Portfolio Security Consultant | Hybrid & Growth-Focused

Intact Insurance (previously RSA); United Kingdom; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Annual discretionary bonus

Pension contributions

Hybrid working

Leave allowance

Health & wellbeing

Career development

Inclusive culture

Share options

Job summary

Intact Insurance is transforming its security practice across the UK and Europe. The Portfolio Security Technical Consultant role sits within Security Strategy, Architecture & Portfolio Security, reporting to the Portfolio Security Manager.

You will provide hands‑on security consultancy across a broad portfolio of change, technology and business initiatives, ensuring security is embedded through delivery and aligned to internal policies, standards and regulatory expectations.

Qualifications

• Strong depth in cyber security across domains including cloud, network, and applications.
• Experience embedding security into delivery frameworks (Agile/Waterfall/Hybrid).
• Ability to review architectures, data flows, and supplier security proposals.

Responsibilities

• Provide security consultancy across project and programme portfolios.
• Assess solutions to ensure they are secure by design and aligned to security policies, standards and regulatory expectations.
• Identify, assess and help manage security risks and control gaps.
• Reviewing and challenging technical designs, architectures, integrations and data flows from a security perspective.
• Support portfolio governance, assurance and reporting on security across change initiatives.

Skills

Security architecture

Secure design principles

Change delivery frameworks

Security reviews

Job description

Intact Insurance is transforming its security practice across the UK and Europe. The Portfolio Security Technical Consultant role sits within Security Strategy, Architecture & Portfolio Security, reporting to the Portfolio Security Manager.

You will provide hands‑on security consultancy across a broad portfolio of change, technology and business initiatives, ensuring security is embedded through delivery and aligned to internal policies, standards and regulatory expectations.