Cloud Security Consultant

Solutions & Innovations Company; Greater London; Hybrid; GBP 110,700 - 147,600; Full time

Job summary

A leading financial services firm in Greater London is hiring a Contract Cloud Security Consultant to support their Cyber Transformation Programme. The role involves ensuring security alignment with standards like NIST CSF 2.0, leading threat modelling and risk assessments, and promoting best security practices within a matrixed environment. Ideal candidates will have deep knowledge in DevSecOps, Azure IAM, and secure coding, including experience with Python. This position offers a hybrid work model.

Qualifications

• Experience with NIST CSF 2.0 and IT security standards.
• Proven knowledge in embedding best practices into Agile pipelines.
• Ability to serve as a security point of contact for projects.

Responsibilities

• Lead threat modelling and risk assessments for projects.
• Ensure all deliverables meet security standards and laws.
• Establish and maintain security policies and operational controls.

Skills

Threat modelling

Risk assessments

Secure coding initiatives (Python)

Azure environments

DevSecOps

Security tooling (Sentinel, Defender for Cloud, SIEM)

Compliance with GDPR

Job description

Cloud Security Consultant

A Global Financial Services firm requires a Contract Cloud Security Consultant to join their Cyber Transformation Programme consulting across Al, DevSecOps & Microsoft Security Suite.

Travel: Hydbrid

Location: London

IT Security Cloud Consultant working in Al engineering and project teams, ensuring all deliverables align with security standards (e.g. NIST CSF 2.0) and protect information assets (Confidentiality, Integrity, Availability).

Lead threat modelling, risk assessments, and secure coding initiatives (especially in Python and Azure environments) across the chatbot lifecycle and broader IT systems, mitigating vulnerabilities and ensuring compliance with data protection laws (e.g., GDPR).

Establish, implement, and maintain security policies, standards, and operational controls; support audits, incident response, vulnerability remediation, and ensure effective use of security tooling (eg., Sentinel, Defender for Cloud, SIEM).

Work closely with Operational Risk, DevOps, and Information Security teams to embed best practices into Agile delivery pipelines, balance stakeholder priorities, and drive the security agenda within a matrixed environment.

Serve as the security point of contact for projects, leveraging deep knowledge in DevSecOps, Azure IAM, PKI, secure SDLC, and adversarial Al threats, while promoting a culture of continuous improvement and security awareness.