Cyber Essential Project Engineer (Mix of day & night shifts)

About us

With over 80 current staff, ADM has been one of the United Kingdom’s leading and most trusted IT service partners since 1984. With staff averaging a stay of over 10 years since ADM’s establishment, It’s fair to say we offer a fun, friendly and challenging environment for hardworking staff to develop within.

ADM also recognise the importance of staff well-being and mental health, having earned the following recent awards:

• Winner 2021: South Kent Minds - Mental Health & Wellbeing Award (Business Category)
• Awarded 2022: Platinum Award - Kent & Medway Workplace Wellbeing Awards.

Job Description

This is a training role. Full, structured training will be given in the delivery of Cyber Essentials Basic and Cyber Essentials Plus assessments, so no prior Cyber Essentials experience is required. We are looking for a strong IT or security background and the right attitude. We will teach you the scheme itself, supported by mentoring from the Cyber Security and Compliance team.

Please note: The successful applicant must have their own suitable equipment, including a good PC and strong home connectivity.

What is Cyber Essentials?
Cyber Essentials is a UK Government-backed and industry-supported certification scheme designed to establish a baseline standard of essential cyber hygiene. It helps organisations protect themselves against the most common online threats by implementing minimum security best practices.
Levels of Certification

There are two distinct levels of certification available:

1. Cyber Essentials: A foundational tier verified through a self-assessment questionnaire that is independently reviewed and signed off by an external certification body.

2. Cyber Essentials Plus: A higher-assurance level that includes the basic requirements plus an independent, hands-on technical audit and vulnerability scan of your actual IT infrastructure.

Primary Role

• Delivering Cyber Essentials Basic and Cyber Essentials Plus assessments as part of the Cyber Security and Compliance team, working to the scheme requirements you will be trained in.
• Conducting scoping exercises with clients to determine in-scope users, devices, cloud services and business systems.
• Reviewing client environments against the Cyber Essentials technical controls and identifying areas of non-compliance.
• Providing clear remediation guidance to clients to close compliance gaps and reduce security risk.
• Performing technical validation for Cyber Essentials Plus assessments, including device reviews, vulnerability checks and security control verification.
• Producing Cyber Essentials reports, compliance summaries and supporting documentation.
• Managing assessments from initial engagement through to certification, with support from the Cyber Security team.
• Working closely with clients to achieve certification within agreed timescales.
• Progressing from supported delivery to running assessments independently as training is completed.

Secondary Role

• Providing cyber security support and consultancy for escalated Service Desk tickets.
• Assisting with vulnerability management, including identifying, prioritising and reporting on security vulnerabilities.
• Supporting Microsoft 365 security projects, including Microsoft Entra ID, Intune, Conditional Access and Multi-Factor Authentication deployments.
• Reviewing device compliance, operating system support status and endpoint security controls.
• Assisting with security audits, risk assessments and compliance reviews.
• Producing technical documentation, client reports, assessment evidence and user guidance.
• Keeping up to date with Cyber Essentials requirements, NCSC guidance, Microsoft security best practices and emerging threats.
• Supporting wider cyber security and compliance projects as required.

Training and Development

• Full training provided in Cyber Essentials Basic and Cyber Essentials Plus delivery, including scoping, assessment, technical testing and reporting.
• Structured onboarding, shadowing experienced assessors before taking on your own client work.
• Ongoing mentoring and support from the Cyber Security and Compliance team.
• Time and support to build knowledge of Microsoft security technologies, vulnerability management and compliance frameworks.
• Funded Microsoft and cyber security certifications, with study time supported.
• Clear development path within the Cyber Security and Compliance team.

Personal Skills

• Able to explain technical security requirements in plain English to technical and non-technical audiences.
• Able to understand client business needs and balance security recommendations against operational reality.
• Strong attention to detail when reviewing configurations, inventories and compliance evidence.
• Able to identify risks and give practical, achievable remediation advice.
• Confident leading client meetings and presenting findings, or willing to develop this with support.
• Able to work independently while collaborating with colleagues across the business.
• Comfortable managing several client engagements at once.
• Professional and approachable with clients and colleagues.
• Keen to learn, with a genuine interest in cyber security and compliance.

Essential Skills and Experience

• Strong understanding of IT infrastructure, including Windows, Microsoft 365, networking and endpoint management.
• Working knowledge of cyber security principles, including secure configuration, access control, malware protection and software updates.
• Experience supporting and troubleshooting Microsoft 365 environments.
• Experience supporting Windows, macOS, Android and iOS devices.
• Ability to identify technical risks and communicate practical recommendations.
• Experience producing technical documentation or customer-facing reports.
• Strong written and verbal communication skills.
• Excellent attention to detail and organisational skills.
• Ability to manage multiple projects and deadlines.
• A customer-focused approach, with the ability to build and maintain strong client relationships.

Desirable Skills and Experience

• Knowledge of Cyber Essentials and Cyber Essentials Plus requirements. Not essential, as full training is provided.
• Experience with vulnerability management platforms such as Qualys, Nessus, CrowdStrike Exposure Management, Microsoft Defender Vulnerability Management or similar.
• PowerShell scripting for automation, reporting, administration and security remediation.
• Exposure to Microsoft Intune, Microsoft Entra ID, Conditional Access and Microsoft Defender.
• Previous experience in a cyber security, compliance or technical consultancy role.
• Microsoft, Azure or cyber security certifications.
• Experience working within a Managed Service Provider environment.

In relation to this post, a background verification check may be requested before engagement.

Job Types: Full-time, Permanent

Pay: R20 000,00 - R24 000,00 per month

Application Question(s):

• Have you been the subject of any offences or other matter that might be relevant to the position? Failure to reveal information at this point, could lead to withdrawal of an offer of employment, if relevant.
• Please take a moment to share with us why you are interested in working for our organisation and what specifically attracted you to this role. We value your insights and look forward to learning more about your motivations and interests in joining our team.
• Please confirm that you have your own suitable equipment, including a good PC and strong home connectivity

Work Location: Remote