Senior Security Consultant

Work where work matters.

We are a global technology group built for what's next, offering high calibre professionals the platform for high stakes work, the kind of work that defines an entire career. When you join us, you're not just taking on projects, you're solving problems that don't even have answers yet.

You will join an exclusive roster of talent that global leaders, including Google, Snap, Diageo, Pay Pal, and Jaguar Land Rover call when deadlines seem impossible, when others have already tried and failed, and when the solution absolutely has to work.

Forget routine consultancy. You will operate where technology, design, and human behaviour meet to deliver tangible outcomes, fast. This is work that leaves a mark, work you’ll be proud to tell your friends about.

We look for people who embody:

Innovation to solve the hardest problems.

Accountability for every result.

Integrity always.

As a Senior Security Consultant within the Governance, Risk & Compliance (GRC) practice, you will lead and deliver a broad range of cybersecurity, governance, risk and assurance engagements across both public and private sector organisations.

This is a client-facing consultancy role requiring a strong balance of strategic advisory capability, practical delivery experience and commercial awareness. You will work closely with client stakeholders at all levels, helping organisations strengthen their security posture, manage cyber risk, improve compliance maturity and implement pragmatic security governance frameworks aligned to business objectives.

The successful candidate will possess strong experience across information security governance, risk management, security compliance and assurance activities, with practical knowledge of frameworks and standards such as ISO/IEC 27001, NIST, Cyber Essentials, CIS Controls and the NCSC Cyber Assessment Framework (CAF).

You will be expected to lead engagements, support business development activities, contribute to proposals and Statements of Work (SoWs), mentor junior consultants and help shape the continued growth and capability of the Secure Advisory practice.

This role is designed for impact, and we believe our best work happens when we connect. While we operate a flexible model, we expect you to spend regular quality time on site (at our offices or a client location) for collaboration sessions, customer meetings, and internal workshops.

• Lead and deliver a range of Governance, Risk & Compliance (GRC) and cybersecurity consultancy engagements across public and private sector clients.
• Provide subject matter expertise across information security governance, risk management, compliance, assurance and security best practices.
• Deliver security assessments, audits, gap analysis, risk assessments, maturity reviews and remediation planning activities aligned to recognised frameworks and standards.
• Support clients in the development, implementation and continual improvement of Information Security Management Systems (ISMS) and associated governance processes.
• Produce high-quality client deliverables including reports, policies, standards, procedures, risk registers, executive summaries and roadmap documentation.
• Facilitate workshops and engage with stakeholders at all levels, including technical teams, operational management and senior leadership.
• Support clients in understanding and managing cyber risk in a pragmatic and business-aligned manner.
• Conduct supplier and third-party assurance activities, including due diligence and control assessments where required.
• Contribute to business development activities including proposal responses, Statements of Work (SoWs), bid support and pre-sales engagements.
• Support and mentor junior consultants through knowledge sharing, quality assurance activities and collaborative delivery.
• Maintain awareness of emerging threats, regulatory developments, industry trends and evolving security frameworks and standards.
• Contribute to the ongoing growth, capability and maturity of the Secure Advisory practice.

Essential

• Strong experience delivering Governance, Risk & Compliance (GRC) and information security consultancy services within client-facing environments.
• Practical experience implementing, assessing, or managing security frameworks and standards such as ISO/IEC 27001, NIST, Cyber Essentials, CIS Controls, PCI DSS, and NCSC Cyber Assessment Framework (CAF).
• Strong understanding of information security governance, risk management, compliance and assurance principles.
• Experience conducting risk assessments, control reviews, compliance gap assessments and security maturity assessments.
• Experience developing and maintaining Information Security Management Systems (ISMS), including supporting policies, standards and procedures.
• Ability to produce clear, high-quality documentation and reports suitable for both technical and non-technical audiences.
• Strong stakeholder management and communication skills, with the ability to engage…