Security Design Consultant

We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products.HCLTech is a globally recognized leader in the Tech and IT industry, but we’ve never forgotten the startup mindset that got us here. We’ve always approached our work with an idea-first attitude because every one of our accomplishments —no matter how big or small —can be traced back to an idea’s single spark.

It’s that spark —that inner drive —that sets our people apart from our competitors. It enables us not just to pull off game-changing feat after game-changing feat but to better our world in the process. We want you to find your spark. Because that’s what drives you to be better, be more and ultimately, be more fulfilled.

Job Title Senior Security Design Consultan

t
Location - London, Manchester, Leeds, Brist

olMode - This is Fixed Term Contract ro

le
We are seeking a Senior Security Design Consult ant to provide expert cyber security consultancy, security design assurance and risk-based guidance across business and technology change. The role is responsible for assessing new and amended services, applications, cloud platforms and third-party solutions to ensure security risks are understood, controlled and aligned to organisational risk appetite, regulatory obligations and industry best practi

1. ce.Key Responsibilit
2. iesCore Responsibilit

• iesLead security design reviews, threat modelling and risk assessments for applications, infrastructure, cloud services and third-party solutio
• ns.Define and recommend proportionate security controls, patterns and design guardrails aligned to business objectives and risk appeti
• te.Provide consultancy on secure architecture for internet-facing services, internal platforms, data flows and integration patter
• ns.Advise on identity and access management, privileged access, recertification and access control desi
• gn.Work closely with engineering, architecture, product and delivery teams in Agile and DevOps environments to embed security by desi
• gn.Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standar
• ds.Review security posture of vendors and outsourced services, providing due diligence and third-party risk assuran
• ce.Present security findings, risk opinions and design recommendations clearly to both technical and non-technical stakeholders, including senior leadersh

1. ip.Required Experience and Ski

• llsExtensive experience in cyber security, security consulting, risk assessment or security architecture within regulated environments, ideally financial servic
• es.Strong knowledge of threat modelling methodologies, secure design principles, attack vectors and mitigating controls across network, application and cloud domai
• ns.Practical understanding of cloud security, secure application delivery, third-party risk management and access management practic
• es.Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control framewor
• ks.Ability to translate complex technical risks into business language and provide clear, evidence-based recommendatio
• ns.Exposure to contemporary architectures. E.g. RESTful APIs and containerised microservi
• cesStrong stakeholder management, written communication and presentation skills, with confidence engaging senior managers and control functio

1. ns.Qualifications and Certificati

onsEssenti al: Demonstrable experience in security design, cyber risk, security consulting or related cyber security disciplin

es.Desirab le: Professional certifications such as CISSP, CISM, CCSP, CEH, GIAC or equivale

nt.Preferred backgrou nd: Experience supporting cloud transformation, digital delivery, third-party assurance and regulated change programm

1. es.Desirable Attribu

• tesCommercially aware and able to balance risk reduction with pragmatic business delive
• ry.Capable of working independently while influencing multidisciplinary teams and senior stakeholde
• rs.Understanding or awareness about banking syst
• emsComfortable operating in fast-paced, high-pressure environments with changing prioriti
• es.Structured, detail-oriented and focused on producing high-quality, repeatable outcom

es.
Bene

• fitsA supportive, diverse, and global team with a brilliant cult
• ure.Competitive compensation and benefits that includes up to 20 days’ vacation per year, various insurances like Term life and Business Travel insurance. These are apart from the statutory benefits applicable in the country. Employee benefits are regulated by an internal policy that contains full details regarding the entitlement and conditions for the benefits as per the law of the l
• and.Great opportunities to make the role your own, upskill yourself and get involved with exciting proje
• cts.Total Wellbeing is our focus. Alongside your professional excellence, you join the likeminded colleagues to create a larger impact within the company and society at large in your chosen area of passion - CSR Council, Diversity Council, Women Connect, Sparks – Engagement Champion to name a
• few.To know more about us visi t – www.hcltech
• .comFor more information on how we process your personal data, please refer to HCLTec h’s Candidate Data Privacy Not