Security Consultant

This is a client-facing, technical consultancy role focused on supporting the secure design and implementation of change across a wide range of business areas, technologies, and platforms. The successful candidates will work closely with stakeholders to ensure security is Embedded throughout the delivery life cycle, identifying risks early and driving appropriate mitigation strategies., * Act as a subject matter expert across information security for both business and technology stakeholders

• Support secure solution design across change programmes, ensuring alignment to security standards and frameworks
• Conduct security assessments, workshops, and reviews across the SDLC
• Identify, articulate, and manage security risks, proposing appropriate mitigations
• Partner with delivery teams to ensure security requirements are captured, tracked, and implemented
• Influence security roadmaps and contribute to the development of security capabilities
• Ensure end-to-end security integrity and quality across solutions and product releases
• Engage with stakeholders at all levels, including senior and executive audiences
• Collaborate with cross-functional teams to ensure secure outcomes across complex environments

• Strong experience operating as a Security Consultant within enterprise environments (ideally financial services)
• Demonstrable experience in security design, assurance, and risk management across the SDLC
• Solid understanding of security frameworks such as ISO27001/2, NIST, and PCI DSS
• Strong stakeholder management and communication skills
• Ability to translate business requirements into security controls and solutions
• Experience conducting security assessments and facilitating workshops

Technical Experience (must be comfortable with at least one of the below):

• Computer networking
• Application security
• Operating systems (Windows/Linux)
• Databases
• Pentesting concepts
• Cryptography (desirable, not essential)

Certifications:

• CISSP preferred (or equivalent security certification)
• Additional certifications are advantageous

Desirable Experience:

• Background within a consultancy environment
• Understanding of secure development methodologies and associated technologies
• Experience integrating security controls into complex environments
• Familiarity with tools such as Jira and Confluence