Information Security Strategy & Risk Consultant (Hybrid)

Bestman Solutions; Southampton; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid working environment

Professional development

Career progression opportunities

Job summary

Bestman Solutions is seeking an experienced Information Security Consultant to strengthen governance, risk management, and secure-by-design practices across a complex technology estate. This permanent, hybrid role combines consultancy, risk assessment, stakeholder engagement, and technical advisory responsibilities.

You will collaborate with technology, project, and business teams to embed security into strategic initiatives and day-to-day operations, promoting secure practices and resilient

Qualifications

• Experience as Information Security Consultant or similar cyber security professional.
• Strong governance and risk management knowledge.
• Ability to communicate security concepts clearly to a range of stakeholders.
• Experience with cloud platforms and control frameworks.

Responsibilities

• Conduct information security risk assessments across technology platforms, projects, and business initiatives.
• Provide security consultancy and guidance to technical and non-technical stakeholders.
• Review solution designs and architecture to ensure alignment with security requirements and best practice.
• Support the development, implementation, and continuous improvement of security policies, standards, and control frameworks.
• Identify security gaps and provide pragmatic recommendations to reduce organisational risk.
• Assess security controls across cloud, infrastructure, and enterprise technology environments.
• Support vulnerability management and remediation programmes.
• Assist with audit, compliance, and regulatory activities.
• Promote secure-by-design principles across projects and change initiatives.
• Build strong relationships across the business to enhance security awareness and resilience.

Skills

Security governance

Risk management

Security controls

Stakeholder management

Security consultancy

Cloud security

Vulnerability management

Education

CISSP / CISM / CRISC

Tools

Azure

AWS

GCP

Job description

Bestman Solutions is seeking an experienced Information Security Consultant to strengthen governance, risk management, and secure-by-design practices across a complex technology estate. This permanent, hybrid role combines consultancy, risk assessment, stakeholder engagement, and technical advisory responsibilities.

You will collaborate with technology, project, and business teams to embed security into strategic initiatives and day-to-day operations, promoting secure practices and resilient