Information Security Engineer

Berkeley Square IT; Swindon; On-site; GBP 100,000 - 125,000; Full time

Job summary

A leading public sector client is seeking an experienced Information Security Engineer to join their team. This role focuses on embedding secure practices throughout project lifecycles, ensuring compliance with industry security standards while minimizing risk exposure. Ideal candidates will possess a robust understanding of Secure by Design principles and experience in cyber risk management, making significant contributions to technology initiatives.

Qualifications

• Experience in cyber risk assessment and threat modelling.
• Strong understanding of Secure by Design principles.
• Experience with relevant security compliance frameworks.

Responsibilities

• Embed security considerations into technology change initiatives.
• Ensure compliance with cyber security and data protection standards.
• Translate complex security topics into actionable insights.

Skills

Secure by Design principles

Cyber risk assessment

Threat modelling

Third-party risk management

Security compliance frameworks

DPIAs support

Agile delivery experience

Stakeholder engagement

Communication skills

Job description

Information Security Engineer - £650 p/d inside IR35

My public sector client is seeking an experiencedInformation Security Engineer to join their team.

They are seeking a Secure by Design Specialist to embed security considerations into every stage of their technology change initiatives. This role will ensure that cyber security, data protection, and industry security standards are actively incorporated into project lifecycles from ideation through to delivery, reducing risk exposure and avoiding costly late-stage redesigns.

Candidates MUST have the following skills / experience:

• Strong understanding of Secure by Design principles and security-by-default approaches.
• Experience in cyber risk assessment, threat modelling, and third-party risk management.
• Familiarity with security compliance frameworks such as Cyber Essentials, ISO 27001, NIST, etc.
• Demonstrable experience supporting DPIAs and understanding data protection/security intersection.
• Experience working in agile delivery environments and with multi-disciplinary teams.
• Ability to translate complex security topics into actionable business insights.
• Strong stakeholder engagement and communication skills.

CVs to Nick ASAP for immediate review