Lead Security Consultant

The Lead Security Consultant will work across NESO, partnering with business and technology leaders to translate security strategy, policy and risk appetite into practical delivery. Acting as a trusted interface between the organisation and the Security function, the role will build a clear understanding of business priorities, transformation roadmaps and technology change, providing proportionate advice that enables secure outcomes.

The role will coordinate security input across programmes and projects, support Secure by Design, resolve security issues pragmatically, and ensure material risks are clearly understood, owned and managed. Through strong relationships, credible challenge and effective coordination, the Lead Security Consultant will help NESO embed security into decision-making and deliver maximum value from its security capabilities.

This role can be based from Wokingham or Warwick, and we continue to offer hybrid working from office and home.

This role is designated as requiring a National Security Vetting (NSV) clearance. You will normally need to have been a resident in the UK for the last five years to apply for the required level of clearance.

• Develop a strong understanding of organisational strategies, priorities, transformation roadmaps and delivery timelines, providing a holistic security view across programmes, projects and business areas.
• Act as a trusted security partner to business, digital, data and technology stakeholders, providing clear, timely and proportionate advice throughout the change and service lifecycle.
• Lead the coordination of security design, assurance and review activities across relevant Security teams, ensuring specialist input is aligned and delivered efficiently.
• Work closely with Security Architecture teams to ensure security mitigations are appropriately designed into solutions and aligned with NESO’s security principles, standards and risk appetite.
• Handle escalations and resolve security issues through pragmatic, business-focused decision-making while maintaining appropriate control of cyber and information security risk.
• Ensure material security risks and issues are identified, assessed and addressed, with residual risks clearly documented, assigned to accountable owners, understood and formally accepted where appropriate.
• Establish and continually improve ways of working between the Security function and organisational stakeholders, helping to embed security by design and enable consistent, effective security delivery.
• Assess demand and resource requirements across the organisational portfolio, prioritising activity and coordinating Security colleagues and specialist resources to provide appropriate coverage.

Applicants must have the right to work in the UK by the start of employment. Visa sponsorship may not be available for this role and will be considered in line with business requirements.

We’re forging the path, and we know we can’t do it alone. That’s why we need credible, collaborative security leaders who can combine sound judgement with a practical understanding of business delivery. In this case, we’re looking for someone who:

• Has significant experience in cyber or information security, including security consultancy, risk management, security assessment and the secure delivery of technology-enabled change.
• Can build trusted relationships, influence senior stakeholders and act as an effective bridge between business, delivery and technical security teams.
• Can translate complex technical and security requirements into clear business language, decisions and proportionate actions.
• Demonstrates strong problem-solving skills and can develop pragmatic solutions that balance delivery objectives with…