Senior Information Security Consultant

Experteer Overview As Senior Information Security Consultant, you will embed security into technology change across cloud, platforms and major transformation programmes to enable innovation while managing cyber risk. You will collaborate with Technology, Engineering and business colleagues to shape secure designs and strengthen governance in a high-profile, nationwide brand. You’ll lead risk assessments, ensure compliance with standards, and help evolve our information security program. This role offers meaningful impact across a trusted organisation at scale, with hybrid working in London. Pay / Benefits * Act as cyber security SME across technology and business change, providing pragmatic security guidance throughout the project lifecycle * Lead security risk assessments, control assurance activities and penetration testing to identify and mitigate cyber risks before go-live * Help maintain and evolve Information Security Management System aligned with ISO 27001, NIST and PCI DSS * Partner with Architecture, Engineering, Technology and third-party suppliers to embed security controls into solutions * Produce security documentation, risk reporting and recommendations for regulatory compliance and informed decision-making * Contribute to security awareness initiatives and improve cyber governance, policies and assurance processes Tasks * Experience in Information Security Consultant, Cyber Security Consultant, Security Architect or Cyber GRC roles within a complex technology environment * Strong knowledge of ISO 27001, PCI DSS, NIST or equivalent standards * Experience conducting security risk assessments and advising on secure technology design across various projects * Good understanding of cloud security, enterprise infrastructure, networks, SaaS platforms and modern applications * Excellent stakeholder management and communication skills to influence technical and non-technical audiences * Professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor or PCI DSS (advantageous) Key requirements * 25 days annual leave plus bank holidays * Worksave pension scheme with up to 7% employer contribution * Free AA breakdown membership from Day 1 with family discounts * Discounts on AA products (car and home insurance) * Employee discount scheme including car salary sacrifice and healthcare discounts * Company funded life assurance

Partner with Architecture, Engineering, Technology and third-party suppliers to embed security controls into solutions * Produce security documentation, risk reporting and recommendations for regulatory compliance and informed decision-making * Contribute to security awareness initiatives and improve cyber governance, policies and assurance processes Tasks * Experience in Information Security Consultant, Cyber Security Consultant, Security Architect or Cyber GRC roles within a complex technology environment * Strong knowledge of ISO 27001, PCI DSS, NIST or equivalent standards * Experience conducting security risk assessments and advising on secure technology design across various projects * Good understanding of cloud security, enterprise infrastructure, networks, SaaS platforms and modern applications * Excellent stakeholder management and communication skills to influence technical and non-technical audiences * Professional certifications such as CISSP, CISM, ISO 27001 Lead aaaaaaaaaaaaa Senior or PCI DSS (advantageous) Key requirements * 25 days annual leave plus bank holidays * Worksave pension scheme with up to 7% employer contribution * Free AA breakdown membership from Day 1 with family discounts * Discounts on AA products (car and home insurance) * Employee discount scheme including car salary sacrifice and healthcare discounts * Company funded life assurance