Senior Information Security Consultant

TransUnion; Leeds; On-site; GBP 50,000 - 90,000; Full time

Job summary

Join a forward-thinking organization as a Senior Information Security Consultant, where you will play a crucial role in maintaining security compliance across various sectors. You will guide technology teams on best practices, work closely with engineering to ensure adherence to security standards, and proactively address emerging threats. This role offers a dynamic environment where your expertise will contribute to the security of innovative products. With a commitment to flexibility and inclusivity, this company fosters a culture of growth and development, making it an exciting opportunity for those passionate about information security.

Benefits

26 days annual leave

Global paid wellness days

Contributory pension scheme

Private health care

Mindfulness tools access

Diversity forums and communities

Qualifications

• 5+ years in application security and compliance.
• Experience in cloud environments and secure SDLC.
• In-depth knowledge of threat modeling and secure architecture.

Responsibilities

• Guide teams on secure coding and vulnerability management.
• Conduct threat modeling and maintain security standards.
• Collaborate with engineering to ensure compliance.

Skills

Application Security

Cloud Security

Secure Coding Practices

Threat Modeling

Compliance Standards

Problem Solving

Stakeholder Influence

Education

CISSP Certification

CISA Certification

Security+ Certification

Tools

SAST Tools

DAST Tools

OWASP Standards

PCI-DSS Standards

ISO27001 Standards

NIST Framework

Job description

TransUnion is a major credit reference agency, and we offer specialist services in fraud, identity and risk management, automated decisioning and demographics. We support organisations across a variety of sectors including finance, retail, telecommunications, utilities, gaming, government and insurance.

We’re looking for a Senior Information Security Consultant to join our growing team.

The Senior Security Consultant is responsible for maintaining end-to-end security through compliance with global policy, standards, regulations and industry best practices. This person works with Information Security management to implement a cloud first programme for enabling security standards across people, process and technology within the TransUnion Monevo portfolio.

Day to Day You’ll Be:

• Guides and advises technology teams on infrastructure vulnerability and threat management principles, secure coding practices, secure software development methodologies, and secure development lifecycle (SDLC) processes
• Works with engineering and development team to ensure in-house technologies comply with relevant security standards, regulations, and industry certifications, such as OWASP, CIS, PCI-DSS, ISO27001 to ensure security is prioritised throughout the development lifecycle
• Maintains current understanding of policy, regulations, and compliance standards that affect assigned areas of responsibility and proactively helps to update internal standards, best practices and architectures based on this information
• Assists Engineering teams with adoption to changes in application security tooling (SAST, DAST, etc.) and interpretation of its results to ensure vulnerabilities are addressed on a timely basis and prevented from deployment into production
• Builds relationships and partners with functional areas and leadership across the business and Global Technology to raise awareness and support for Product Security
• When necessary, conducts Threat Modeling of products and applications within the organization to identify potential threats and vulnerabilities
• Provides periodic updates, education and presentations to staff and management on various aspects of product security
• Maintains relationships with internal and external auditors and assessors to facilitate execution of audits and assessments
• Stays up to date with emerging threats, technologies, and industry trends to proactively identify and address potential risks to the organisation's products
• 5+ years of experience working with application security, product security and product security architectures with a focus on compliance with policies, standard, regulations and best practices
• 3+ years of information security experience in cloud environments.
• In depth experience secure coding practices, threat modeling, secure architecture design, and secure SDLC/CICD pipelines
• In-depth technical experience with identifying and advising on the remediation of application security vulnerabilities on application platforms, including cloud and web based
• Demonstrated ability as a proactive action-oriented problem solver in complex technology and organizational environments
• Experience in presenting to senior technology and information security executives and in influencing stakeholders to achieve strategic objectives
• Experience in working with industry frameworks and standards such as OWASP, PCIDSS, ISO27001/27002, CIS and NIST
• Information Security (CISSP, CISA, Security +) and cloud certification (preferably GCP/AWS)

What’s In It For you?

At TransUnion you will be joining a friendly, forward thinking global business.

As well as an excellent salary and bonus scheme or commission scheme (if joining our sales teams) our benefits package comes with:

• 26 days’ annual leave + bank holidays (increasing with service)
• Global paid wellness days off + a bonus day off to celebrate your birthday
• A generous contributory pension scheme + access to the TransUnion Employee Stock Purchase Plan
• Private health care + a variety of physical, mental and financial fitness wellbeing programmes such as access to mindfulness tools
• Access to our diversity forums and communities so you can get involved in causes close to your heart

TransUnion – a place to grow:

If there’s something on the list of essential / desirable skills that you can’t quite tick off, don’t let that put you off applying. We are open to exploring training and development opportunities for the right candidate to ensure you are successful.

We know imposter syndrome is real, lets confront it so we can continue to grow and thrive together

Flexibility at TU:

We recognise that our people need the freedom to balance their day-to-day lives with their work. This is why we’ve set out to create inclusive and flexible policies and practices for you to accommodate all your responsibilities and needs: children, family and beyond. If the role is advertised as full time, don’t let this stop you from applying. Let us know if you’re looking for a part time or flexible working arrangement and we can discuss this with you.

Additional support:

At TransUnion, we’re committed to fostering an inclusive and diverse workplace where all individual’s talents and perspectives are valued. When you apply for a position with us, you’re not just joining a team, you’re becoming part of a community that celebrates differences and embraces equality. We understand that everyone has different needs, which is why we offer a range of reasonable adjustments to our recruitment process. Please let us know if you require any reasonable adjustments to help you through the application process or to attend an interview with us by contacting [e-mail]

Interview & Hiring Process:

Most of our recruitment processes are virtual, so you’ll get to know our hiring managers and teams over the phone and through video. If we need you to attend a physical in person interview your recruiter will inform you of this.

We do not accept any unsolicited CV’s from recruitment agencies. If you are a recruitment agency on our PSL our talent team will contact you directly should we require any assistance.

Find out more about Life At TU UK:

https://twitter.com/TransUnionUK

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

Referrals increase your chances of interviewing at TransUnion by 2x

Get notified about new Information Security Consultant jobs in Leeds, England, United Kingdom.

Leeds, England, United Kingdom 2 weeks ago

Leeds, England, United Kingdom 1 week ago

Leeds, England, United Kingdom 3 days ago

Leeds, England, United Kingdom 2 weeks ago

Technical Consultant - Infrastructure Security (Security Cleared)

Gildersome, England, United Kingdom 3 weeks ago

Technical Consultant - Infrastructure Security (Security Cleared)

Gildersome, England, United Kingdom 3 weeks ago

Cyber Security & Digital Risk - Senior Consultant

Leeds, England, United Kingdom 23 hours ago

Recruitment Consultant (Cyber Security Market)

Leeds, England, United Kingdom 3 weeks ago

Security Design Engineer / Consultant - Property and Buildings

Leeds, England, United Kingdom 2 weeks ago

Information Security Analyst L2 ( Talent pool )

Selby, England, United Kingdom 4 months ago

Leeds, England, United Kingdom 1 month ago

Assistant Security Consultants / Security Engineers - Property and Buildings

Leeds, England, United Kingdom 2 weeks ago

Leeds, England, United Kingdom 2 months ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.