Senior IT Security Consultant

Company Description Join Netcompany in leveraging technological innovations to foster societal transformation. As one of the fastest growing technology companies, we are disrupting the marketplace and revolutionizing the way businesses operate. Our vision is to be the leading digital challenger in Europe whilst evolving the next generation of IT consulting. Operating across both public and private sectors, we offer a comprehensive range of services from product design and engineering, digital strategy, data services & management (Machine Learning and AI), cloud migration to program delivery and service operations, our offerings are designed to meet diverse business needs.

Job Description We are looking for an experienced IT security professional to join our team to support our customers defining and managing their security posture and to also work internally on security  projects within our organisation. As an Senior IT Security Consultant within Netcompany, you will be responsible for supporting our UK company’s computer security. In parallel the role will require the IT Security Senior Consultant to support our customers – whether that be helping us to deliver our products and services securely in alignment with our customers’ governance processes;

or helping customers with their own security maturity journey. You will work closely with our customers, security colleagues and various departments within the UK business to ensure security and privacy by design.

Your role will involve assisting and advising staff and customers on IT security practices, internal and external assurance activities, and staying up-to-date with the latest security standards and industry best practices to continuing building our security culture. The successful candidate will have excellent analytical and problem-solving skills, strong attention to detail, a willingness to learn, and the ability to communicate effectively and pragmatically with a diverse range of technical and non-technical audiences at all levels.

Key Responsibilities Identify, assess, treat and monitor security risks to IT systems Conduct threat assessments and maintain threat awareness Design and assist with the implementation of proportionate security controls Collaborate on the design of new systems to ensure security by design Develop and report on security metrics to effectively manage risk Upgrade existing security systems or design new ones tailored to business needs Conduct security audits, controls tests and assurance exercises  Ensure compliance with customer, international and national security standards and regulation Prepare technical documentation and reports for both technical and non-technical audiences.

Share knowledge and expertise, fostering a culture of security awareness within the organisation and with our customers. Support customer organisations with defining, improving and managing their security posture. Provide support to the IT, Personnel and Facilities Security Managers including incident response and security helpdesk assistance Qualifications Proven experience in IT security

Knowledge of General Data Protection Regulations and privacy by design

Experience of security frameworks and standards (e.g. ISO
27001, CE+, COBIT, NIST
800-53) Experience in security by design, Dev Sec Ops , etc  General knowledge of IT architecture e.g. networking, databases, operating systems Excellent problem-solving and analytical skills and willingness to learn Demonstrable experience in pragmatically applying security policies, standards and patterns to build secure products and a positive security culture. Proven experience of delivering security improvements within a large organisation (Regulated industries, UK Defence and government departments are of particular interest).

Certifications such as CISMP, COMPTIA Security+, CISSP, CISM. You may be actively working towards these or can demonstrate equivalent skills and experience. Knowledge of the NCSC cloud security principles and experience with a particular cloud vendor such as Azure, AWS or Google Cloud. Knowledge of HM government standards and processes including NCSC Guidance, GovS
007,…