Security Consultant

Security Consultant 💰 £500/day (Inside IR35) 📍 UK (Remote) 📅 7 month Contract Our client is looking for an experienced Security Consultant to provide end-to-end cyber security assurance across a major Economic Crime technology estate within financial services. You'll act as a trusted security advisor across engineering, architecture, infrastructure, DevOps, product and risk teams, embedding Secure by Design principles and ensuring applications, platforms, infrastructure and technology changes meet appropriate security and regulatory requirements. Key Responsibilities

• Provide end-to-end Security Assurance across technology projects and initiatives.
• Conduct security assessments covering new systems, integrations, infrastructure and material technology changes.
• Embed Secure by Design principles throughout the technology lifecycle.
• Perform security risk assessments, evaluating likelihood, business impact and residual risk.
• Track security risks through remediation, mitigation or formal risk acceptance.
• Assess solutions against NIST CSF 2.0, ISO 27001, Zero Trust, OWASP and organisational security standards.
• Assess preventative, detective and responsive security controls and supporting evidence.
• Provide security assurance across IAM, PAM, Cloud Security, Network Security and Data Security.
• Review penetration testing and vulnerability scanning findings and ensure appropriate remediation.
• Challenge architecture and engineering teams where security requirements or controls are inadequate.
• Maintain traceability across risks, security requirements, controls, evidence and residual risk.
• Provide pragmatic security guidance balancing security risk, regulatory requirements and business delivery. Essential Skills
• Strong Cyber Security Assurance / Security Consulting experience within complex enterprise environments.
• Strong practical experience applying Secure by Design principles.
• Strong security risk assessment and risk management experience.
• Experience managing security risks, exceptions, remediation and risk acceptance.
• Strong knowledge of NIST Cybersecurity Framework / NIST CSF.
• Strong knowledge of ISO/IEC 27001.
• Understanding of Zero Trust and OWASP Top 10.
• Strong knowledge across IAM/PAM, Cloud Security, Network Security and Data Security.
• Experience reviewing penetration testing and vulnerability assessment results.
• Ability to provide constructive security challenge to architects, engineers and senior project stakeholders.
• Ability to translate technical security issues into proportionate business risk. Desirable Skills
• Previous UK Financial Services / Banking experience.
• CISSP and/or CISM certification.
• PCI DSS experience.
• GDPR / Data Privacy knowledge.
• Experience working with regulatory and compliance requirements within financial services.
• Experience securing complex cloud and enterprise technology environments.
• Strong stakeholder management and communication skills. Please apply with your CV and we'll be in touch. Thank you!