Information Security Engineer

iO Associates; England; On-site; GBP 100,000 - 125,000; Full time

Job summary

A high-profile organization is urgently seeking an Information Security Engineer to integrate security into technology changes. This role demands expertise across the project lifecycle, with responsibilities including cyber security advising, risk assessments, and compliance with major frameworks. Ideal candidates will have a strong background in Secure by Design principles and relevant certifications like CISSP or ISO 27001. This opportunity offers a competitive daily rate, emphasizing the importance of security in transformation initiatives.

Qualifications

• Proven experience advising on security across the full project lifecycle.
• Deep knowledge of Secure by Design principles and data protection best practices.
• Hands-on experience supporting DPIAs and third-party risk reviews.

Responsibilities

• Provide subject matter expertise on cyber security and secure design across tech change programmes.
• Work hand-in-hand with delivery managers to embed security controls from day one.
• Review and guide third-party risk assessments and product security compliance.
• Support DPIAs and ensure alignment with Cyber Essentials, ISO 27001, and NIST frameworks.
• Lead threat modelling, risk assessments, and support documentation of potential vulnerabilities.
• Influence strategic investment decisions based on risk and business impact.

Skills

Cyber security

Secure by Design

Data protection best practices

Cyber Essentials

ISO 27001

NIST frameworks

Risk assessments

Communication

Agile

Education

CISSP

CISM

SABSA

ISO 27001 Lead Auditor

Job description

Title: Infomation Security Engineer

Contract: 8 month (Initially)

Rate: Up to £625 Per Day (Inside IR35)

Location: Remote!

Are you passionate about embedding security into the heart of technology change?

if so...

Our client is looking for an experienced Secure by Design Specialist to support their high-profile organisation in strengthening their security posture across major transformation initiatives.

This is a pivotal role where you'll work closely with delivery teams to ensure cyber security, data protection, and compliance frameworks are baked into every phase of the project lifecycle, right from ideation through to delivery.

You'll act as the security conscience across multiple programmes, helping to identify risks early, reduce costly late-stage rework, and deliver robust, secure-by-default solutions.

The Role:

• Provide subject matter expertise on cyber security and secure design across tech change programmes
• Work hand-in-hand with delivery managers to embed security controls from day one
• Review and guide third-party risk assessments and product security compliance
• Support DPIAs and ensure alignment with Cyber Essentials, ISO 27001, and NIST frameworks
• Lead threat modelling, risk assessments, and support documentation of potential vulnerabilities
• Influence strategic investment decisions based on risk and business impact

What You'll Need:

• Proven experience advising on security across the full project lifecycle
• Deep knowledge of Secure by Design principles and data protection best practices
• Strong familiarity with Cyber Essentials, ISO 27001, NIST, and other regulatory frameworks
• Hands-on experience supporting DPIAs and third-party risk reviews
• Ability to clearly communicate cyber risks to both technical and non-technical stakeholders
• Previous experience working in Agile or change-heavy delivery environments
• Relevant certifications such as CISSP, CISM, SABSA, or ISO 27001 Lead Auditor

Our client is looking to fill this position as a matter of urgency, so if you're interested please apply to this job and contact