Information Security Consultant

Location: Newcastle (Hybrid)
Salary: Up to£80,000 per annum + benefits

We are seeking an experienced and proactiveInformation Security Consultant to join our client's team. This is a hybrid position based in Newcastle, offering the opportunity to work with a diverse portfolio of clients, helping them strengthen their security posture and manage risk in an evolving threat landscape.

You will play a key role in delivering security advisory services, conducting assessments, and supporting organisations in aligning with industry standards and best practices. The role will also involve supporting clients with modern security challenges, including threat modelling, secure-by-design practices and emerging AI security considerations.

• Provide expert guidance on information security strategies, frameworks and best practices.

• Conduct security risk assessments, gap analyses and audits.

• Support clients in achieving and maintaining compliance with standards and regulations such asISO 27001, NIST and GDPR.

• Develop and review security policies, procedures and documentation.

• Perform vulnerability assessments and coordinate remediation efforts.

• Deliver threat modelling workshops and support secure solution design activities.

• Deliver security awareness training and workshops.

• Assist with incident response planning and post-incident reviews.

• Collaborate with technical and non-technical stakeholders to embed security into business processes.

• Proven experience working as anInformation Security Consultant or in a similar role.

• Strong understanding of security frameworks includingISO 27001, NIST and CIS Controls.

• Experience conducting threat modelling exercises and risk-based security assessments.

• Strong client-facing and stakeholder management skills.

• Experience working within a consultancy or advisory environment.

• Professional certifications such asCISSP, CISM, CRISC or ISO 27001 Lead Implementer/Auditor.

• Experience in consultancy or client-facing roles.

• Exposure to penetration testing or security engineering.

• Knowledge of secure software development practices andDevSecOps.

• Understanding of emerging security challenges, includingAI security.