Security Consultant

InfoSec People Ltd; United Kingdom; On-site; GBP 45,000 - 65,000; Full time

Job summary

InfoSec People Ltd is seeking a Security Consultant to support and deliver Cyber Essentials Plus and Defence Cyber Certification engagements. You will work directly with clients to assess, challenge and improve security controls and help raise the bar across the wider team.

The role offers a collaborative environment with learning on the job and opportunities to learn new assessment frameworks, including Defence Cyber Certification (DCC).

Qualifications

• IASME-certified Cyber Essentials assessor status is required.
• Experience with ISO 27001 and security assurance activities.
• Experience with vulnerability management and security governance.

Responsibilities

• Deliver cyber security assessments and assurance engagements.
• Support Cyber Essentials assessments.
• Conduct security reviews against recognised frameworks including ISO 27001.
• Review the effectiveness of technical and operational security controls.
• Identify security risks, control gaps and areas for improvement.
• Produce clear reports and practical recommendations.
• Engage with technical and non-technical stakeholders.
• Support organisations through remediation and continual improvement activities.
• Contribute to the development of assurance methodologies and best practices.
• Share technical knowledge and support the development of colleagues within the team.

Skills

ISO 27001

Security assurance

Vulnerability management

Security governance

Cloud security concepts

Technical security controls

Consultancy / client-facing experience

Job description

We're partnering with a growing cyber security consultancy that's building something genuinely exciting within its assurance practice. They're looking for a Security Consultant to support and deliver Cyber Essentials Plus and Defence Cyber Certification engagements, working directly with clients to assess, challenge and improve security controls.

What makes this opportunity different is the opportunity to develop. They're not looking for someone who simply follows a process. They want someone technically curious who enjoys getting under the skin of security controls, adding value to clients and helping raise the bar across the wider team.

You'll join a collaborative, supportive environment where learning is actively encouraged, new frameworks can be learned on the job and your ideas are genuinely valued. Whether you're currently working in information security, security assurance, compliance or consultancy, this is an opportunity to broaden your experience, deepen your technical expertise and accelerate your career within a specialist cyber security business.

What you'll do

• Deliver cyber security assessments and assurance engagements
• Support Cyber Essentials assessments
• Conduct security reviews against recognised frameworks including ISO 27001
• Review the effectiveness of technical and operational security controls
• Identify security risks, control gaps and areas for improvement
• Produce clear reports and practical recommendations
• Engage with technical and non-technical stakeholders
• Support organisations through remediation and continual improvement activities
• Contribute to the development of assurance methodologies and best practices
• Share technical knowledge and support the development of colleagues within the team

What We're Looking For

We're more interested in finding the right person than someone who ticks every box. If you have experience in some of the areas below and are keen to continue developing your expertise, we'd love to hear from you.

You must be a qualified IASME-certified Cyber Essentials assessor

• ISO 27001
• Security assurance and compliance activities
• Security control assessments
• Vulnerability management
• Security governance
• Cloud security concepts
• Technical security controls
• Consultancy or client-facing experience

Why Apply?

• Funded training and certifications
• Exposure to a wide range of cyber security frameworks
• Clear career progression opportunities
• Opportunity to learn new assessment frameworks, including Defence Cyber Certification (DCC)
• Supportive and highly collaborative team environment
• Inclusive culture where learning and development are actively encouraged

If you're passionate about cyber security, enjoy working with people and want to develop your expertise within a growing consultancy, we'd love to hear from you.