Information Security Consultant - AI

Job Introduction

Handelsbanken combines a long‑established relationship banking model with secure, resilient, and customer‑focused technology. Our technology teams enable the Bank's decentralised way of working, delivering systems built for stability, trust, and long‑term value.

We are on a multi‑year technology and digital transformation journey to enhance customer experience and improve how colleagues work together. By modernising platforms, simplifying processes, and better connecting data and systems, we help relationship teams focus on customers and less on complexity.

Our decentralised culture extends to technology. Teams are trusted to take ownership, make informed decisions, and deliver sustainable, high‑quality solutions. We value engineering excellence, pragmatic problem‑solving, and strong collaboration across technology, business, and risk.

We offer technologists the opportunity to build lasting careers, deepen their expertise, and contribute to meaningful change. We look for people who care about quality, security, long‑term impact, and who want to shape the future of a relationship‑led bank.

We are seeking a versatile and proactive Information Security Consultant to join Handelsbanken UK which is currently undergoing a major technology transformation programme. The successful candidate will be embedded within a technology delivery team, playing a critical role in ensuring that security is integrated seamlessly into change initiatives from inception through delivery.

The Bank operates an model where information security consultants are embedded into work streams acting as the security lead for that delivery team. This is not a traditional advisory role – you will be actively participating in solving information security problems, working closely with engineers, product managers, and business stakeholders to identify, assess, and collaboratively solve security challenges and ensure the team can continue to deliver at pace.

This role will support the Efficiency and Automation workstream responsible for both agentic process automation, that streamlines business processes, and cutting‑edge data, machine learning, and GenAI capabilities that power data‑driven insights and solutions to solve real business challenges across the bank. You'll use your expertise to support the delivery of secure RPA, data and machine learning pipelines that serve as the foundation for our AI initiatives across both on‑premises and cloud platforms.

This is a unique opportunity to work on an exciting technology change programme, influencing the security posture of critical Bank systems while collaborating closely with engineers, product managers, and business stakeholders. You'll often operate independently of other security and privacy subject matter experts, so a broad and deep understanding of security and privacy domains is essential – from secure architecture and threat modelling to data protection and regulatory compliance.

If you thrive on autonomy, love solving complex problems, and want to see the real‑world impact of your work in a critical industry – this is the role for you.

• You will develop a deep knowledge of your work streams technology stack and business outcomes allowing you to not only identify security risks but identify and propose practical solutions to the team. This role is all about helping teams deliver securely not just calling out risks.
• You will lead risk & control assessments using the Banks defined processes, covering supplier due diligence, privacy impact assessments and project security.
• You will support your workstream identify and articulate risks, steering them towards appropriate treatment plans, documenting mitigating controls and ensuring these are actions within agreed time frames. You will operate in line with the Bank's Risk Management framework (including sub‑frameworks) and relevant risk and compliance policies and procedures, ensuring appropriate and timely escalation of any concerns to your line manager.
• You will provide specialist advice and interpretation of Information Security best practice and UK regulatory requirements to a range of…