Information Security Consultant

Are you an experienced Information Security Consultant looking to make a real impact across critical client environments? Our client, a specialist cyber security consultancy, is seeking a talented security professional to join their growing team, delivering consultancy services across information assurance, governance, risk, and compliance programmes.

Please note:
Active SC (Security Check) Clearance is essential for this position. Applications from candidates without current SC clearance cannot be considered.

Working closely with senior security stakeholders, you will support the delivery of cyber and information security consultancy services to a diverse client base.

This role combines risk management, compliance, assurance, and security advisory responsibilities, with a particular focus on recognised frameworks including ISO 27001, NIST CSF, Secure by Design, and government security standards.

You will often work directly within client security teams, providing expert guidance on security governance, risk management, and regulatory compliance.

• Deliver risk and information security consultancy across multiple client engagements.
• Conduct risk assessments and support risk management activities.
• Advise clients on security frameworks including ISO 27001, NIST CSF, Cyber Assessment Framework (CAF), and JSP
  440.
• Support Cyber Essentials, Gov Assure, threat modelling, cyber exercising, and assurance activities.
• Perform compliance audits, including ISO 27001, ISO 9001, and Cyber Essentials assessments.
• Support the maintenance of security certifications and accreditations.
• Analyse findings and present recommendations clearly to stakeholders.
• Stay up to date with evolving security standards, regulations, and industry best practice.
• Independently represent the consultancy while embedded within client environments.

• Minimum 3 years' experience in Information Security, Cyber Security, Assurance, or a related IT security role.
• Previous experience in information security, assurance, governance, risk, and compliance functions.
• Experience conducting security risk assessments and developing mitigation strategies.
• Strong understanding of risk management methodologies, including NIST SP 800-30.
• Experience implementing and maintaining ISO 27001 and NIST-based security frameworks.
• Excellent stakeholder engagement and communication skills.
• Ability to manage multiple projects and client priorities simultaneously.

• Knowledge of Microsoft Azure and/or AWS environments.
• Understanding of GDPR, Data Protection Act 2018, FOI legislation, and related governance requirements.
• Degree in Cyber Security, Information Security, Computer Science, or a related discipline.
• Professional certifications such as CISSP, CISM, or CISA.
• Security testing or penetration testing qualifications.

This is an opportunity to join a highly regarded cyber security consultancy delivering impactful security programmes across regulated and government-focused environments. You'll gain exposure to challenging security projects while working alongside experienced security professionals and helping clients strengthen their cyber resilience

Unfortunately we cannot offer sponsorship at this time.