> Markdown version of [/jobs/ext/1350620-information-assurance-consultant](https://www.wearedevelopers.com/jobs/ext/1350620-information-assurance-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Assurance Consultant

- **Company:** Venn Group
- **Location:** London, UK (Remote available)
- **Experience:** Expert
- **Salary:** £80,000.0 - £88,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Amazon Web Services, Microsoft Azure, Cloud Computing Security, Linux, OSI Models, Information Systems Security Architecture Professional, Sherwood Applied Business Security Architecture, Togaf
- **Published:** July 20, 2026
- **Apply:** https://www.venngroup.com/job/senior-information-assurance-consultant-5970515/apply

## About the Role

This is not a hands-on engineering position. However, you must be technically credible and capable of understanding how systems operate, identifying security risks and assessing compliance with security controls across the full OSI model., * Strong experience in information assurance, cyber assurance or security risk consulting

 * Previous responsibility for security accreditation or assurance activities
 * Experience assessing compliance with security controls
 * Broad technical understanding of Windows and Linux infrastructure
 * Good knowledge of networks, infrastructure and the OSI model
 * Experience conducting security risk assessments and producing risk reports
 * Ability to understand complex system designs without being a hands-on engineer
 * Current SC or DV clearance
 * You will be customer facing

Desirable Experience

 * Critical National Infrastructure, government, defence or national security experience
 * NCSC Cyber Assessment Framework
 * GovAssure
 * Security accreditation methodologies and documentation
 * Cloud security across Microsoft Azure or AWS
 * Secure architecture and enterprise security frameworks

Useful qualifications may include:

 * CISSP
 * CISM
 * SABSA
 * TOGAF
 * ISO 27001 Lead Auditor
 * Microsoft Azure or AWS security certifications

## Description

* Support security accreditation and assurance activities across multiple critical systems
 * Specify, interpret and assess compliance with technical and organisational security controls
 * Conduct and support cyber security risk assessments
 * Apply the NCSC Cyber Assessment Framework and relevant government assurance standards
 * Support GovAssure activities, including evidence gathering and compliance assessment
 * Produce clear risk reports, assurance documentation and recommendations
 * Assess security across Windows and Linux infrastructure, networks and cloud environments
 * Work with technical and non-technical stakeholders to explain risks and required controls
 * Take ownership of an allocated workstream while contributing to the wider assurance team
 * Help clients make informed, risk-based security decisions


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What Makes Open Source Work: Licensing and Beyond](https://www.wearedevelopers.com/videos/1416-what-makes-open-source-work-licensing-and-beyond)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Going Quantum: The future of the internet ...](https://www.wearedevelopers.com/videos/672-going-quantum-the-future-of-the-internet)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)