Senior Security Consultant in Governance, Risk & Assurance advising clients on information security. Leading engagements and delivering complex security programs while mentoring teams.
Responsibilities
Lead cyber governance, risk and compliance engagements
Engage with clients to understand their threat landscape and business context
Conduct risk and compliance assessments against recognised frameworks (e.g. ISO 27001, NIST, SOC 2)
Design, review and advise on the implementation and adoption of information security policies, standards, procedures and frameworks
Lead cyber and third-party risk assessments and evaluate supplier security posture
Produce clear, concise risk and compliance reports for executive and C-suite stakeholders
Contribute to thought leadership and continuous improvement
Requirements
Extensive experience of designing, leading and delivering cyber governance, risk and assurance outcomes
Strong knowledge of recognised cyber security frameworks and standards, including ISO/IEC 27001, NIS Directives, NIST
Demonstrable experience aligning security controls to MOD requirements such as DEFSTAN 05-138, JSP 440, JSP 604 and Defence Cyber Resilience policies
Experienced in applying UK Government security and assurance frameworks, including GovAssure, Cyber Assessment Framework (CAF), Defence Cyber Certification (DCC) and Government Standard (GovS) 007
Hold relevant academic or professional qualifications, such as an MSc in cyber security or related specialism, CISM, CISSP, PCIRM or ISO/IEC 27001 Lead Implementer or Lead Auditor certification
Eligible to work in the UK and able to obtain and maintain UK security clearances
Hold, or are actively working towards, Principal or Chartered Cyber Security Professional (ChCSP) status
Benefits
A collaborative and supportive environment in which you can grow and develop your career
The tools and opportunity to do work you can be proud of
A chance to work alongside some of the best people in the industry, who always seek to share their knowledge and experience
Hybrid working – we empower you to make smart choices about when and where to work to achieve great results
Senior IT - Security Engineer in IT - Security team designing and optimizing security concepts for payment processing company. Collaborating with IT engineering and operations teams on security implementations.
Director of ERP Security and Controls responsible for Oracle Fusion ERP Security architecture and compliance. Lead security and control strategies in a hybrid work setting at Labcorp.
Senior Security Engineer supporting end - to - end security architecture and compliance for healthcare AI startup. Designing Azure security solutions and partnering with engineering teams for integrated security throughout SDLC.
Embedded Systems Security Engineer developing and coordinating anti - tamper solutions for defense projects at HII's Mission Technologies division. Working closely with DoD and US Air Force teams to ensure security efficacy.
Junior Physical Security Specialist in Springfield, VA assisting with physical security aspects and supporting the personnel Security Team. Overseeing systems like access control and intrusion detection.
Cybersecurity Software Engineer protecting internal and customer - facing systems for automation specialists Teradyne. Focus on secure software development and incident response in defense and aerospace markets.
Vice President leading Technology Governance at LPL Financial, enhancing cyber program strategy and governance. Collaborating across teams to ensure compliance and risk management in financial services.
IT Support Specialist managing security - related issues for customers and support team in a rapidly growing IT company. Troubleshooting, audits, and guiding on best practices in cloud environments.