Job Search

We are seeking a Senior Security Consultant to join a growing Security Strategy, Risk and Compliance Services team. This is an opportunity to advise a diverse range of clients on improving their information security, governance and resilience. You will work closely with senior stakeholders to understand business risks, develop practical recommendations and support the delivery of security transformation programmes.

Your responsibilities will include leading security assessments, maturity reviews and gap analyses against recognised frameworks and regulatory requirements. You will develop and review security strategies, policies, standards, risk management frameworks and compliance programmes, ensuring they are proportionate, effective and aligned with business objectives. You will also support clients with audit preparation, regulatory engagements, third-party risk management, incident readiness and remediation planning.

As a senior member of the team, you will manage client engagements from planning through to delivery, preparing high-quality reports and presenting findings to technical and executive audiences. You will identify opportunities to improve processes and controls, provide constructive challenge and help clients translate complex security requirements into clear, actionable outcomes. You may also contribute to proposals, practice development, knowledge sharing and the mentoring of less experienced consultants.

We are looking for substantial experience in information security, cyber security, risk, governance or compliance, gained within a consultancy, professional services or complex in-house environment. You should have a strong understanding of frameworks and standards such as ISO 27001, NIST, CIS Controls, COBIT or equivalent, together with knowledge of relevant privacy and regulatory obligations. Experience of security risk assessments, policy development, control testing and working with senior stakeholders is essential.

Excellent communication, analytical and report-writing skills are required, alongside the ability to manage competing priorities and work independently. Professional qualifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor are desirable. The role may involve occasional travel to client sites and offers the opportunity to work on varied, high-impact assignments across multiple sectors.

We are seeking a Senior Security Consultant to join a specialist Security Strategy, Risk and Compliance Services team. This is an opportunity to advise clients across a range of industries, helping them understand, manage and reduce cyber security risk while aligning security initiatives with business objectives and regulatory expectations.

You will lead and deliver security consulting engagements, from initial discovery and assessment through to recommendations and implementation planning. Responsibilities will include developing security strategies and roadmaps, conducting risk assessments, reviewing governance frameworks, assessing policies and controls, and supporting compliance against relevant legislation, regulations and industry standards. You will also help clients prepare for audits, improve their security operating models and embed practical, sustainable risk management processes.

The role will involve working closely with senior stakeholders, technology teams and business leaders. You will be expected to communicate complex security and risk matters clearly, produce high-quality reports and presentations, and provide pragmatic advice that can be understood by both technical and non-technical audiences. You may also contribute to bids, thought leadership, service development and the mentoring of less experienced consultants.

Applicants should have substantial experience in cyber security consulting, information security, technology risk, governance, risk and compliance, or a related discipline. You will have a strong understanding of security frameworks and standards such as ISO 27001, NIST, CIS Controls or COBIT, together with knowledge of relevant data protection and regulatory requirements. Experience developing policies, risk registers, control frameworks, assurance programmes or security improvement plans is essential.

Strong analytical, report-writing and stakeholder management skills are required, alongside the ability to manage competing priorities and deliver work to a high standard. Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor would be advantageous. A collaborative mindset, commercial awareness and a commitment to continuous professional development are equally important.

We are seeking a Senior Security Consultant to provide expert advice across security strategy, risk and compliance services. This role will support clients in understanding their security posture, managing evolving threats and meeting relevant regulatory, contractual and industry requirements. You will work with senior stakeholders to develop practical, risk-based solutions that strengthen governance, resilience and business performance.

You will lead and contribute to security consultancy engagements, including security strategy development, risk assessments, control reviews, compliance assessments and maturity evaluations. Responsibilities will include interpreting regulatory and industry frameworks, identifying control gaps, producing clear reports and recommendations, and supporting the creation of remediation plans. You will also help clients define policies, standards, procedures and operating models that align security objectives with organisational priorities.

The successful candidate will manage workstreams from initial scoping through to delivery, ensuring that projects remain focused, commercially aware and aligned with agreed outcomes. You will facilitate workshops, present findings to technical and non-technical audiences, coach less experienced colleagues and contribute to the development of repeatable methodologies, tools and service offerings. The role may also involve supporting bids, proposals and client relationship development.

You will have substantial experience in information security, cybersecurity, risk management, governance or compliance consulting, together with a strong understanding of recognised frameworks and standards such as ISO 27001, NIST, CIS Controls or equivalent. Experience of assessing technology, operational and third-party risks, developing security roadmaps and advising senior decision-makers is essential.

Relevant professional qualifications, such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor or Lead Implementer, are desirable. You should be an excellent communicator with strong analytical, report-writing and stakeholder management skills. The ability to work independently, manage competing priorities and deliver high-quality advice in a consultancy environment is essential. A proactive, collaborative approach and a commitment to continuous professional development are also expected.