microsoft 365.
• PowerShell or other scripting experience.

You do not need to be a Lead Cyber Essentials Plus Assessor to apply.

What We Offer

• Competitive salary, dependent on qualifications and experience.
• Hybrid working arrangements if required.
• Company pension scheme.
• Ongoing professional development and funded training.
• Opportunities to develop broader cyber security assurance and consultancy skills.
• Exposure to varied customer environments and security technologies.
• A collaborative technical team with access to experienced cyber security professionals.
• The opportunity to play an important role in expanding an established cyber security and certification service.

Why Join TwentyFour IT?

At TwentyFour IT, cyber security is at the heart of what we do.

Our services extend beyond traditional IT support to include managed security, threat detection and response, vulnerability management, Zero Trust security, business continuity and cyber security compliance.

You'll be joining a business that takes cyber security seriously, invests in modern technologies and recognises the importance of technically competent professionals.

Unlike roles focused exclusively on repetitive assessments, this position offers the opportunity to work across a wide range of technologies, customer environments and security challenges.

You'll have the support of an established technical team whilst retaining ownership of your assessments and professional judgement.

Interested?

If you're a qualified Cyber Essentials and Cyber Essentials Plus Assessor looking for your next opportunity, we'd love to hear from you.

Apply through LinkedIn or contact TwentyFour IT Services directly for a confidential discussion.