Security Consultant - H&PS

Accenture UK & Ireland; Newcastle upon Tyne; Hybrid; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Vacation days 25–30 per year

Private medical insurance

Charity leave 3 days/year

Job summary

Accenture UK & Ireland is seeking a Security Consultant - H&PS in Newcastle (hybrid). You will work on delivering security for health, public sector, defence and central government projects, applying cutting-edge technologies and a collaborative culture to drive secure outcomes across the project lifecycle.

Responsibilities include reducing cyber risk, threat modelling, defining monitoring, supporting procurement with security requirements, maintaining traceability, and providing evidence to

Qualifications

• Experience in public cloud, app security or networking required.
• Ability to assess risks and design proportionate controls.
• Experience across cloud, hybrid and on‑prem environments.
• Familiarity with recognised security frameworks.

Responsibilities

• Reduce cyber risk by embedding security throughout the project lifecycle.
• Conduct threat modelling and align with MITRE ATT&CK where possible.
• Define monitoring and logging to detect control failures and incidents.
• Support procurement by drafting security requirements and schedules.
• Maintain traceability linking threats, controls, tests and risks.
• Provide assurance evidence for go‑live and in‑service risk decisions.
• Translate laws and standards into practical security requirements.
• Collaborate with teams to embed security controls from design to operation.

Skills

Public cloud

Application security

Networking

On-premises infrastructure

Threat modelling

Risk analysis

Security controls

Monitoring & logging

Security frameworks

Security testing

Configuration reviews

Technical investigations

SFIA level 3-5

Job description

Security Consultant - H&PS

Salary: Competitive Salary & Package (Dependent on Experience)

Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) at the point of application. This role also requires full British Nationality at point of application.

Note: The above information relates to a specific client requirement

Location: Newcastle (hybrid)

As a team: You'll work on innovative projects with colleagues to drive collaboration from strategy through to implementation. You will be using the latest technologies with clients to help them get to the next level. Do you want to work in an environment where you will be part of a thriving team working on the most complex security challenges in the UK health, public sector, Defence and Central Government. You'll learn, grow and advance in an innovative culture that thrives on shared success, diverse ways of thinking and enables boundaryless opportunities that can drive your career in new and exciting ways. If you’re looking for a challenging career working in a vibrant environment with access to training and a global network of experts, this could be the role for you. As part of our global team, you'll be working with cutting-edge technologies and will have the opportunity to develop a wide range of new skills on the job.

Responsibilities:

• Reduce cyber risk within technology projects by ensuring appropriate security requirements, controls, monitoring, and assurance activities are identified, specified, and evidenced throughout the project lifecycle.
• Conduct threat modelling activities, including alignment with frameworks such as MITRE ATT&CK, to identify credible threats and define proportionate security controls.
• Define monitoring and logging requirements to detect control failures, security incidents, or compromises in live operational environments.
• Support procurement activities by developing security requirements and contractual security schedules.
• Maintain traceability and evidence linking security obligations, threats, requirements, controls, testing outcomes, risks, and decision-making.
• Provide assurance evidence to support risk owners’ go-live and in-service risk decisions.
• Interpret relevant laws, policies, standards, and regulatory requirements and translate them into practical security requirements for project teams.
• Support compliance and governance activities by ensuring security requirements are understood, implemented, and evidenced throughout delivery.
• Work collaboratively with project teams to embed security controls and risk management practices into technology solutions from design through to operation.

We are looking for experience in the following skills:

• Strong technical knowledge in at least one of the following areas:
• Public cloud
• Application security
• Networking
• On-premises infrastructure
• Understanding of threat modelling, security controls, and risk analysis principles.
• Ability to assess risks and recommend proportionate security controls and monitoring measures, rather than relying solely on templates or standard security checklists.
• Experience working across cloud, hybrid, third-party, and non-standard technology environments.
• Familiarity with at least one recognised security framework
• Ability to validate security assumptions through evidence-based activities, including:
• Security testing
• Configuration reviews
• Technical investigations
• Strong analytical and problem-solving skills, with the ability to make informed security recommendations based on technical evidence.
• Ability to translate technical security concepts into practical guidance for delivery teams and stakeholders.
• Comfortable working within varying levels of service complexity and autonomy, aligned to SFIA levels 3–5.

What’s In It For You:

• 25 -- 30 days’ vacation per year
• Private medical insurance
• 3 extra days leave per year for charitable work of your choice

Flexibility and mobility are required to deliver this role as there may be requirements to spend time onsite with our clients and partners to enable delivery of the first-class services we are known for.