Information Security Consultant

Information Security Consultant (GRC / Technical)

Overview

Our client is a specialist cyber security consultancy delivering high-impact security work across enterprise environments. They have recently secured a major engagement with a FTSE 100 organisation in the energy sector and are looking to hire two Information Security Consultants to support this work.

This is a hands-on role combining governance, risk, and compliance with practical security delivery. It is not a purely advisory position.

The Role

You will work closely with client stakeholders, supporting the identification, assessment, and remediation of security risks within live environments.

Key responsibilities include:

• Leading triage of security issues and tickets within client systems
• Conducting risk assessments, threat modelling, and security impact assessments
• Supporting remediation of vulnerabilities and driving resolution of findings
• Providing clear, actionable security guidance to technical and business teams
• Delivering GRC activities, including ISO 27001 and compliance assessments
• Maintaining risk registers and supporting governance processes
• Contributing to security policies, standards, and frameworks

What They’re Looking For

• Experience in information security consulting or security engineering
• Strong grounding across both GRC and technical security
• Hands-on experience with risk assessment, vulnerability management, and security triage
• Ability to operate within live client environments and take ownership of delivery
• Broad understanding of application, infrastructure, and cloud security
• Must be CISSP Qualified as a client requirement

This role would suit someone who can bridge the gap between governance and technical delivery, rather than a purely advisory consultant.

Environment & Culture

Our client places strong emphasis on practical delivery and collaboration. They are looking for individuals who are:

• Personable and comfortable in client-facing roles
• Able to communicate effectively with both technical and non-technical stakeholders
• Pragmatic and solutions-focused

Logistics & Package

• Fully remote, with occasional team meetups in London
• Rare requirement for client site visits
• No sponsorship available
• 20 days holiday + bank holidays
• 3% + 5% pension
• Up to £5,000 training budget for certifications

Interview Process

• Initial intro call
• Technical task and debrief
• Final in-person interview in London