Information Security Consultant - ISO27002 / GRC

A leading Financial Services client is now looking for an Information Security Consultant on a permanent basis. The role is offering a base of £75,000 (with flexibility) plus an attractive benefits package. The client has offices in London and on the South Coast, and hybrid / remote working is available.

As a pivotal second-line team member, you will collaborate closely with the Information Security Manager to safeguard the organisation against cyber, information, physical, and technical security risks. Your expertise will drive robust governance frameworks, policy management, and compliance with industry standards, ensuring the protection of our systems, suppliers, and people.

You’ll play a key role in ensuring the systems, suppliers, and people comply with security standards and regulations. From assessing technical controls and supplier risks to supporting incident response and contributing to the PCI-DSS and ISO 27002:2022 compliance, this is a role where you’ll make a visible impact.

Candidate Qualifications and Skills

• Experience in Financial Services: Proven background working within the financial services sector, with an understanding of its unique regulatory and security challenges.
• Cyber Security Expertise:In-depth knowledge of cybersecurity principles, risk management methodologies, and best practices to protect sensitive data and systems.
• Regulatory Framework Proficiency: Demonstrated experience with compliance frameworks, including ISO 27002, PCI-DSS, and GDPR, ensuring adherence to industry standards.
• Threat and Cloud Security Knowledge: Strong awareness of current threat landscapes and familiarity with cloud security principles (experience with Azure is advantageous).
• Relevant Certifications:Possession of industry-recognized certifications such as CISMP, CISM, or CISSP is highly desirable.
• Adaptability in Dynamic Environments: Thrives in fast-paced, smaller teams, with the ability to work autonomously and navigate ambiguity with confidence.
• Effective Communication: Excellent interpersonal and communication skills to engage and influence diverse stakeholders, delivering clear and actionable insights.

If you are an experienced Information Security Consultant with the required skills, please respond in the first instance with an up-to-date version of your CV for review.