Cyber Security - Secure by Design Consultant

London
7 months ago
Applications closed

Related Jobs

View all jobs

CYBER SECURITY ANALYST | SECURITY OPERATIONS CENTRE (SOC)

Cyber Security Operations Manager

Cyber Security Trainee Placement Programme

Cyber Security Trainee Placement Programme

Cyber Security Trainee Placement Programme

Cyber Security Trainee Placement Programme

Cyber Security - Secure by Design Consultant (Contract)
London | £680 per day | 6-month initial contract (with strong potential to go permanent)

Deerfoot Recruitment is working with a leading financial services organisation to recruit a Secure by Design Consultant to join their IT Risk, Security & Control function in London. This is a 6-month contract paying £680 per day (Inside IR35), with a high likelihood of converting to a permanent role.

The successful candidate will play a key role in delivering secure-by-design assessments across technology projects, ensuring compliance with IT security policies and industry standards. You will work closely with senior stakeholders, providing assurance on cybersecurity controls, identifying risks, and recommending actions to strengthen the organisation's security posture.

Key responsibilities include:

Conducting IT security assessments across infrastructure, cloud, applications, and service operations projects.

Reviewing and testing security controls to ensure operating effectiveness.

Documenting risks, gaps, and recommendations for remediation.

Supporting project teams to embed security requirements from the outset.

Engaging with senior stakeholders and providing clear, actionable reporting.

Skills & experience sought:

Strong background in IT Security, Cyber Assurance, or IT Audit.

Hands-on knowledge across areas such as governance, IAM, threat management, vulnerability management, and incident response.

Good understanding of security frameworks (e.g. ISO27001, NIST, PCI-DSS, SOX).

Experience engaging with senior stakeholders within complex environments.

Relevant certifications (CISSP, CISM, CISA, CRISC) desirable.

This is an exciting opportunity to join a high-performing cyber security team within a global financial services organisation, with genuine long-term career potential.

Deerfoot Recruitment Solutions Ltd is a leading independent tech recruitment consultancy in the UK. For every CV sent to clients, we donate £1 to The Born Free Foundation. We are a Climate Action Workforce in partnership with Ecologi. If this role isn't right for you, explore our referral reward program with payouts at interview and placement milestones. Visit our website for details. Deerfoot Recruitment Solutions Ltd acts as an Employment Business in relation to this vacancy

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Penetration Tester Jobs in the UK: What Employers Actually Want in 2026

The demand for skilled professionals in cyber security has never been higher, and penetration testers sit at the very heart of this rapidly evolving industry. As organisations across the UK continue to digitise their operations, protect sensitive data, and defend against increasingly sophisticated threats, the need for ethical hackers has grown dramatically. If you are considering a career in this field—or looking to advance within it—it is essential to understand what employers are really looking for in 2026. This guide breaks down the current expectations, required skills, certifications, and practical experience that can help you stand out in a competitive job market.

SOC Analyst Jobs UK 2026: Salaries, Skills & How to Get Hired

Cyber security is one of the UK's fastest-growing career paths — and SOC analyst is where most people begin. It's in high demand, genuinely accessible, and you don't need a degree or years of experience to get started. But knowing what UK employers actually want in 2026 — what they pay, which certs matter, and how to stand out — is a different matter. This guide covers all of it.

How Many Cyber Security Tools Do You Need to Know to Get a Cyber Security Job?

If you are trying to build or move forward in a cyber security career, it can feel like the list of tools you are expected to know never ends. One job advert asks for SIEM platforms, another mentions penetration testing tools, another lists cloud security, threat intelligence platforms, endpoint detection, scripting languages and compliance frameworks. Scroll LinkedIn and it gets worse. Everyone seems to “know” dozens of tools, certifications and platforms. Here is the reality most cyber security hiring managers agree on: they are not hiring you because you know every tool. They are hiring you because you understand risk, can think like an attacker and a defender, follow process, communicate clearly and make good decisions under pressure. Tools matter — but only when they support those outcomes. So how many cyber security tools do you actually need to know to get a job? For most job seekers, the answer is far fewer than you think. This article explains what employers really expect, which tools are essential, which are role-specific and how to focus your learning so you look credible, not overwhelmed.