Senior Information Security Consultant

iO Associates; London; Hybrid; GBP 125,000 - 150,000; Full time

Job summary

A leading consultancy is seeking a Senior Information Security Consultant for a 6-month contract in the UK law enforcement sector. The role involves managing information assurance, compliance, and risk within a highly regulated environment. Candidates must hold NPPV3 clearance and have extensive experience with UK policing.

Qualifications

• Solid background in UK policing or Home Office programmes.
• Experience applying ISO27001, NIST, JSP440/JSP604 standards.
• Proven skills in risk assessments and audits.

Responsibilities

• Focus on information assurance, risk management, and compliance.
• Lead security audits and assess technical controls.
• Advise stakeholders on security policies and remediation.

Skills

Information risk management

Governance

Security assurance

Endpoint security

Network security

Security policies

Compliance

Education

NPPV3 Clearance

CISSP

CISA

CISM

ISO27001 Lead Auditor

Job description

Senior Information Security Consultant
NPPV3 Cleared (Law Enforcement)
6 month contract
Outside IR35 - £650-£750 per day
1 day per week on site in London, 4 days WFH
Starting ASAP (1-2 weeks' notice)

IO Associates are currently looking for a NPPV3 Cleared Senior Information Security Consultant for a 6 month contract with one of our long-term consultancy clients working in the UK law enforcement and cyber resilience sector.
This role focuses on information assurance, risk management, and compliance activities within a highly regulated environment. The ideal candidate will have a solid background working with UK policing or Home Office programmes, or directly with police forces across the UK.
NPPV3 Clearance is essential, and you must be based in the UK.

Key Skills and Experience:

• Extensive experience applying standards such as ISO27001, NIST, JSP440/JSP604, and NCSC guidance
• Proven background in information risk management, governance, and security assurance
• Experience leading or contributing to risk assessments, audits, and security documentation
• Strong knowledge of technical and organisational controls, including endpoint and network security
• Comfortable advising stakeholders on security policies, compliance, and remediation activities
• Background in regulated environments, preferably with experience in law enforcement, MOD, or Home Office programmes

Desirable:

• Certifications such as CISSP, CISA, CISM, or ISO27001 Lead Auditor
• Experience engaging with senior stakeholders in public sector cyber or protective security roles