Information Security Officer

10Nex Consultancy; England; On-site; GBP 50,000 - 90,000; Full time

Job summary

10Nex Consultancy is seeking an Information Security Consultant to join a growing cyber security team supporting a major UK defence organisation. You will work directly with the client's Information Security team, advising on risks and ensuring security is considered from the start of new projects with hands-on involvement and stakeholder engagement.

Responsibilities include security assurance, risk assessments and reviewing controls, plus working with frameworks such as ISO 27001 and NIST CSF.

Qualifications

• 3+ years' experience in Information Security or related IT security role.
• Good understanding of security assurance, risk assessments and security frameworks.
• Experience with ISO 27001, NIST or similar standards.

Responsibilities

• Work with the client's Information Security team on day-to-day security requirements.
• Advise on security risks and practical controls.
• Support Secure by Design across projects and security assurance activities.
• Engage with stakeholders across technical and business teams.

Skills

Security risk assessment

Stakeholder engagement

Secure by Design

Cloud security (Azure/AWS)

Security frameworks understanding

Education

CISSP

CISM

CISA

Job description

Want to work on cyber security projects that actually make a difference?

I'm working with a growing Cyber Security consultancy that's looking for an Information Security Consultant to join their team and support a major UK defence organisation.

What makes this opportunity interesting is that you won't just be sitting behind a desk reviewing policies all day.

You'll be working directly alongside the client's Information Security team, helping them tackle real security challenges, advise on risks and make sure security is considered right from the start of new projects.

There's a good mix of hands-on involvement, stakeholder engagement and security assurance, so no two days should look quite the same!

What would you be doing

• Working closely with the client's Information Security team on their day-to-day security requirements.
• Helping teams understand security risks and advising on practical ways to manage them.
• Supporting Secure by Design, making sure security is considered throughout projects.
• Getting involved in security assurance, risk assessments and reviewing security controls.
• Working with frameworks including ISO 27001, NIST CSF and Cyber Essentials.
• Speaking with different stakeholders, from technical teams through to wider business departments.

What are we looking for?

We're not looking for someone who's ticked every box imaginable, but ideally you'll have:

3+ years' experience in Information Security, Cyber Security or a related IT security role.

A good understanding of security assurance, risk assessments and security frameworks.

Experience working with ISO 27001, NIST or similar standards.

The confidence to speak with stakeholders and explain security risks without overcomplicating things.

Someone who's proactive, enjoys problem-solving and is happy getting stuck into different security challenges.

Experience with government security frameworks, Secure by Design, Azure/AWS or qualifications such as CISSP, CISM or CISA would be a bonus!

#CyberSecurity #InformationSecurity #Defence #InfoSecJobs #CyberSecurityJobs