Senior Technical Security Risk Consultant

Whitehall Resources require a Senior Technical Security Risk Consultant to work with a key client on a 4 month initial contract. *This role will require on site work in Cambridge 1 day per week. *Inside IR35. Senior Technical Security Risk Consultant Job Overview

• Managing enterprise security risk requires a deep understanding of diverse technologies, evolving threats and their potential impact on our business. Our Enterprise Security team works closely with engineering and technology teams to identify, assess and address security risks, providing the insights and recommendations needed to support informed business decisions.
• We’re looking for an experienced Senior Technical Security Risk Consultant to join the Security Governance, Risk and Compliance (GRC) team!
• This hands-on contract role covers a broad range of technologies, including cloud platforms, on-premises infrastructure, identity and network security. You’ll work alongside engineering and security teams to assess technical risks, evaluate security measures and develop practical approaches to risk reduction.

• The role calls for someone who enjoys investigating technical issues, challenging assumptions and independently producing robust risk assessments and practical remediation recommendations. Responsibilities

• Technical risk assessments: Lead end-to-end assessments across AWS, Azure, on-premises infrastructure, networks, applications and identity services. Analyse architectures, configurations and security controls to identify credible threat scenarios, potential attack paths, likelihood of occurrence and business impact.
• Security risk and issue management: Assess security exceptions, control weaknesses and issues arising from audits, incidents or operational activities. Evaluate risks and compensating controls, recommend appropriate treatment and work with technical teams to develop remediation plans, tracking progress through to resolution.
• Security assurance: Assess control design and effectiveness, review technical proposals and evaluate third-party security risks, including external access and connectivity. Recommend improvements and support wider security initiatives as priorities evolve.

• The ideal candidate combines deep technical expertise and cybersecurity knowledge with practical risk management experience and the ability to independently assess security risks across diverse technologies. You will bring an independent security risk perspective to technical discussions, working collaboratively to identify and evaluate appropriate risk treatment options.
• A solid understanding of AWS, Microsoft Azure and on-premises infrastructure is essential, alongside experience in identity and access management, network security and infrastructure protection.
• Relevant technical knowledge includes Active Directory, Microsoft Entra ID, privileged access management, authentication, network segmentation, firewalls, vulnerability management and security architecture.
• You’ll be able to independently investigate technical issues, identify credible attack scenarios, evaluate layered security controls and assess residual risk, while communicating findings clearly, providing constructive challenge and recommending practical solutions.

• Knowledge of recognised security frameworks, such as NIST CSF, NIST SP 800-53 and ISO 27001, is expected. “Nice To Have” Skills and Experience

• Relevant certifications, such as CISSP, CCSP, CRISC or CISM, are valued alongside demonstrable proficiency in technical areas and commitment to continuous learning.