Governance and Assurance Security Consulting Director/Lead

Reference: o01kuava772ppp3aa7hj

We are seeking an experienced Governance and Assurance Security Consulting Director/Lead to shape and deliver high-quality cyber security governance, risk and assurance services. This is a senior role requiring strong commercial awareness, technical credibility and the ability to build trusted relationships with executive stakeholders, clients and delivery teams.

You will lead the development and delivery of security governance and assurance engagements, helping organisations understand their cyber risk and strengthen their control environments. Responsibilities will include defining security strategies, policies and operating models; overseeing risk assessments and control reviews; leading compliance and regulatory assurance activities; and providing practical recommendations aligned to business objectives.

The role will involve managing a portfolio of consulting work, ensuring that engagements are delivered to a high standard, on time and within budget. You will contribute to proposals, shape new services, support account development and identify opportunities to improve delivery methods and client outcomes. You will also mentor and develop consultants, promote consistent standards and act as a senior point of escalation for complex security matters.

Applicants should have substantial experience in cyber security governance, risk management, assurance or consulting, ideally gained across a range of sectors and organisational environments. You will have a strong understanding of recognised security and risk frameworks, regulatory expectations, audit principles and control design. Experience with standards such as ISO 27001, NIST, COBIT or similar frameworks would be advantageous.

Excellent communication and stakeholder management skills are essential, including the ability to present complex issues clearly to senior audiences. You should be comfortable balancing strategic leadership with hands-on involvement in client delivery, and demonstrate sound judgement, commercial acumen and a commitment to professional excellence. Relevant industry certifications, such as CISSP, CISM, CRISC, CISA or equivalent, are desirable.

COMPETITIVE SALARY
Added 23/10/2026
Reference: o01kuava772ppp3aa7hj

Governance and Assurance Security Consulting Director/Lead

London, England, United Kingdom Permanent Governance and Compliance

Other similar jobs

GRC Security Consultant - Operational Security

Added 23/10/2026

We are seeking a GRC Security Consultant – Operational Security to support the development, implementation and continual improvement of security governance, risk and compliance activities. This role will work closely with technical and business stakeholders to ensure that operational security practices are effective, proportionate and aligned with relevant policies, standards and regulatory obligations. You will assess security risks across operational processes, systems and services, documenting findings and working with control owners to agree practical remediation plans. Responsibilities will include supporting risk assessments, maintaining security registers, reviewing policies and procedures, monitoring control performance and preparing clear reports for management and governance...

Learn more

Security Consultant - Operational Security & GRC

Added 07/10/2026

We are seeking a Security Consultant specialising in Operational Security and Governance, Risk and Compliance (GRC) to help strengthen security capabilities across a complex and evolving technology environment. In this role, you will advise stakeholders on security risks, support the development and implementation of effective controls, and help ensure that operational practices align with relevant policies, standards and regulatory requirements. You will work closely with technology, risk, audit, privacy and business teams to promote practical, proportionate and sustainable security outcomes. Your responsibilities will include conducting security and risk assessments, identifying control gaps, maintaining risk and compliance documentation, and supporting remediation...

Learn more

Business Information Security Officer

Added 15/10/2026

We are seeking a Business Information Security Officer to help strengthen information security across a complex and fast-moving organisation. Working closely with business leaders, technology teams and risk specialists, you will translate security requirements into practical, proportionate controls that support operational objectives. This is an influential role for someone who can build trusted relationships, communicate clearly with a wide range of stakeholders and promote a strong, risk-aware culture. Your responsibilities will include advising teams on information security risks, policies and standards; supporting security and privacy impact assessments; monitoring compliance with relevant legislation, regulatory expectations and internal controls; and helping to...

Learn more

Business Information Security Officer

Added 15/10/2026

We are seeking an experienced Business Information Security Officer to support the development, implementation and continuous improvement of information security across a complex business environment. This role will act as a trusted partner to business leaders, technology teams and operational stakeholders, helping to ensure that security risks are understood, managed and aligned with organisational objectives. You will provide practical advice on security controls, risk management and regulatory obligations, while promoting a strong culture of information security across the organisation. Key responsibilities will include maintaining information security policies, standards and procedures; conducting risk assessments and supporting the management of risk treatment...

Learn more

Security Engineer – Microsoft Purview, Endpoint & Data Protection

Added 02/10/2026

We are seeking a Security Engineer specialising in Microsoft Purview, endpoint security and data protection to help strengthen the organisation’s information security capabilities. In this role, you will design, implement and maintain security controls across Microsoft 365, endpoints and cloud environments, ensuring sensitive information is appropriately identified, classified, monitored and protected. You will work closely with infrastructure, identity, compliance and business teams to translate security requirements into practical, scalable solutions. Your responsibilities will include configuring and administering Microsoft Purview capabilities such as sensitivity labels, data loss prevention policies, retention policies, insider risk controls, information protection and audit functionality. You will...

Learn more

Security Engineer – Microsoft Purview, Endpoint & Data Protection

Added 02/10/2026

We are seeking a Security Engineer specialising in Microsoft Purview, endpoint security and data protection to strengthen enterprise-wide information security capabilities. This role will design, implement and maintain controls that protect sensitive data across cloud services, endpoints, applications and collaboration platforms. You will work closely with security, infrastructure, compliance and business teams to translate regulatory and operational requirements into practical technical solutions. Key responsibilities will include configuring and administering Microsoft Purview capabilities such as sensitivity labels, data loss prevention policies, retention and records management, insider risk controls, audit features and information protection workflows. You will help develop and enforce endpoint...

Learn more

Security Architect Consultant

Added 25/09/2026

We are seeking an experienced Security Architect Consultant to design, develop and oversee secure technology solutions across complex business and technical environments. In this role, you will work closely with stakeholders, engineering teams, project managers and third-party suppliers to understand business objectives, assess security risks and translate requirements into practical, scalable architecture. You will provide expert guidance throughout the solution lifecycle, from early concept and design through implementation, testing and operational handover. Your responsibilities will include defining security architecture principles, patterns and standards; conducting security reviews and threat modelling; identifying vulnerabilities and recommending appropriate controls; and ensuring that solutions align...

Learn more

Security Architect Consultant

Added 25/09/2026

We are seeking an experienced Security Architect Consultant to design, assess and improve secure technology environments across a range of business and technical domains. In this role, you will work closely with stakeholders, delivery teams and technology specialists to understand business needs, identify security risks and develop practical, scalable solutions. You will contribute to security strategy, architecture standards and governance while ensuring that proposed designs align with regulatory, operational and commercial requirements. Your responsibilities will include producing security architecture documentation, reference models, design principles and risk assessments; reviewing solution designs and technical proposals; and providing expert guidance across cloud, infrastructure,...

Learn more

Security Architect

Added 23/09/2026

We are seeking an experienced Security Architect to design, develop and maintain secure technology architectures across a complex and evolving IT environment. The successful candidate will define security principles, reference architectures, standards and patterns that support business objectives while protecting systems, applications, data and infrastructure. Working closely with engineering, infrastructure, cloud, software development and risk teams, you will translate business and technical requirements into practical, scalable security solutions. Key responsibilities will include conducting security architecture reviews, threat modelling and risk assessments for new and existing services; identifying vulnerabilities and recommending appropriate controls; and providing guidance on identity and access management,...

Learn more

Security Manager - Risk and Consulting

Added 23/09/2026

We are seeking an experienced Security Manager – Risk and Consulting to lead the delivery of high-quality security risk management and advisory services. In this role, you will work with clients and internal stakeholders to understand business objectives, identify security risks, and develop practical, proportionate solutions that strengthen resilience and support regulatory compliance. You will manage engagements from planning through to completion, ensuring that work is delivered to a consistently high standard, on time and within agreed budgets. Key responsibilities will include conducting security risk assessments, threat and vulnerability reviews, control evaluations, security maturity assessments, and third-party risk reviews. You...

Learn more

Senior Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 09/10/2026

We are seeking a Senior Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help maintain confidence in the organisation’s security, privacy and resilience controls by coordinating assurance programmes, supporting regulatory requirements and engaging with internal and external stakeholders. You will work closely with security, compliance, risk, legal, audit and operational teams to assess control effectiveness and promote continuous improvement. Key responsibilities include managing evidence collection for internal and external audits, coordinating responses to customer and regulatory assessments, and preparing clear, accurate reports for senior stakeholders. You will review security and compliance...

Learn more

Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 25/09/2026

We are seeking a Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help demonstrate that cloud services, business processes and operational controls meet applicable regulatory, contractual and industry requirements. You will work with security, legal, privacy, risk, audit and engineering teams to assess control effectiveness, coordinate evidence and communicate assurance outcomes to internal and external stakeholders. Key responsibilities include supporting customer, regulatory and third-party assurance requests; coordinating audit and assessment activities; reviewing policies, procedures and control documentation; and identifying opportunities to improve the efficiency and consistency of assurance processes. You will...

Learn more

Security Consulting Practitioner

Added 29/10/2026

We are seeking a Security Consulting Practitioner to support clients in identifying, managing and reducing information and cyber security risks. This is an opportunity to work across a varied portfolio of assignments, helping organisations strengthen their security capabilities, protect critical information and respond effectively to an evolving threat landscape. You will contribute to the delivery of security assessments, risk reviews and advisory engagements. Your responsibilities will include gathering and analysing client requirements, reviewing existing controls, identifying vulnerabilities and developing practical recommendations. You may also support security strategy and policy development, governance reviews, regulatory compliance assessments, resilience planning and the implementation...

Learn more

Security Consulting Practitioner

Added 26/10/2026

We are seeking a Security Consulting Practitioner to support clients in understanding, managing and improving their information and cyber security. This is an opportunity to work across a varied portfolio of assignments, helping organisations identify risks, strengthen controls and meet relevant regulatory and industry requirements. You will contribute to security assessments, risk reviews and maturity evaluations, gathering information from stakeholders and analysing processes, systems and control environments. You will help develop practical recommendations, security strategies, policies, standards and improvement plans, presenting findings clearly to both technical and non-technical audiences. The role will involve supporting the delivery of consulting engagements from...

Learn more

Senior Manager - Security Architect - Cyber - Technology Consulting - Belfast - IOI

Added 08/10/2026

We are seeking a Senior Manager – Security Architect to join a technology consulting team in Belfast, supporting clients across Ireland and internationally. This is a senior leadership role for an experienced cyber security professional who can shape secure technology strategies, lead complex architecture engagements and translate business objectives into practical, resilient security solutions. You will work with senior stakeholders, technology leaders and delivery teams to assess risk, define target operating models and embed security throughout the technology lifecycle. Responsibilities will include leading security architecture assessments and transformation programmes; developing security strategies, principles, standards and reference architectures; and providing expert...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.