Job Search

We are seeking a Compliance & Information Security Consultant to help organisations strengthen their governance, risk management and information security practices. This role will involve working with stakeholders across a range of business functions to assess compliance requirements, identify risks and support the implementation of practical, proportionate controls. You will contribute to the development and maintenance of policies, procedures, risk registers, control frameworks and assurance activities aligned with relevant legislation, regulations and industry standards.

Key responsibilities will include conducting compliance and information security assessments; supporting internal audits and regulatory reviews; monitoring remediation plans; and preparing clear reports for senior stakeholders. You will advise on data protection, access management, incident response, business continuity, third-party risk and security awareness. The role will also involve reviewing supplier security arrangements, coordinating evidence collection, tracking control effectiveness and helping teams embed secure and compliant ways of working. You will be expected to stay informed about evolving threats, regulatory developments and recognised frameworks such as ISO 27001, NIST or equivalent standards.

The successful candidate will have experience in compliance, information security, risk, audit or a related discipline, ideally within a regulated or complex environment. You should be confident interpreting requirements, documenting controls and communicating technical or regulatory matters to both specialist and non-specialist audiences. Familiarity with data protection principles, governance frameworks, risk assessment methodologies and security management systems is desirable. Relevant professional qualifications, such as CISM, CISSP, CRISC, ISO 27001 or data protection certifications, would be advantageous. We are looking for someone analytical, organised and pragmatic, with strong attention to detail and the ability to manage competing priorities while building effective relationships at all levels.

We are seeking a Senior Security Consultant to provide expert guidance and practical solutions across a broad range of information and cyber security challenges. The successful candidate will work with clients and internal stakeholders to assess security maturity, identify risks, and design effective controls that support business objectives. This role will involve leading engagements from initial scoping through to delivery, ensuring recommendations are proportionate, clearly communicated, and aligned with relevant legislation, industry standards, and recognised security frameworks.

Key responsibilities will include conducting security assessments, risk and threat modelling, audits, gap analyses, and control reviews; developing security strategies, policies, standards, and improvement roadmaps; and advising on governance, risk, compliance, cloud security, identity and access management, incident response, and secure technology design. You will produce high-quality reports and presentations for both technical and senior audiences, explain complex issues in clear business language, and support the implementation of agreed recommendations. The role may also involve mentoring consultants, contributing to proposals and client relationships, keeping current with emerging threats, and helping to improve internal methodologies and service offerings.

Applicants should have substantial experience in information or cyber security consulting, risk management, security architecture, governance, or a related discipline. Strong knowledge of recognised frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, or equivalent is expected, along with practical experience delivering assessments and advising organisations on risk reduction. Professional certifications such as CISSP, CISM, CRISC, SABSA, or relevant cloud security qualifications are desirable. You will need excellent analytical, written, presentation, and stakeholder management skills, with the confidence to work independently while collaborating effectively across multidisciplinary teams. A proactive, commercially aware approach and a commitment to delivering trusted, high-quality advice are essential.