Senior Information Assurance Consultant (Projects & Emerging Technology)

This is a senior, project-facing Information Assurance position, embedded within technology delivery rather than operating as a purely governance function.

You will support a range of high-impact programmes, including large-scale system implementations, network modernisation, and ongoing platform upgrades. Alongside this, there is a growing requirement to assess and manage risk associated with emerging technologies, particularly AI-enabled functionality within enterprise systems.

Working closely with architects, delivery teams and suppliers, you will ensure security is considered early and applied in a proportionate, pragmatic way that enables delivery.

What you will be doing

• Leading Information Assurance activity across complex ICT projects and programmes
• Supporting system accreditation and ensuring alignment with national and local standards
• Assessing and articulating risk across modern technology environments, including SaaS and cloud
• Embedding "secure by design" principles into delivery lifecycles
• Producing and reviewing key security documentation, including risk assessments and design artefacts
• Advising stakeholders on appropriate, proportionate and practical controls
• Supporting the development of IA standards, policies and approaches
• Providing guidance and informal mentoring to other team members
• Engaging confidently with stakeholders across technical teams, business areas and suppliers

You will bring a strong background in Information Assurance, IT Risk or GRC within a regulated environment, with experience of working across full project lifecycles.

You should be comfortable operating with a high degree of autonomy, managing your own workload and working directly with stakeholders across both technical and non-technical teams.

This role requires a pragmatic, solutions-focused approach. The team are looking for someone who can work constructively with delivery teams - enabling progress while maintaining appropriate levels of control.

Experience of cloud platforms, SaaS environments or emerging technology risk (including AI) would be beneficial.