Information Security Consultant

Information Security Consultant

Remote | Full-time

We are working with a leading, forward-thinking cyber security consultancy that delivers innovative and resilient security solutions to organisations across multiple sectors. With a strong heritage spanning government, finance, and technology, they support clients in protecting critical assets and sensitive data.

Due to continued growth, they are looking to appoint an Information Security Consultant to join their high-performing technical team.

The Role

As an Information Security Consultant, you will provide expert security advice across a wide range of projects, supporting both internal teams and external clients. You will play a key role in embedding security into technology solutions, ensuring risks are identified, assessed, and effectively managed throughout the project lifecycle.

This is a hands-on, client-facing role combining security architecture, risk management, and governance.

Key Responsibilities

• Provide security advice and guidance across IT and business projects
• Conduct threat modelling and security impact assessments (SIAs)
• Define and review security requirements for applications and infrastructure
• Review conceptual, logical, and physical solution designs
• Manage and oversee vulnerability assessments and penetration testing
• Support risk identification, remediation, and ongoing risk management
• Contribute to enterprise security architecture frameworks and standards
• Perform ISO 27001 compliance assessments and security reviews
• Conduct third-party security assessments and audits
• Develop and maintain security policies, standards, and guidelines
• Engage with stakeholders across technical and business teams
• Support governance forums, reporting, and security awareness initiatives

Key Skills & Experience

• Experience in information security consulting or security architecture within complex environments
• Strong knowledge of ISO 27001 / ISMS and security governance frameworks
• CISSP (or equivalent certification)
• Experience with risk assessments, threat modelling, and security design reviews
• Broad technical understanding across:
• Application security (e.g. OWASP, IAM, cryptography)
• Infrastructure security (networks, endpoints, cloud)
• Operational security (incident management, DR/BCP, patching)
• Experience managing or supporting vulnerability assessments and penetration testing
• Ability to produce high-quality documentation and deliver presentations to stakeholders
• Strong stakeholder engagement and communication skills

Desirable

• Experience with TOGAF, SABSA, or ITIL
• Exposure to security tooling or application development
• Experience in supplier assurance or third-party risk

What They’re Looking For

• A proactive and collaborative team player
• Strong communicator who can influence both technical and non-technical stakeholders
• Someone who can balance security best practice with business needs
• Passion for cyber security and continuous improvement

Why Apply?

• Fully remote working
• Opportunity to work on diverse, high-impact security projects
• Exposure to enterprise-level security architecture and governance
• Collaborative, expert-led environment with strong career development