Cyber Security Consultant - Strategy, Risk & Compliance

IBM; England; On-site; GBP 65,000 - 85,000; Full time

Job summary

A leading global technology company is seeking a Security Consultant to work within their consulting services in the UK. The role involves designing and implementing security solutions, leading compliance initiatives, and advising clients on risk management and strategic security planning. Candidates should have a Bachelor's Degree and a minimum of 5 years' experience in cybersecurity. Attractive benefits include training, career advancement, and a strong emphasis on diversity and inclusion.

Benefits

Training opportunities

Promotion opportunities

Flexible working arrangements

Private medical insurance

Pension plan with monthly company contributions

Qualifications

• Hands-on experience applying Secure by Design principles.
• Minimum 5 years of experience in cybersecurity assurance/information assurance.
• Strong analytical skills and ability to interpret complex data.

Responsibilities

• Design and implement security solutions aligned with Secure by Design principles.
• Lead security, risk, and compliance initiatives.
• Communicate findings effectively through presentations and reports.

Skills

Cybersecurity assurance

Risk management

Analytical skills

Stakeholder management

Communication skills

Education

Bachelor's Degree

Job description

Introduction

At IBM CIC, we provide technical and industry expertise to a wide range of public and private sector clients in the UK. A career in IBM CIC means you will work with leading professionals across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. You will deliver effective solutions, driving meaningful business change for our clients using the latest technology platforms.

We offer

• Many training opportunities from classroom to e‑learning, mentoring and coaching programs and the chance to gain industry recognised certifications
• Regular promotion opportunities to ensure you can drive and develop your career with us
• Feedback and checkpoints throughout the year
• Diversity & Inclusion as an essential and authentic component of our culture through our policies and process as well as our Employee Champion teams and support networks
• A culture where your ideas for growth and innovation are always welcome
• Internal recognition programs for peer‑to‑peer appreciation as well as from manager to employees
• Tools and policies to support your work‑life balance from flexible working approaches, sabbatical programs, paid paternity leave, maternity leave and an innovative maternity returners scheme
• More traditional benefits, such as 25 days holiday (in addition to public holidays), private medical, dental & optical cover, online shopping discounts, an Employee Assistance Program, life assurance and a group personal pension plan of an additional 5% of your base salary paid by us monthly to save for your future.

In this role, you’ll work in one of our IBM Consulting Client Innovation Centres (Delivery Centres)

Our delivery centres offer clients locally based skills and technical expertise to drive innovation and adoption of new technology.

Your role and responsibilities

As a Security Consultant within Cyber Strategy & Risk, you will act as a trusted advisor to clients, shaping their security posture and ensuring compliance with regulatory and risk requirements. You will lead the design and implementation of secure solutions, applying industry best practices and frameworks to mitigate risks and protect critical assets. This role offers the opportunity to work at the intersection of strategy, risk, and technology, collaborating with stakeholders to develop business‑driven security strategies and roadmaps that deliver lasting impact.

Responsibilities

• Design and implement security solutions aligned with Secure by Design principles.
• Lead security, risk, and compliance initiatives to meet business and regulatory requirements.
• Develop and maintain Information Security Management Systems (ISMS) in line with industry standards.
• Identify and assess risks, developing actionable mitigation plans and strategies.
• Support clients in strategic planning, security governance, and risk management.
• Translate complex technical and regulatory requirements into clear, actionable recommendations.
• Provide advisory services to stakeholders, ensuring security initiatives align with business objectives.
• Stay up to date with emerging threats, industry frameworks, and evolving security practices.
• Communicate findings and strategies effectively through presentations, reports, and workshops.

Required education

None

Preferred education

Bachelor's Degree

Required technical and professional expertise

• Hands‑on experience applying Secure by Design principles.
• Minimum 5 years of experience in cybersecurity assurance/information assurance, including ISMS development and maintenance.
• Proven expertise in strategic planning, risk management, or management consulting within the technology sector.
• Strong analytical skills, with the ability to interpret complex data and deliver actionable insights.
• Excellent communication, presentation, and stakeholder management skills.

Preferred technical and professional experience

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Professional certifications such as CISSP, CISM, or CRISC.
• In‑depth knowledge of ISO standards (ISO 27001, ISO 27002, ISO 27005).
• Familiarity with NIST frameworks (e.g., NIST SP 800‑53, NIST Cybersecurity Framework).

Equal opportunities statement

As an equal opportunities employer, we welcome applications from individuals of all backgrounds. However, to be eligible for this role you must have the valid right to work in the UK. We do not offer visa sponsorship and have no future plans to do so. You must be a resident in the UK and have been living continuously in the UK for the last 10 years. You must be able to hold or gain a UK government security clearance.

IBM equal‑opportunity employment statement

IBM is proud to be an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, neurodivergence, age, or other characteristics protected by the applicable law. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.

OTHER RELEVANT JOB DETAILS

IBM wants you to bring your whole self to work and for you this might mean the ability to work flexibly. If you are interested in a flexible working pattern, please talk to our recruitment team to find out if this is possible in the current working environment.