Senior Information Security Consultant

GDS Link; Leeds; On-site; GBP 75,000 - 110,000; Full time

Job summary

GDS Link in the United Kingdom is seeking a Senior Information Security Consultant to own security controls end-to-end, focusing on ISO 27001 and SOC 2 audits, while remaining hands-on in AWS-hosted environments.

You will act as the primary technical contact for auditors, drive remediation, and provide senior security expertise across IAM, monitoring, vulnerability management, SIEM, and incident response.

Qualifications

• Senior experience in a technical information security role.
• Direct ownership of ISO 27001 and/or SOC 2 audit controls, including auditor interaction and remediation.
• Strong hands-on experience securing AWS-hosted environments.
• Practical experience with vulnerability management, SIEM, and monitoring.
• Ability to explain technical controls to auditors and engineers with sound judgement.

Responsibilities

• Own assigned areas of ISO 27001 and/or SOC 2 audits as technical control owner.
• Act as primary technical point of contact for auditors, leading walkthroughs and responding to queries.
• Define, review, and approve technical audit evidence and drive remediation of findings.
• Provide senior hands-on security expertise across AWS (IAM, logging, monitoring, network security).
• Own or oversee vulnerability management, including prioritisation, remediation, and audit-ready reporting.
• Provide senior input into SIEM, monitoring, and incident response.
• Oversee endpoint and SaaS security controls (e.g. Microsoft 365).
• Act as a senior technical authority and coach less-senior team members.

Skills

AWS security

ISO 27001

SOC 2

GRC

Vulnerability management

SIEM

Monitoring

Incident response

Endpoint security

SaaS security

Automation scripting

Tools

Microsoft 365

Job description

Role Summary

The Senior Information Security Consultant is a senior individual contributor role that spans both Cyber Security and Information Security Governance (GRC). The role owns security controls end-to-end and is directly accountable for ISO 27001 and/or SOC 2 audit outcomes, while remaining hands-on across AWS-hosted environments.

Description

Cyber & GRC / Cloud & Audit Focus

Role Summary

The Senior Information Security Consultant is a senior individual contributor role that spans both Cyber Security and Information Security Governance (GRC). The role owns security controls end-to-end and is directly accountable for ISO 27001 and/or SOC 2 audit outcomes, while remaining hands-on across AWS-hosted environments.

Key Responsibilities

• Own assigned areas of ISO 27001 and/or SOC 2 audits as technical control owner.
• Act as primary technical point of contact for auditors, leading walkthroughs and responding to queries.
• Define, review, and approve technical audit evidence and drive remediation of findings.
• Provide senior hands-on security expertise across AWS (IAM, logging, monitoring, network security).
• Own or oversee vulnerability management, including prioritisation, remediation, and audit-ready reporting.
• Provide senior input into SIEM, monitoring, and incident response.
• Oversee endpoint and SaaS security controls (e.g. Microsoft 365).
• Act as a senior technical authority and coach less-senior team members.

Requirements

Required Experience

Essential:

• Senior experience in a technical information security role.
• Direct ownership of ISO 27001 and/or SOC 2 audit controls, including auditor interaction and remediation.
• Strong hands-on experience securing AWS-hosted environments.
• Practical experience with vulnerability management, SIEM, and monitoring.
• Strong judgement and ability to explain technical controls to auditors and engineers.

Desirable

• SaaS or cloud-native environments.
• Familiarity with NIST CSF or CIS Controls.
• Automation or scripting experience.
• Relevant certifications (ISO 27001, AWS Security, CISSP, etc.).