Portfolio Security Consultant - Secure by Design (Hybrid)

Royal & Sun Alliance Insurance Ltd; Horsham; Hybrid; GBP 85,000 - 120,000; Full time

Benefits offered by this job

Annual discretionary bonus

Up to 11% pension contributions

Hybrid working

25 days annual leave

Health & wellbeing + virtual GP

Career development and mentoring

Inclusive culture + employee networks

Share investment options

Job summary

Intact Insurance is transforming UK security across a broad portfolio of change initiatives. The Portfolio Security Technical Consultant provides hands-on security consultancy, embedding secure design into delivery and ensuring alignment with policies and regulatory expectations.

You will assess risks, review designs, and support governance across programmes. The role requires strong cyber security knowledge across domains, with pragmatic application to varied technologies and delivery contexts.

Qualifications

• Deep security architecture knowledge across apps, infra and cloud.
• Experience embedding security into delivery frameworks.
• Ability to review designs and data flows from a security perspective.
• Experience across Agile, Waterfall and hybrid delivery models.

Responsibilities

• Provide security consultancy across project portfolios.
• Ensure solutions are secure by design and aligned to security policies.
• Identify and manage security risks and control gaps.
• Review architectures, data flows and integrations for security.
• Support portfolio governance and reporting on security across change initiatives.

Skills

Security architecture

Secure design

Security in delivery

Cloud security

IAM & data protection

Job description

Intact Insurance is transforming UK security across a broad portfolio of change initiatives. The Portfolio Security Technical Consultant provides hands-on security consultancy, embedding secure design into delivery and ensuring alignment with policies and regulatory expectations.

You will assess risks, review designs, and support governance across programmes. The role requires strong cyber security knowledge across domains, with pragmatic application to varied technologies and delivery contexts.