IT Controls SME - Network Security

i-confidential; Bristol; On-site; GBP 80,000 - 100,000; Full time

Job summary

A leading consultancy is seeking a Security Controls SME in the UK to provide regulatory analysis and develop control mappings for global network security. The role demands expertise in financial services regulations and strong analytical skills. Ideal candidates will have knowledge of security architectures and experience with control frameworks like NIST CSF and ISO 27001. Excellent communication and consulting skills are essential. This contract is inside IR35.

Qualifications

• Good network security control knowledge, including architecture, segmentation, and enforcement points.
• Experience mapping controls against frameworks like NIST CSF, CIS v8, and ISO 27001.
• Understanding of financial regulations such as DORA, HKMA, and PRA/FCA.

Responsibilities

• Deliver regulatory analysis and control mapping for network security controls.
• Align controls to global regulatory requirements.
• Assess operational effectiveness of security controls.

Skills

Network security control knowledge

Control mapping against frameworks

Understanding of financial services regulatory environments

Analytical and documentation skills

Consulting experience

Excellent written and verbal communication

CISSP certification

CISM certification

CRISC certification

ISO 27001 Lead Auditor certification

Job description

We are currently looking for a Security Controls SME to work with our consultancy team on an engagement with one of our high-profile financial services clients. This role will be responsible for the delivery of regulatory analysis, control mapping, and roadmap development for global network security controls. The focus will be to align network security controls to global regulatory requirements and assess operational effectiveness.

Ideal Skills and Experience

• Good network security control knowledge — architecture, segmentation, enforcement points (firewalls, WAF, IDS / IPS, DDoS).
• Experience mapping controls against frameworks (NIST CSF, CIS v8, ISO 27001) and identifying gaps.
• Understanding of financial services regulatory environments – ideally exposure to DORA, HKMA, MAS, RBI, FFIEC, PRA / FCA.
• Proven ability to interpret and translate regulatory requirements into control obligations.
• Strong analytical and documentation skills – comfortable producing control mappings, maturity assessments, and roadmap artefacts.
• Consulting experience in control design or assurance preferred (Big 4 or Tier 1 bank background ideal).
• Excellent written and verbal communication; confident engaging senior stakeholders.
• Desirable certifications : CISSP, CISM, CRISC, ISO 27001 Lead Auditor (or equivalent experience).

Applicants must be based in the UK. Contract will be inside IR35.