Information Assurance Consultant

Information Assurance Consultant

+6 months +

+Hybrid London

+SC cleared role

+Outside IR35

+ 650 - 750 a day

+Sole British nationals only due to nature of the project

We are seeking an experienced Information Assurance (IA) Consultant to provide specialist cyber security and information assurance expertise across complex technology and transformation programmes within a secure, high-assurance environment.

The successful candidate will support the delivery of secure-by-design solutions, working closely with technical teams, architects and stakeholders to identify security risks, develop appropriate controls and ensure security requirements are embedded throughout the project lifecycle.

• Provide Information Assurance and cyber security expertise across complex programmes and technology projects.
• Review and assess technical solutions to identify security risks, vulnerabilities and areas for improvement.
• Support the development and implementation of security principles, standards and controls.
• Ensure security requirements are embedded into solution design and project governance.
• Work with technical teams and risk owners to ensure security controls are proportionate and aligned with the threat and risk environment.
• Assess cyber threats and translate threat intelligence into practical security controls and recommendations.
• Review cloud, hybrid and on-premises architectures from a security and assurance perspective.
• Support risk-based decision making and provide clear security advice to technical and non-technical stakeholders.
• Contribute to the continuous improvement of security architecture, governance and assurance processes.
• Maintain up-to-date knowledge of emerging cyber threats, technologies and security approaches.

• Proven experience working as an Information Assurance Consultant, Cyber Security Consultant or Security Architect.
• Experience working within complex, high-risk or highly regulated environments.
• Strong knowledge of security standards and frameworks including NCSC CAF and ISO 27001.
• Experience assessing and managing cyber security risks and translating security requirements into practical technical controls.
• Strong understanding of security across cloud, hybrid and on-premises environments.
• Experience reviewing technical architectures and identifying security risks and improvements.
• Ability to communicate complex security and risk issues clearly to both technical and non-technical stakeholders.
• Strong stakeholder engagement and ability to influence security and risk-based decisions.

If you'd like to discuss this Information Assurance role in more detail, please send your updated CV to (url removed) and I will get in touch.