Information Security Consultant

InfraView Ltd; Greater London; Hybrid; GBP 70,000 - 85,000; Full time

Job summary

InfraView Ltd in the United Kingdom is seeking an experienced Information Security Consultant to work with technical and information security teams to deliver security solutions and improve posture. You will provide strategic guidance, support and roadmaps, overseeing security projects and implementing controls.

This is a customer-facing role requiring strong communication skills to explain complex security concepts to both technical and non-technical audiences, including senior leadership.

Qualifications

• Strong knowledge of technology, Information Security and data protection frameworks and standards.
• Experience with Microsoft tech stack; Purview is a plus.
• Ability to explain security concepts clearly to technical and non-technical audiences.
• Consulting experience with SMEs is advantageous. Desire to obtain CISSP/CISM or SC certifications.

Responsibilities

• Identify opportunities to improve an organisation's security position and create practical roadmaps for continuous improvement.
• Assess organisations against Cyber Essentials, NCSC CAF and ISO 27001.
• Own or oversee key Information Security processes and procedures.
• Manage and oversee security monitoring and detection services.
• Develop and implement Information Security training and awareness programmes.
• Raise, investigate and manage Information Security incidents with follow-up actions.
• Provide strategic Information Security guidance to stakeholders to support improvements.
• Produce clear Information Security reports and present findings to senior leadership.

Skills

Information Security

Regulatory Compliance

Client-facing

Stakeholder Communication

Risk Assessment

Security Architecture

Education

CISSP or CISM desirable

Tools

Microsoft Purview

Job description

Information Security Consultant - £70,000-£85,000 - Home based / Southern UK customers

Travel is relatively often, so if you want a fully remote role, this isn't for you. When not on site, it is home based. (LinkedIn doesn't give this option so apologies that it says remote)

We are looking for an experienced Information Security Consultant to work closely with technical and Information Security teams to deliver effective security solutions and help organisations continuously improve their security posture.

You will provide strategic Information Security guidance, support and roadmaps, identifying areas for improvement and overseeing a range of security projects. This will include supporting the implementation of security controls, assessing organisations against recognised industry good practice, producing detailed assessment reports and presenting findings to senior leadership teams.

This is a customer-facing role requiring excellent communication skills, a keen eye for detail and the ability to explain complex security concepts clearly to both technical and non-technical audiences, including senior leadership and board-level stakeholders.

Key Responsibilities

• Identify opportunities to improve an organisation's security position and create practical roadmaps for continuous improvement, including maximising existing Microsoft security capabilities.
• Assess organisations against recognised frameworks and standards, including Cyber Essentials, NCSC CAF and ISO 27001.
• Own or oversee key Information Security processes and procedures.
• Manage and oversee security monitoring and detection services.
• Develop and implement general and role-specific Information Security training and awareness programmes.
• Raise, investigate and manage or support Information Security incidents, ensuring appropriate follow-up actions are completed.
• Provide Information Security support to business functions, including digital teams, IT infrastructure and IT service desk functions.
• Oversee ongoing programmes of security testing, reviews and audits.
• Produce clear, concise Information Security reports and present findings and recommendations to key stakeholders.
• Provide strategic advice and practical guidance to stakeholders to support ongoing security improvement.

We are looking for someone who can demonstrate:

• Strong knowledge and experience of technology, Information Security and data protection-related compliance, legal and regulatory frameworks and standards, including Cyber Essentials, ISO 27001
• Strong knowledge and practical experience of the Microsoft technology stack. Experience with Microsoft Purview would be beneficial.
• Expert knowledge and understanding of Information Security principles and industry good practice.
• Experience working with both technical and non-technical personnel at different levels of an organisation.
• The ability to articulate security risks, recommendations and technical concepts in a clear and appropriate way for different audiences.
• Strong understanding of Information Security principles, concepts and technical security controls.
• Previous consulting experience, particularly supporting small and medium-sized organisations, would be advantageous.
• A positive, proactive and can-do attitude, with the ability to work independently and use your own initiative.
• Relevant Information Security certifications such as CISSP or CISM would be beneficial. But you will at least need the desire to want to complete one/both of these
• Microsoft certifications, particularly those within the SC certification series, such as SC-400 or SC-401, would also be advantageous.