Information Assurance Consultant

CBSbutler Ltd.; Greater London; Hybrid; GBP 120,000 - 138,000; Part time

Job summary

CBSbutler Ltd. is seeking an experienced Information Assurance Consultant to provide specialist cyber security expertise across complex programmes within a high-assurance environment.

You will support secure-by-design solutions, identify risks, and embed security requirements throughout the project lifecycle, working with architects, engineers and stakeholders to deliver robust security controls.

Qualifications

• Proven IA/Cyber Security experience in complex, high-risk or regulated environments.
• Knowledge of security standards and frameworks including NCSC CAF and ISO 27001.
• Ability to translate security requirements into practical technical controls.

Responsibilities

• Provide Information Assurance and cyber security expertise across complex programmes and technology projects.
• Review technical solutions to identify security risks, vulnerabilities and areas for improvement.
• Support development and implementation of security principles, standards and controls.
• Ensure security requirements are embedded into solution design and governance.
• Work with risk owners to ensure controls are proportionate and aligned with threat environment.
• Translate threat intelligence into practical security controls and recommendations.
• Review cloud, hybrid and on-prem architectures from a security perspective.
• Communicate security and risk issues clearly to technical and non-technical stakeholders.
• Contribute to continuous improvement of security architecture, governance and assurance processes.
• Maintain knowledge of emerging cyber threats and security approaches.

Skills

Information Assurance

Cyber Security

Security Architect

NCSC CAF

ISO 27001

Cloud security

On-prem security

Stakeholder engagement

Job description

Information Assurance Consultant

+6 months +

+Hybrid London

+SC cleared role

+Outside IR35

+£650 - £750 a day

+Sole British nationals only due to nature of the project

We are seeking an experienced Information Assurance (IA) Consultant to provide specialist cyber security and information assurance expertise across complex technology and transformation programmes within a secure, high-assurance environment.

The successful candidate will support the delivery of secure-by-design solutions, working closely with technical teams, architects and stakeholders to identify security risks, develop appropriate controls and ensure security requirements are embedded throughout the project lifecycle.

Key Responsibilities

• Provide Information Assurance and cyber security expertise across complex programmes and technology projects.
• Review and assess technical solutions to identify security risks, vulnerabilities and areas for improvement.
• Support the development and implementation of security principles, standards and controls.
• Ensure security requirements are embedded into solution design and project governance.
• Work with technical teams and risk owners to ensure security controls are proportionate and aligned with the threat and risk environment.
• Assess cyber threats and translate threat intelligence into practical security controls and recommendations.
• Review cloud, hybrid and on-premises architectures from a security and assurance perspective.
• Support risk-based decision making and provide clear security advice to technical and non-technical stakeholders.
• Contribute to the continuous improvement of security architecture, governance and assurance processes.
• Maintain up-to-date knowledge of emerging cyber threats, technologies and security approaches.

Essential Skills & Experience

• Proven experience working as an Information Assurance Consultant, Cyber Security Consultant or Security Architect.
• Experience working within complex, high-risk or highly regulated environments.
• Strong knowledge of security standards and frameworks including NCSC CAF and ISO 27001.
• Experience assessing and managing cyber security risks and translating security requirements into practical technical controls.
• Strong understanding of security across cloud, hybrid and on-premises environments.
• Experience reviewing technical architectures and identifying security risks and improvements.
• Ability to communicate complex security and risk issues clearly to both technical and non-technical stakeholders.
• Strong stakeholder engagement and ability to influence security and risk-based decisions.