Senior Information Security Consultant – Business Transformation
12-month assignment, Inside IR35, £750 - £800 per day, Hybrid (mainly home working)
You can get further details about the nature of this opening, and what is expected from applicants, by reading the below.
A major infrastructure operator is embarking on a complex business and technology transformation—and they need a senior security consultant to ensure these initiatives are secure by design. This 12-month assignment (with strong extension potential) is ideal for someone who thrives at the intersection of security assurance and enterprise change.
Acting as the security SME embedded within delivery teams, you’ll provide hands-on, pragmatic guidance across a portfolio of digital projects—shaping architecture, guiding risk decisions, and ensuring compliance with internal standards and the NCSC Cyber Assessment Framework.
This is an advisory role with depth: you’ll translate complex technical risks into business terms, engage senior stakeholders in proportionate decision-making, and help drive secure outcomes across platforms including Salesforce, Oracle, and AWS. (Salesforce experience highly advantageous)
Key Responsibilities:
- Deliver end-to-end security assurance across high-impact transformation projects
- Conduct threat modelling, risk assessments, and architecture reviews to validate secure-by-design principles
- Translate cyber risks into business impacts—enabling stakeholders to make balanced, cost-aware decisions
- Support compliance with internal policies and the NCSC Cyber Assessment Framework (CAF)
- Collaborate with business and technical leads to embed security into the delivery lifecycle
Candidate Profile:
- At least 5 years’ experience in cyber security consultancy or security-led transformation roles
- Strong technical grounding in security architecture, secure design, and third-party risk assurance
- Clear communicator—able to engage both engineers and business stakeholders with equal confidence
- Familiarity with CAF or OT environments is essential; prior work in critical infrastructure is desirable
- Experience with Salesforce, Oracle, and AWS in programme environments is a distinct advantage
- Practical mindset—comfortable advising on proportionate controls, trade-offs, and real-world constraints
You’ll join a collaborative, delivery-focused team where flexibility is key. Expect remote-first working with periodic site visits for workshops or key engagements.
If you combine deep technical assurance with the ability to influence business thinking, we’d love to speak with you.
