Consultant – Information Assurance & Secure by Design
An opportunity is available for a Consultant – Information Assurance & Secure by Design to help embed robust security, privacy and risk management throughout the design and delivery of digital services. You will provide expert advice across the full service lifecycle, ensuring that security considerations are addressed early and remain aligned with business objectives, regulatory obligations and user needs.
Key responsibilities will include conducting information assurance reviews, security risk assessments and threat modelling activities; defining appropriate security controls; and producing clear, evidence-based recommendations for technical and non-technical stakeholders. You will support the development of secure-by-design patterns, assurance cases, risk treatment plans and governance documentation, while tracking actions through to completion.
The role will involve working closely with architects, delivery teams, product owners, suppliers and senior stakeholders to identify security requirements and assess proposed designs, technologies and changes. You will contribute to security and privacy impact assessments, support audit and compliance activities, and help verify that services meet relevant policies, standards and regulatory expectations. You may also be required to advise on incident preparedness, third-party risk and the secure management of information assets.
Applicants should have proven experience in information assurance, cyber security, risk management or a closely related discipline, with a strong understanding of secure-by-design principles and risk-based decision-making. Experience of applying recognised frameworks and standards, such as ISO 27001, NIST, UK Government security principles or NCSC guidance, would be valuable. Knowledge of data protection requirements, including UK GDPR, is also desirable.
You will be an analytical and confident communicator, able to explain complex risks clearly and influence decisions at all levels. The ability to manage competing priorities, challenge constructively and work collaboratively across multidisciplinary teams is essential. Relevant professional qualifications or certifications, such as CISSP, CISM, CRISC, SABSA or equivalent experience, would be advantageous.
Consultant – Information Assurance & Secure by Design
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- Security Architect
- IT Security Manager
- Identity Access Management IAM
- Data Protection
- Cyber Security Consultant
- SOC Analyst
- Risk Analyst
- Governance and Compliance
- Penetration Tester
LATEST JOBS
- SecOps Engineer
- Senior KIM Lead and Deputy Dat...
- Cyber Security Cloud Engineer
- Senior Risk Manager Technolog...
- Senior Security Architect - Pl...
- IGA Lead Engineer
- Lead Cybersecurity Architect
- Security Contract Delivery Pro...
- System Software Engineer, Tegr...
- Network & Security Delivery Te...
- Cyber Threat Intelligence Anal...
- Senior Identity & Access Manag...