Information Security Consultant

Own smaller client assignments and shape how information security advice is delivered. This Information Security Consultant role combines independent judgement, practical risk assessment and contributions to consulting methods, within a collaborative environment that supports broader professional expertise., As an Information Security Consultant, you’ll take responsibility for smaller assignments, coordinating deliverables and client communications. You’ll assess security posture, exposure and controls, translating evidence into recommendations that balance technical requirements with commercial realities. Interviews and workshops will connect you with technical specialists, business stakeholders and senior decision-makers. You’ll document assumptions, prepare clear reports and present findings to support informed risk treatment. Alongside maintaining client relationships, you’ll contribute to internal methods, security tools and service development. This full-time role offers an immediate start and scope to broaden your consulting expertise while helping organisations adopt proportionate, sustainable security practices.

• Own smaller assignments, coordinating deliverables and maintaining client communication.
• Evaluate cyber risks, security posture and the effectiveness of controls.
• Facilitate interviews and workshops to establish risks and business priorities.
• Analyse evidence, document assumptions and prepare actionable assessment reports.
• Present findings and advise stakeholders on proportionate risk treatment.
• Improve internal consulting methods, security tools and services.

Experience matters more than academics; a STEM degree is helpful. Must-Have:

• Around two years’ relevant cyber security or cyber risk experience.
• Previous consulting or consultancy experience.
• Strong analysis and ability to explain security risks clearly.
• Confident written and verbal communication with clients and senior stakeholders.

• Structured problem-solving, sound judgement and independent working. Nice-to-Have:

• Cyber risk assessment or security assurance review experience.
• Familiarity with ISO 27001, Cyber Assessment Framework (CAF) and NIST.
• Knowledge of risk methodologies or open-source security tools.
• Relevant cyber security qualifications or professional certifications.

Professional development and wellbeing support your contribution, alongside flexible working and opportunities for collaboration. As well as a starting salary of £40,000, you will also get the following benefits:

• Annual funding for external training and professional qualifications.
• UK remote-first working, with occasional client travel.
• Remote-working equipment and team collaboration opportunities.
• 25 days’ annual leave, public holidays and additional flexible days off.
• 5% employer pension contribution and discretionary bonus up to 10%.
• Contribution towards household utility costs.
• Paid time for charitable or community work.

This specialist technology consultancy helps organisations tackle cyber security challenges through pragmatic risk management. London is the listed location, with UK remote-first working and occasional travel for client engagements and team collaboration. You’ll contribute to a business-focused approach that combines technical analysis with clear communication. Independent thinking and practical solutions are encouraged, with opportunities to support wider security initiatives and improve consulting services alongside your day-to-day client assignments.