Information Security Consultant

Opus Recruitment Solutions; Greater London; Hybrid; GBP 45,000 - 55,000; Full time

Job summary

Opus Recruitment Solutions Limited is seeking an Information Security Consultant to deliver security advisory services across client environments in a UK hybrid role. Active SC clearance is essential to sit within the governance and assurance activities and support security programmes for regulated clients.

You will work with senior stakeholders, applying ISO 27001, NIST CSF and other government standards, conducting risk assessments and helping embed robust controls. Sponsorship is not offered.

Qualifications

• Active SC clearance is essential for this role.
• Experience in security risk assessments and mitigating controls.
• Knowledge of ISO 27001, NIST CSF, CAF, and JSP440 frameworks.
• Strong stakeholder engagement and communication skills.

Responsibilities

• Deliver information security consultancy across client engagements.
• Conduct risk assessments and support risk management activities.
• Advise on security frameworks including ISO 27001, NIST CSF, CAF, JSP440.
• Support Cyber Essentials, Gov Assure, threat modelling, and assurance activities.
• Perform ISO 27001, ISO 9001, and Cyber Essentials assessments.
• Maintain security certifications and accreditations.
• Analyze findings and present clear recommendations to stakeholders.
• Stay updated with evolving security standards and regulations.

Skills

Information Security

Cyber Security

Governance

Risk Management

Regulatory Compliance

Stakeholder Engagement

Project Management

Communication

Education

Degree in Cyber Security/Info Security/CS

Tools

Azure

AWS

Job description

Information Security Consultant | SC Clearance | Defence and Security | UK Hybrid | £50k

Are you an experienced Information Security Consultant looking to make a real impact across critical client environments? Our client, a specialist cyber security consultancy, is seeking a talented security professional to join their growing team, delivering consultancy services across information assurance, governance, risk, and compliance programmes.

Please note: Active SC (Security Check) Clearance is essential for this position. Applications from candidates without current SC clearance cannot be considered.

The Role

Working closely with senior security stakeholders, you will support the delivery of cyber and information security consultancy services to a diverse client base.

This role combines risk management, compliance, assurance, and security advisory responsibilities, with a particular focus on recognised frameworks including ISO 27001, NIST CSF, Secure by Design, and government security standards.

You will often work directly within client security teams, providing expert guidance on security governance, risk management, and regulatory compliance.

Key Responsibilities

• Deliver risk and information security consultancy across multiple client engagements.
• Conduct risk assessments and support risk management activities.
• Advise clients on security frameworks including ISO 27001, NIST CSF, Cyber Assessment Framework (CAF), and JSP440.
• Support Cyber Essentials, Gov Assure, threat modelling, cyber exercising, and assurance activities.
• Perform compliance audits, including ISO 27001, ISO 9001, and Cyber Essentials assessments.
• Support the maintenance of security certifications and accreditations.
• Analyse findings and present recommendations clearly to stakeholders.
• Stay up to date with evolving security standards, regulations, and industry best practice.
• Independently represent the consultancy while embedded within client environments.

Experience

• Minimum 3 years' experience in Information Security, Cyber Security, Assurance, or a related IT security role.
• Previous experience in information security, assurance, governance, risk, and compliance functions.
• Experience conducting security risk assessments and developing mitigation strategies.
• Strong understanding of risk management methodologies, including NIST SP 800-30.
• Experience implementing and maintaining ISO 27001 and NIST-based security frameworks.
• Excellent stakeholder engagement and communication skills.
• Ability to manage multiple projects and client priorities simultaneously.

Desirable Skills & Qualifications

• Knowledge of Microsoft Azure and/or AWS environments.
• Understanding of GDPR, Data Protection Act 2018, FOI legislation, and related governance requirements.
• Degree in Cyber Security, Information Security, Computer Science, or a related discipline.
• Professional certifications such as CISSP, CISM, or CISA.
• Security testing or penetration testing qualifications.

Why Apply?

This is an opportunity to join a highly regarded cyber security consultancy delivering impactful security programmes across regulated and government-focused environments. You'll gain exposure to challenging security projects while working alongside experienced security professionals and helping clients strengthen their cyber resilience

Unfortunately we cannot offer sponsorship at this time.

Information Security Consultant | SC Clearance | Defence and Security | UK Hybrid | £50k