Senior Information Security Consultant
Summary
Shape and lead security strategy for a financial services firm, guiding projects and systems while aligning with business risk. Work with senior stakeholders to implement ISO 27001, NIST, and cloud security controls.
This is a senior technical security role for someone who enjoys working across cloud, infrastructure, applications and business change programmes.
You will act as a trusted security advisor to technology, engineering and business teams, influencing the design of secure solutions and helping shape the future direction of information security across the organisation.
This is not a purely governance or compliance-focused position. We're looking for someone who can combine strong technical expertise with commercial awareness and stakeholder engagement.
- Provide expert security consultancy across technology, engineering, architecture and business teams.
- Support projects and programmes by identifying security risks and recommending practical solutions.
- Review solution designs, technical architectures, cloud services and system integrations.
- Drive the implementation and continual improvement of security controls across applications, infrastructure and cloud environments.
- Assess vulnerabilities, review penetration testing results and support remediation activities.
- Monitor emerging threats and security trends, helping the business respond proactively.
- Contribute to the development and enhancement of security standards, policies and governance frameworks.
- Support the ongoing maturity of our Information Security Management System (ISMS).
- Lead security initiatives and improvement programmes.
- Mentor colleagues and promote security best practice across the organisation.
- Significant experience in Information Security, Cyber Security Consulting, Security Architecture or a similar senior security role.
- Strong knowledge of cloud security, particularly Azure and/or AWS environments.
- Experience securing enterprise infrastructure, platforms and applications.
- Strong understanding of recognised security frameworks including ISO 27001, NIST and CIS Controls.
- Experience delivering security improvements, security transformation initiatives or complex security programmes.
- Ability to balance security requirements with business objectives.
- Strong communication and stakeholder management skills.
- Experience influencing technical and non-technical audiences at all levels.
Desirable
- Experience within financial services or another regulated industry.
- Security certifications such as CISSP, CISM, CRISC or equivalent.
- Experience supporting cloud transformation, infrastructure modernisation or large-scale technology change programmes.
- Work on complex security challenges across a growing financial services business.
- Influence major technology and business transformation initiatives.
- Collaborate with experienced technology, security and leadership teams.
- Competitive salary and comprehensive benefits package.
- Hybrid working and flexible approach to office attendance.
- Opportunities for professional development and industry certification support.