Information Security Consultant

Bestman Solutions; Southampton; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid working environment

Professional development

Career progression opportunities

Job summary

Bestman Solutions is seeking an experienced Information Security Consultant to strengthen governance, risk management, and secure-by-design practices across a complex technology estate. This permanent, hybrid role combines consultancy, risk assessment, stakeholder engagement, and technical advisory responsibilities.

You will collaborate with technology, project, and business teams to embed security into strategic initiatives and day-to-day operations, promoting secure practices and resilient

Qualifications

• Experience as Information Security Consultant or similar cyber security professional.
• Strong governance and risk management knowledge.
• Ability to communicate security concepts clearly to a range of stakeholders.
• Experience with cloud platforms and control frameworks.

Responsibilities

• Conduct information security risk assessments across technology platforms, projects, and business initiatives.
• Provide security consultancy and guidance to technical and non-technical stakeholders.
• Review solution designs and architecture to ensure alignment with security requirements and best practice.
• Support the development, implementation, and continuous improvement of security policies, standards, and control frameworks.
• Identify security gaps and provide pragmatic recommendations to reduce organisational risk.
• Assess security controls across cloud, infrastructure, and enterprise technology environments.
• Support vulnerability management and remediation programmes.
• Assist with audit, compliance, and regulatory activities.
• Promote secure-by-design principles across projects and change initiatives.
• Build strong relationships across the business to enhance security awareness and resilience.

Skills

Security governance

Risk management

Security controls

Stakeholder management

Security consultancy

Cloud security

Vulnerability management

Education

CISSP / CISM / CRISC

Tools

Azure

AWS

GCP

Job description

Permanent | Hybrid (2 days per week in office)

Bestman Solutions is supporting a large and highly regarded organisation undertaking a significant programme of technology modernisation, cyber resilience, and operational transformation.

As part of its continued investment in information security, the organisation is seeking an experienced Information Security Consultant to help strengthen security governance, risk management, and secure-by-design practices across a complex technology estate.

This is a highly visible role that combines security consultancy, risk assessment, stakeholder engagement, and technical advisory responsibilities. You will work closely with technology, project, and business teams to ensure security is embedded effectively across strategic initiatives and day-to-day operations.

The role would suit someone who enjoys balancing technical understanding with practical security advice and is looking to influence security outcomes within a mature and evolving environment.

Key Responsibilities

• Conduct information security risk assessments across technology platforms, projects, and business initiatives
• Provide security consultancy and guidance to technical and non-technical stakeholders
• Review solution designs and architecture to ensure alignment with security requirements and best practice
• Support the development, implementation, and continuous improvement of security policies, standards, and control frameworks
• Identify security gaps and provide pragmatic recommendations to reduce organisational risk
• Assess security controls across cloud, infrastructure, and enterprise technology environments
• Support vulnerability management and remediation programmes
• Assist with audit, compliance, and regulatory activities
• Promote secure-by-design principles across projects and change initiatives
• Build strong relationships across the business to enhance security awareness and resilience

Required Experience

• Experience working as an Information Security Consultant, Security Advisor, Security Analyst, or similar cyber security professional
• Strong understanding of information security governance, risk management, and security controls
• Experience conducting security reviews, risk assessments, and control evaluations
• Good understanding of infrastructure, network, cloud, and application security concepts
• Familiarity with vulnerability management and remediation processes
• Knowledge of recognised security frameworks and standards, including:
• ISO 27001
• NIST Cyber Security Framework
• CIS Controls
• Ability to communicate complex security concepts clearly to a range of stakeholders
• Strong stakeholder management and consultancy skills
• Exposure to cloud platforms such as Azure, AWS, or GCP
• Security certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent
• Experience working within regulated or complex enterprise environments

What's on Offer

• Opportunity to influence security strategy and resilience across a large-scale organisation
• Exposure to a broad range of security, technology, and transformation initiatives
• Hybrid working environment
• Ongoing professional development and career progression opportunities