Senior Security Consultant - Transformations

JR United Kingdom; Greater London; Hybrid; Full time

Job summary

A leading infrastructure operator in the UK seeks a Senior Security Consultant for a 12-month assignment focused on business transformation. The role will encompass providing security assurance and guidance across various digital projects, ensuring compliance with security standards, and engaging with stakeholders to enable secure outcomes in major initiatives involving platforms like Salesforce and AWS. Ideal candidates will have significant experience in cyber security consultancy and excellent communication skills to engage effectively with technical and business teams.

Qualifications

• At least 5 years’ experience in cyber security consultancy or security-led transformation roles.
• Strong technical grounding in architecture and third-party risk assurance.
• Familiarity with CAF or OT environments is essential.

Responsibilities

• Deliver end-to-end security assurance across high-impact transformation projects.
• Conduct threat modelling and risk assessments.
• Translate cyber risks into business impacts for stakeholders.

Skills

Cyber security consultancy

Security architecture

Risk assessment

Threat modelling

Communicating with stakeholders

Compliance with NCSC Cyber Assessment Framework

Tools

Salesforce

Oracle

AWS

Job description

Social network you want to login/join with:

Senior Security Consultant - Transformations, surrey

col-narrow-left

Client:

Bestman Solutions

Location:

surrey, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

2

Posted:

31.05.2025

Expiry Date:

15.07.2025

col-wide

Job Description:

Senior Information Security Consultant – Business Transformation

12-month assignment, Inside IR35, £750 - £800 per day, Hybrid (mainly home working)

A major infrastructure operator is embarking on a complex business and technology transformation—and they need a senior security consultant to ensure these initiatives are secure by design. This 12-month assignment (with strong extension potential) is ideal for someone who thrives at the intersection of security assurance and enterprise change.

Acting as the security SME embedded within delivery teams, you’ll provide hands-on, pragmatic guidance across a portfolio of digital projects—shaping architecture, guiding risk decisions, and ensuring compliance with internal standards and the NCSC Cyber Assessment Framework.

This is an advisory role with depth: you’ll translate complex technical risks into business terms, engage senior stakeholders in proportionate decision-making, and help drive secure outcomes across platforms including Salesforce, Oracle, and AWS. (Salesforce experience highly advantageous)

Key Responsibilities:

• Deliver end-to-end security assurance across high-impact transformation projects
• Conduct threat modelling, risk assessments, and architecture reviews to validate secure-by-design principles
• Translate cyber risks into business impacts—enabling stakeholders to make balanced, cost-aware decisions
• Support compliance with internal policies and the NCSC Cyber Assessment Framework (CAF)
• Collaborate with business and technical leads to embed security into the delivery lifecycle

Candidate Profile:

• At least 5 years’ experience in cyber security consultancy or security-led transformation roles
• Strong technical grounding in security architecture, secure design, and third-party risk assurance
• Clear communicator—able to engage both engineers and business stakeholders with equal confidence
• Familiarity with CAF or OT environments is essential; prior work in critical infrastructure is desirable
• Experience with Salesforce, Oracle, and AWS in programme environments is a distinct advantage
• Practical mindset—comfortable advising on proportionate controls, trade-offs, and real-world constraints

You’ll join a collaborative, delivery-focused team where flexibility is key. Expect remote-first working with periodic site visits for workshops or key engagements.

If you combine deep technical assurance with the ability to influence business thinking, we’d love to speak with you.