Risk & Controls Consulting - Enterprise Security

Reference: ayoje18wcve5kn3oh49s

Join a specialist team delivering risk and controls consulting across enterprise security environments. In this role, you will help organisations understand, manage and improve their information security, technology risk and control frameworks. You will work with stakeholders across business and technology functions to assess current capabilities, identify weaknesses and develop practical, sustainable solutions aligned with regulatory expectations and business objectives.

Your responsibilities will include planning and delivering risk and controls assessments, reviewing security policies and procedures, evaluating the design and operating effectiveness of controls, and documenting findings and recommendations. You will support activities such as access governance, identity and privileged access management, vulnerability and patch management, security monitoring, incident response, third-party risk, data protection and resilience. You will prepare clear reports and presentations for senior stakeholders, track remediation activity and provide advice on improving governance, risk management and control maturity. The role may also involve supporting audits, regulatory reviews, client engagements and the development of methodologies, tools and thought leadership materials.

We are looking for a confident professional with experience in enterprise security, technology risk, internal controls, IT audit or a related consulting environment. You should have a strong understanding of information security principles, risk assessment techniques, control frameworks and relevant standards such as ISO 27001, NIST, COBIT or similar. Experience interpreting regulatory requirements and translating them into practical control improvements is highly valued. Excellent analytical, communication and stakeholder management skills are essential, along with the ability to manage multiple priorities and produce high-quality written work. Professional certifications such as CISA, CISSP, CRISC, CISM or equivalent qualifications would be advantageous. This opportunity suits someone who combines technical curiosity with commercial awareness and enjoys helping organisations strengthen their security and control environments.

COMPETITIVE SALARY
Added 06/10/2026
Reference: ayoje18wcve5kn3oh49s

Risk & Controls Consulting - Enterprise Security

London, England, United Kingdom Permanent Risk Analyst

Other similar jobs

Risk & Controls Consulting - Cyber

Added 07/10/2026

We are seeking an experienced professional to join a Cyber Risk and Controls Consulting team. In this role, you will help organisations identify, assess and manage technology and cyber risks across complex business environments. You will work with stakeholders at different levels to understand their objectives, evaluate existing controls and provide practical recommendations that strengthen security, resilience and regulatory compliance. Your responsibilities will include planning and delivering cyber risk assessments, control reviews and maturity assessments; analysing security policies, standards, processes and technical safeguards; and identifying gaps against recognised frameworks and regulatory requirements. You will support the development of risk registers,...

Learn more

Assistant Manager - Cybersecurity Controls Testing Analyst – Global

Added 25/09/2026

We are seeking an Assistant Manager – Cybersecurity Controls Testing Analyst to support the assessment of technology and information security controls across a complex, global environment. In this role, you will help plan and deliver risk-based testing programmes covering areas such as access management, vulnerability management, change management, security operations, data protection, third-party risk and regulatory requirements. You will work with stakeholders across multiple regions and functions to understand control objectives, define testing approaches, gather evidence and evaluate whether controls are appropriately designed and operating effectively. Your responsibilities will include preparing testing plans and workpapers, performing walkthroughs and sample-based testing,...

Learn more

Cybersecurity Controls Testing Assistant Manager

Added 01/09/2026

We are seeking a Cybersecurity Controls Testing Assistant Manager to support the evaluation of information security controls across technology, business, and third-party environments. In this role, you will help assess whether controls are appropriately designed, implemented, and operating effectively against internal policies, recognised security frameworks, and applicable regulatory requirements. You will contribute to risk-focused testing plans, coordinate review activities, and provide clear, evidence-based conclusions to stakeholders. Key responsibilities include performing and reviewing control testing, documenting procedures and results, identifying control gaps, and assessing the impact of exceptions. You will work with control owners to obtain supporting evidence, challenge responses where...

Learn more

Senior Consultant, Technology Implementation, Third Party Management, Extended Enterprise, Cyber

Added 28/09/2026

We are seeking a Senior Consultant to support technology implementation and third-party management initiatives across an organisation’s extended enterprise and cyber risk landscape. This role will help clients understand, manage and improve the security, resilience and performance of their relationships with suppliers, partners, contractors and other external stakeholders. You will work closely with business, technology, procurement, risk and compliance teams to deliver practical solutions aligned with strategic objectives and regulatory expectations. Responsibilities will include leading or contributing to third-party risk assessments, due diligence reviews, control evaluations and remediation programmes. You will help design and implement technology-enabled processes for supplier onboarding,...

Learn more

Quality, Risk and Security

Added 08/10/2026

We are seeking an experienced Quality, Risk and Security professional to strengthen organisational assurance, improve operational resilience and support a culture of continuous improvement. The successful candidate will provide expert advice across quality management, enterprise risk, information security and compliance, helping teams identify issues, manage obligations and deliver consistently high standards. This is an opportunity to work across a broad range of functions, influence decision-making and contribute to the development of practical, effective governance frameworks. Key responsibilities will include maintaining and enhancing quality, risk and security policies, procedures, registers and reporting arrangements; coordinating risk assessments, internal reviews, audits and assurance...

Learn more

Information Security Officer (Cloud Security)

Added 14/09/2026

We are seeking an Information Security Officer (Cloud Security) to help protect cloud-based platforms, applications, data and services across a complex technology environment. This role will support the development and continuous improvement of cloud security strategies, policies, standards and controls, ensuring they align with business objectives, regulatory expectations and recognised security frameworks. You will work closely with technology, risk, architecture, engineering and operational teams to embed security throughout the design, delivery and maintenance of cloud services. Your responsibilities will include assessing cloud architectures and solutions, identifying security risks, and recommending practical mitigation measures. You will provide guidance on identity and...

Learn more

Cyber Security Assurance Support Analyst (CRP/CSP) – SC Cleared

Added 23/09/2026

We are seeking a Cyber Security Assurance Support Analyst to support the delivery of security assurance activities across complex technology, change and service environments. This role will assist with the assessment, monitoring and maintenance of security controls, ensuring that risks are identified, documented and managed in line with relevant policies, standards and regulatory requirements. The successful candidate will work closely with security specialists, delivery teams, risk owners and other stakeholders to support effective governance and assurance outcomes. Responsibilities will include supporting the preparation and review of Cyber Risk Profiles (CRPs) and Cyber Security Plans (CSPs), maintaining assurance records, tracking security...

Learn more

Information Security Officer

Added 21/09/2026

We are seeking an experienced Information Security Officer to help protect information assets, technology systems and business operations from evolving cyber threats. In this role, you will support the development, implementation and continuous improvement of the information security framework, ensuring that policies, controls and processes remain aligned with recognised standards, regulatory requirements and organisational objectives. You will work closely with colleagues across technology, risk, compliance and operational teams to promote a strong security culture and embed effective security practices throughout the business. Your responsibilities will include conducting risk assessments, maintaining security policies and procedures, monitoring compliance, and supporting the management...

Learn more

IAM Security Engineer (AWS AD) | Contract | London or Belfast

Added 18/09/2026

We are seeking an experienced IAM Security Engineer to support the design, implementation and operation of secure identity and access management services across cloud and hybrid environments. This is a contract opportunity based in either London or Belfast, with hybrid working arrangements available. You will join a security-focused engineering function responsible for protecting users, systems and data through robust authentication, authorisation and privileged access controls. The role will focus on administering and enhancing Microsoft Active Directory and AWS identity services, including AWS IAM, AWS Managed Microsoft AD and federated access solutions. Key responsibilities will include creating and maintaining identity policies,...

Learn more

Cloud Security Control Engineer

Added 18/09/2026

We are seeking a Cloud Security Control Engineer to help design, implement and continuously improve security controls across cloud environments. The role will support the protection of infrastructure, applications, data and services by translating security policies and regulatory requirements into practical, measurable controls. You will work closely with cloud engineering, architecture, risk, compliance and operations teams to ensure that security is embedded throughout the technology lifecycle. Key responsibilities include developing and maintaining cloud security control frameworks, standards and technical requirements; assessing cloud services and architectures for security risks; and supporting the implementation of identity and access management, network security, encryption,...

Learn more

Cyber Security Engineer (Threat Modelling)

Added 14/09/2026

We are seeking a Cyber Security Engineer (Threat Modelling) to help identify, assess and reduce security risks across applications, platforms and services. You will work closely with software engineers, architects, product teams and security specialists to embed threat modelling into the design and delivery lifecycle. The role will involve analysing systems and data flows, identifying potential attack paths, assessing threats and vulnerabilities, and recommending practical security controls that support both business and technical objectives. Your responsibilities will include creating and maintaining threat models using established methodologies, such as STRIDE, attack trees or similar approaches; facilitating threat-modelling workshops; documenting security requirements...

Learn more

Contract - Cyber Security Engineer (Threat Modelling)

Added 11/09/2026

We are seeking an experienced Contract Cyber Security Engineer specialising in Threat Modelling to support the identification, assessment and mitigation of security risks across complex technology environments. Working closely with software engineers, architects, product teams and security stakeholders, you will help embed secure-by-design principles throughout the development and delivery lifecycle. This is an opportunity to contribute to high-impact initiatives in a fast-paced environment where practical risk management and clear communication are essential. Your responsibilities will include facilitating threat-modelling workshops, reviewing system architectures, applications, APIs, infrastructure and data flows, and identifying potential attack paths, vulnerabilities and abuse cases. You will document...

Learn more

Assistant Manager, Analyst - Business Information Security (BIS), Global

Added 03/09/2026

We are seeking an Assistant Manager, Analyst to support the Business Information Security (BIS) function across a global organisation. This role will help protect business information, technology services and digital assets by supporting security governance, risk management and operational assurance activities. You will work with stakeholders across multiple regions and functions, helping to identify information security risks and promote consistent, practical controls. Key responsibilities include assisting with information security risk assessments, control reviews, policy and standards implementation, issue tracking and remediation monitoring. You will analyse security findings, prepare clear reports and management information, and support the coordination of audits, assessments...

Learn more

Assistant Manager, Analyst - Business Information Security (BIS), Global

Added 03/09/2026

We are seeking an Assistant Manager, Analyst to support the Business Information Security (BIS) function across global operations. This role will help protect business information, technology assets and services by contributing to security governance, risk management and operational assurance activities. You will work with stakeholders across technology, business operations, internal controls and risk teams to promote secure practices and support the delivery of information security objectives. Key responsibilities include assisting with the assessment, documentation and monitoring of information security risks; coordinating the review of security controls, policies and procedures; and supporting the tracking and remediation of identified issues. You will...

Learn more

Senior Consultant or Manager, Identity & Access Management Engineer - Cyber - Defence & Security GPS

Added 02/09/2026

We are seeking an experienced Senior Consultant or Manager to join a specialist Identity and Access Management (IAM) engineering team supporting complex cyber security and national security programmes. This role will suit a delivery-focused professional who can combine strong technical capability with stakeholder management, leadership and strategic thinking. You will help clients design, implement and improve secure identity services across enterprise, cloud and hybrid environments, ensuring that access is appropriately governed, monitored and aligned with business and security requirements. Your responsibilities will include leading IAM engagements from discovery and requirements gathering through to architecture, implementation and operational transition. You will...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.