Senior Risk & amp ; Resilience Consultant , Information Security ( Associate )

LGBT Great; Birmingham; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Life assurance

Income protection

Private medical insurance

Pension plan

Annual leave 25 days (27 after five)

Flexible benefits

Job summary

Howden is seeking a Senior Risk & Compliance Consultant (Data Privacy/Information Security) to lead our Information Security practice across UK offices with hybrid working. You will manage the team, shape strategy, and oversee client engagements in governance, risk, and compliance, including ISO/IEC 27001 and Cyber Essentials.

You will also address AI governance and evolving tech risks. You will build trusted advisor relationships, guide senior stakeholders, and contribute to business growth

Qualifications

• Proven experience leading information security consultancy services and managing client relationships.
• Experience with ISO/IEC 27001, Cyber Essentials and information security governance.
• Experience leading and developing teams, including performance management.

Responsibilities

• Lead the strategic direction, performance and growth of the Information Security practice, ensuring the delivery of high-quality, commercially focused consultancy services.
• Provide leadership, mentoring and day-to-day management to the Information Security team, fostering a collaborative, accountable culture.
• Develop trusted advisor relationships with clients, providing strategic guidance on information security governance, risk management and regulatory compliance.
• Oversee successful delivery of client engagements across information security and assurance disciplines, including ISO/IEC 27001 and Cyber Essentials.
• Support proposal development, client presentations and bid activities to secure new business.
• Monitor threat landscape, regulatory environment, emerging technologies and AI to keep offerings relevant and innovative.
• Lead development and improvement of methodologies, templates and delivery standards, incorporating new technologies including AI.
• Champion thought leadership through client workshops, webinars and industry events.

Skills

Information security leadership

Risk management

ISO 27001

Cyber Essentials

AI governance

Client relationship management

Strategic planning

Mentoring & people management

Tools

Governance frameworks

Security architecture

Job description

We have an exciting, permanent opportunity for a Senior Risk & Resilience Consultant / Information Security Consultant & Manager (Associate level) to join any of our UK offices (hybrid working) as we continue to grow.

You’ll provide day-to-day hands-on strategic level leadership within a growing high-performing and fast paced consultancy environment, ensuring the security team delivers high quality, responsive services to both internal stakeholders and clients.

In addition to people management and leadership responsibilities, this position is strategic, hands on and client facing with responsibility for shaping the direction and ongoing development of our Information Security practice. You will oversee the delivery of client engagements across a range of security and assurance frameworks, including ISO/IEC 27001 and Cyber Essentials, while identifying opportunities to enhance service offerings, strengthen team capability and support business growth. Working closely with colleagues across Data Privacy, Business Continuity, Enterprise Risk and the wider Howden Group, you will help deliver joined-up, client-centric solutions that address complex business challenges. You will also monitor developments in the threat landscape, emerging technologies and Artificial Intelligence (AI), helping clients understand both the opportunities and risks associated with technological change. A particular area of focus will be helping clients and colleagues navigate the rapidly evolving AI landscape. A key requirement of the role is the ability to communicate information security risks clearly and meaningfully, translating technical issues into business focused impacts that enable stakeholders to make confident, informed decisions.

A snapshot of your day:

• Lead the strategic direction, performance and growth of the Information Security practice, ensuring the delivery of high-quality, commercially focused consultancy services.
• Provide leadership, mentoring and day-to-day management to the Information Security team, fostering a collaborative, accountable and high-performing culture and ensuring effective allocation of people, tools and investment to meet operational and business objectives.
• Develop and maintain trusted advisor relationships with clients, providing strategic guidance on information security governance, risk management, regulatory compliance and security best practice.
• Oversee the successful delivery of client engagements across a range of information security and assurance disciplines, including ISO/IEC 27001, Cyber Essentials and wider governance, risk and compliance activities, whilst driving collaboration across Information Security, Data Privacy, Business Continuity, Enterprise Risk and the wider Howden Group to deliver integrated and client‑focused assurance services and identify opportunities to expand and enhance the organisation's security service portfolio
• Support proposal development, client presentations and bid activities, helping secure new business opportunities and strengthen existing client relationships.
• Monitor developments in the threat landscape, regulatory environment, emerging technologies and Artificial Intelligence (AI), ensuring service offerings remain relevant, innovative and aligned to market needs.
• Lead the development and continuous improvement of methodologies, frameworks, policies, templates and delivery standards to enhance quality, consistency and operational efficiency and identify opportunities to leverage new technologies, including AI
• Champion thought leadership initiatives, representing the organisation through client workshops, webinars, industry events, publications and market‑facing activities.

We would love to hear from you if you have:

• Proven experience leading information security consultancy services and managing client relationships.
• Excellent understanding of information security, risk management and compliance principles and ability to explain security risks in clear, business focused terms
• Experience in ISO/IEC 27001, Cyber Essentials and information security governance (e.g., implementing ISO/IEC 27001 as a consultant; conducting or supporting internal ISO/IEC 27001 audits; guiding organisations through Cyber Essentials and/or Cyber Essentials Plus)
• Experience leading and developing teams, including performance management, mentoring and resource planning.
• Ability to deliver strategic security advice to senior stakeholders and support risk‑based decision‑making.
• Experience managing multiple projects, budgets and competing priorities within a consultancy or professional services environment.
• Strategic thinking and the ability to identify and track opportunities for growth, innovation, service development and client retention.
• Ability to deliver effective information security training and awareness sessions
• Understanding of evolving AI‑related regulations, standards and best practices and the opportunities and risks associated with AI and emerging technologies
• Ability to advise on AI governance, security, privacy and responsible adoption.
• Excellent commercial awareness and client‑focused mindset

One or more of the following would be advantageous:

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CRISC (Certified in Risk and Information Systems Control)
• Relevant privacy, risk management or AI governance certifications
• ISO 27001 Lead Implementer, Lead Auditor, Cyber Essentials Assessor)

What's in it for you:

• Competitive discretionary annual bonus.
• Core benefits including life assurance of four times salary, income protection of 75% of salary for up to five years, and single private medical insurance cover.
• A generous pension scheme with 5% employee contributions matched by a 10% employer contribution.
• 25 days' annual leave, increasing to 27 days after five years' service.
• Access to the Howden flexible benefits programme, offering a wide range of benefits and discounts to support your wellbeing, family life and lifestyle.
• The opportunity to be part of a growing global business where career development, collaboration and innovation are encouraged.
  

If you require reasonable adjustments or want more information on accessibility, please let us know

Follow Howden on

We kindly ask recruitment agencies to not send speculative CVs.

• Job Identification 1165
• Job Category All Jobs
• Posting Date 10/08/2026, 11:32 AM
• Locations United Kingdom Amersham, United Kingdom Birmingham, United Kingdom Bristol, United Kingdom Cheltenham, United Kingdom Glasgow, United Kingdom Guildford, United Kingdom Leeds, United Kingdom Liverpool, United Kingdom London, United Kingdom

• Senior Risk & Compliance Consultant (Data Privacy) United Kingdom and 6 more Posted on 10/05/2026
• Senior Risk & Compliance Consultant, Data Privacy, DPO, United Kingdom and 9 more Posted on 09/25/2026

  Barnett Waddingham is now Howden, bringing our people together as one and offering our people greater opportunities to grow, connect and develop.

• Senior Consulting Actuary - Capital & Risk (Life Insurance) United Kingdom and 9 more Posted on 10/07/2026

  Barnett Waddingham is now Howden, bringing our people together as one and offering our people greater opportunities to grow, connect and develop.