> Markdown version of [/jobs/ext/1519072-security-information-assurance-consultant](https://www.wearedevelopers.com/jobs/ext/1519072-security-information-assurance-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Information Assurance Consultant - **Company:** 0201 CSC Computer Sciences Ltd - **Location:** London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Microsoft Azure, Cloud Computing, Linux, OpenShift, Open Web Application Security, Office365, Kubernetes, Service Stack, Vmware - **Published:** July 5, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=2fb9f6160a290982 ## About the Role At DXC, one of our platinum accounts has an opening for a Senior Information Assurance Consultant. The successful candidate will work within multiple teams and will be innovative and analytical with a good eye for detail. Your role will include implementing standards, policies, and procedures for continual service improvement. We are looking for an experienced Security Consultant who has all round skills in information security risk management., * Experience in a similar or related role with desirable additional qualifications to include CISM or CISSP / IISP or other professional body membership * Experience of working to HMG (e.g. NCSC guidance, DSIT Secure by Design, GovS 007) best practices * Desire to improve processes, looking for the root cause of a problem * Willingness to both share your knowledge and learn from others * A proactive approach towards looking for risks and problemsA strong team working ethic, with a "customer first" focus and a thirst for knowledge Desirable Skills and Technologies: * Deep knowledge and understanding of information and cyber security risk management * Experience in threat modelling utilising STRIDE or Attack Trees, NIST Cyber Security Framework * Experience or knowledge of various technology stacks including Cloud (AWS, MS Azure), M365, VMWare, Redhat Openshift or other container orchestration platforms, Windows and Linux operating systems * Knowledge of industry security guidance provided by the likes of OWASP and CISAwareness of security champions programmes ## Description * Working closely with Security Architects and the design teams, provide a bridge between the technical teams and the security risk owner from the business, helping translate technical security risks into a form understandable to non-technical business people. * Advise risk owners as to the severity of the risks they are being presented with and potential mitigation strategies (and their impacts) to enable them to make informed risk management decisions * Monitor implementation and ongoing maintenance of agreed risk management actions * Create, maintain, and utilise risk assessment and related artefacts such as the risk register and security-specific documentation such as Security Operating Procedures * Assist the Account Security Lead with creating and maintaining security-related processes, policies and guidanceProactively identifying areas for improvement in security across the account, both to improve security, and make good security easier ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [This Is Not Your Father's .NET](https://www.wearedevelopers.com/videos/967-this-is-not-your-father-s-net) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)