Cloud Security Consultant

La Fosse Associates; London; On-site; Full time

Job summary

A leading global financial services firm is seeking a Contract Cloud Security Consultant to support their Cyber Transformation Programme. This role involves advising on IT security, leading risk assessments, and ensuring compliance with security standards. The consultant will work closely with various teams to embed security practices in Agile delivery while promoting a culture of continuous improvement.

Qualifications

• Experience as IT Security advisor to AI engineering teams.
• Lead threat modelling and secure coding initiatives.
• Establish and maintain security policies and standards.

Responsibilities

• Consulting on Cyber Transformation Programme across AI and DevSecOps.
• Mitigate vulnerabilities and ensure compliance with GDPR.
• Drive security agenda within Agile delivery pipelines.

Skills

IT Security

DevSecOps

Security Awareness

Risk Assessment

Threat Modelling

Tools

Azure

Sentinel

Defender for Cloud

SIEM

Python

Job description

Cloud Security Consultant (Azure)

A Global Financial Services firm requires a Contract Cloud Security Consultant to join their Cyber Transformation Programme consulting across AI, DevSecOps & Microsoft Security Suite.

• Day Rate: £550-£585pd
• IR35 Status: Outside
• Duration: Initial 6 months
• Travel: 2 days a week in Central London

This Cloud Security Consultant will have the previous following experience:

• Acted as the IT Security advisor to AI engineering and project teams, ensuring all deliverables align with security standards (e.g. NIST CSF 2.0) and protect information assets (Confidentiality, Integrity, Availability).
• Lead threat modelling, risk assessments, and secure coding initiatives (especially in Python and Azure environments) across the chatbot lifecycle and broader IT systems, mitigating vulnerabilities and ensuring compliance with data protection laws (e.g., GDPR).
• Establish, implement, and maintain security policies, standards, and operational controls; support audits, incident response, vulnerability remediation, and ensure effective use of security tooling (e.g., Sentinel, Defender for Cloud, SIEM).
• Work closely with Operational Risk, DevOps, and Information Security teams to embed best practices into Agile delivery pipelines, balance stakeholder priorities, and drive the security agenda within a matrixed environment.
• Serve as the security point of contact for projects, leveraging deep knowledge in DevSecOps, Azure IAM, PKI, secure SDLC, and adversarial AI threats, while promoting a culture of continuous improvement and security awareness.