> Markdown version of [/jobs/ext/2160210-information-security-consultant](https://www.wearedevelopers.com/jobs/ext/2160210-information-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Consultant

- **Company:** Reed
- **Location:** Suffolk, UK
- **Salary:** £50,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Cyber Security, Identity and Access Management, Microsoft Security Essentials, Information Security Management System
- **Published:** August 21, 2026
- **Apply:** https://www.careerboard.com/pt/en/find-jobs-in-United-Kingdom/-75692A4A19AED17CEB/

## About the Role

* NIST Cyber Security Framework
 * Experience within infrastructure, utilities, energy, defence, engineering, financial services or other regulated sectors
 * Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor/Implementer, Security+ or equivalent

## Description

REED Technology are recruiting for an Information Security & Assurance Officer to join a major UK infrastructure programme. This is a fantastic opportunity for an information security professional who enjoys balancing security governance, compliance and assurance with oversight of operational cyber security activities.

You'll play a key role in maintaining the organisation's Information Security Management System (ISMS), ensuring compliance with recognised security frameworks, managing risk and assurance activities, and acting as a trusted adviser to both technical and non-technical stakeholders.

This role would suit someone with experience in Information Security, GRC, Information Assurance or Cyber Security who is looking to develop their career within a highly regulated and complex environment., * Own and maintain the Information Security Management System (ISMS)

 * Ensure compliance with ISO 27001, GDPR and wider security governance requirements
 * Develop and maintain security policies, standards and procedures
 * Conduct security risk assessments and support internal and external audits
 * Manage supplier and third-party security assurance activities
 * Provide oversight of Microsoft 365 security controls, including identity and access management, MFA, endpoint protection and monitoring
 * Work closely with SOC and security service providers to support incident management and response activities
 * Produce security reports, dashboards and assurance documentation for senior stakeholders
 * Deliver security awareness initiatives across the organisation
 * Support continuous improvement of security controls, processes and governance frameworks

About You

We're interested in speaking with candidates who can demonstrate experience in:

 * Information Security Governance, Risk and Compliance (GRC)
 * Information Security Assurance and risk management
 * ISO 27001 and Information Security Management Systems (ISMS)
 * GDPR and data protection requirements
 * Security audits, compliance reviews and assurance activities
 * Supplier or third-party security assessments
 * Security incident management and response processes
 * Microsoft security technologies such as Defender, Sentinel, Entra ID or similar platforms
 * Building strong relationships with stakeholders at all levels


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Fake or News: Translating Dog Barks, Notepad Gets an Upgrade and Michelin-Star Robots - Paul Tregoing](https://www.wearedevelopers.com/videos/1802-fake-or-news-translating-dog-barks-notepad-gets-an-upgrade-and-michelin-star-robots-paul-tregoing)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Building Multi-Tenant ASP.NET Core Applications: Best Practices and Real-World Solutions](https://www.wearedevelopers.com/videos/1552-building-multi-tenant-asp-net-core-applications-best-practices-and-real-world-solutions)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [How Lufthansa Industry Solutions is preparing for the Quantum Age! ](https://www.wearedevelopers.com/videos/1443-how-lufthansa-industry-solutions-is-preparing-for-the-quantum-age)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)