Security Consultant

Location:London (Hybrid)
Contract Duration:6 Months
IR35:Inside IR35

We are looking for an experiencedSecurity Consultantwith a deep understanding of thefinancial services sector, focusing on the implementation and evaluation ofsecurity controls, ensuringregulatory compliance, and aligning security practices with industry standards.

Key Responsibilities:

• Design, implement, and assesssecurity controlsaligned with financial regulations and industry standards (e.g. ISO 27001, NIST, SWIFT CSCF).
• Ensure compliance with regulatory requirements such asDORA, SOX, PCI-DSS, GDPR, and manage audit and assurance activities.
• Conductrisk assessments, identify control gaps, and support remediation efforts across systems, projects, and third parties.
• Act as asecurity advisorto business and IT teams, translating technical risks into business context and guiding secure decision-making.
• Maintain and improve security policies, standards, and procedures to supportoperational resilienceand regulatory readiness.
• Track and report oncontrol maturity, compliance status, and emerging risks within financial operations.

Skills & Experience Required:

• Proven experience ininformation security or compliance roleswithin thefinancial services industry(e.g., banking, investment, fintech, insurance).
• Strong working knowledge of security and risk frameworks such asISO 27001, NIST CSF.
• Familiarity with financial regulatory requirements (e.g.,FCA/PRA, DORA, SOX, PCI-DSS, GDPR).
• Experience supporting or leadingaudits, compliance reviews, or risk assessmentsin regulated environments.
• Understanding ofcloud security, especially withinAWS, Azure, or hybrid infrastructure used in finance.
• Relevant certifications:CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor/Implementer, or equivalent.

#J-18808-Ljbffr