Security Information Assurance Consultant

DXC Technology; City of Westminster; On-site; GBP 80,000 - 100,000; Full time

Job summary

A global technology services provider in the UK is seeking a Security Risk Manager to bridge technical teams and business stakeholders. The role involves translating security risks for non-technical staff, advising on mitigation strategies, and monitoring risk actions. Ideal candidates will have experience in information security risk management and relevant qualifications like CISM or CISSP. The company offers competitive compensation along with a comprehensive benefits package, ensuring a diverse team environment where continuous growth is encouraged.

Benefits

Competitive compensation

Pension scheme

Comprehensive benefits package

Discounts through Perks at Work

Recognition tools and employee incentives

Qualifications

• Experience in a similar information security role with risk management background.
• Desire to improve processes and investigate root causes of problems.
• Willingness to share knowledge and learn from others.

Responsibilities

• Translate technical security risks into business-readable terms.
• Monitor implementation and maintenance of risk management actions.
• Create and maintain risk assessment artefacts.

Skills

Information security risk management

Threat modelling techniques (STRIDE, Attack Trees)

Knowledge of Cloud technologies (AWS, MS Azure)

Strong teamwork ethic

Proactive mindset

Customer-first focus

Education

CISM, CISSP, IISP or equivalent

Tools

NIST Cyber Security Framework

OWASP

CIS

Job description

Job

Working closely with Security Architects and design teams, you will act as a bridge between technical teams and security risk owners from the business, translating technical security risks into an understandable form for non‑technical stakeholders. You will advise risk owners on severity and mitigation strategies, monitor the implementation and ongoing maintenance of agreed risk actions, and keep the risk register and other security documentation up to date.

In addition to managing risk, you will assist the Account Security Lead in creating and maintaining security processes, policies and guidance. You will proactively identify areas for improvement in security across the account, working to make security easier and more effective for everyone.

Responsibilities

• Translate technical security risks into business‑readable terms and advise on mitigation strategies.
• Monitor implementation and ongoing maintenance of agreed risk management actions.
• Create and maintain risk assessment artefacts such as risk registers and Security Operating Procedures.
• Assist the Account Security Lead with security‑related processes, policies and guidance.
• Proactively identify security improvement opportunities across the account.
• Implement standards, policies and procedures to drive continual service improvement.

Qualifications

• Experience in a similar or related role with a strong background in information security risk management.
• Desirable additional qualifications: CISM, CISSP, IISP or other professional body membership.
• Experience working to HMG guidance such as NCSC, DSIT Secure by Design, or GovS 007 best practices.
• Desire to improve processes and investigate root causes of problems.
• Willingness to share knowledge and learn from others.
• Proactive mindset in identifying risks and problems.
• Strong teamwork ethic with a customer‑first focus and a thirst for knowledge.

Desirable Skills and Technologies

• Deep knowledge of information and cyber security risk management.
• Experience with threat modelling techniques such as STRIDE or Attack Trees and the NIST Cyber Security Framework.
• Knowledge of technology stacks including Cloud (AWS, MS Azure), M365, VMWare, Redhat OpenShift, containers, Windows and Linux operating systems.
• Familiarity with industry guidance from OWASP and CIS.
• Awareness of security champions programmes.

Company Overview

At DXC Technology, we deliver mission‑critical services in a secure environment while fostering a people‑first agenda, community, and healthy work‑life balance. We are committed to building an inclusive environment where everyone can thrive, and we continuously innovate and modernise our operations to provide the best solutions for our clients.

Benefits

• Competitive compensation
• Pension scheme
• DXC Select – comprehensive benefits package (private health/medical insurance, childcare vouchers, gym membership, and more)
• Perks at Work (discounts on technology, groceries, travel, and more)
• DXC incentives (recognition tools, employee lunches, regular social events)

Employment Opportunities

We believe hiring a diverse team is crucial to our success and our recruiting decisions are based on your skills and experience as an individual. We actively encourage continuous growth and development through training, support, and tools to aid in your personal and professional progress.