Job Title: Cyber Security Consultant (Healthcare - DSPT/CAF Specialist)Role SummaryWe are looking for a highly skilled Cyber Security Consultant with proven healthcare sector experience and deep expertise in the DSPT and Cyber Assessment Framework (CAF). The successful candidate must have hands-on experience writing and implementing policies aligned to DSPT/CAF. Experience with EDRMS solutions is strongly desirable.Key ResponsibilitiesLead cyber security delivery for healthcare clients, ensuring full alignment with DSPT and CAF requirements.Produce high-quality policies, procedures, and governance documentation mapped directly to DSPT/CAF controls.Conduct security assessments, audits, and evidence reviews to support DSPT submissions and CAF assurance.Provide clear, actionable security advice to technical and non-technical stakeholders.Support security design, risk mitigation, and assurance activities across healthcare environments.Advise on secure configuration and governance for EDRMS platforms (desirable).Contribute to incident response planning and readiness activities.Essential ExperienceHealthcare cyber security experience (NHS or wider healthcare ecosystem).Mandatory DSPT and CAF experience, including:Completing DSPT/CAF assessmentsCreating security evidence and documentationWriting DSPT/CAF-aligned policiesStrong working knowledge of healthcare regulatory/security requirements (NHS Digital, IG, UK data protection).Ability to produce concise, high-quality security documentation and reports.Solid grounding in security risk management and common security frameworks (NCSC, ISO 27001, NIST, etc.).Excellent communication, advisory, and stakeholder engagement skills.DesirableExperience with EDRMS implementation, security configuration, or governance.Relevant certifications (e.g., CISSP, CISM, ISO 27001 Lead Auditor/Implementer).Experience supporting DPIAs, cloud security assessments, or security architecture reviews. Eames Consulting is acting as an Employment Business in relation to this vacancy.
