Information Security Advisor - Outside Ir35

Information Security Advisor

Rate - 550 (a day)

Duration - 6 Months (Initially)

Location - Birmingham

IR35 - Outside

Job Purpose

The Information Security Advisor plays a key role in protecting the organization's information assets by providing expert advice, implementing security policies, and ensuring compliance with regulatory requirements. They work closely with IT teams, business units, and external partners to strengthen the company's security posture.

Must have experience with ISO27001 Alignment and have experience with Training & Mentoring.

Key Responsibilities

Security Governance & Compliance

• Develop, implement, and maintain information security policies, standards, and procedures.
• Ensure compliance with relevant security frameworks (e.g., ISO 27001, NIST, CIS, GDPR).
• Conduct security risk assessments and audits to identify vulnerabilities.
• Provide security guidance for regulatory and legal compliance initiatives.

Risk Management & Incident Response

• Assess and manage cybersecurity risks across business functions.
• Monitor and respond to security incidents, working with IT and external vendors to remediate threats.
• Develop and maintain incident response plans and business continuity strategies.
• Conduct security investigations and forensic analysis as required.

Technical Security Advisory

• Advise on secure system architectures, network security, and endpoint protection.
• Support security implementation in IT projects, including cloud security and DevSecOps.
• Evaluate and recommend security tools such as firewalls, SIEM, IDS/IPS, and endpoint protection.
• Conduct penetration testing and vulnerability management assessments.

Security Awareness & Training

• Deliver security awareness training to employees to promote best practices.
• Communicate security threats and mitigation strategies to non-technical stakeholders.
• Act as a security advocate, promoting a culture of security within the organization.

Third-Party & Vendor Security Management

• Assess third-party security risks and ensure suppliers meet security requirements.
• Review and negotiate security clauses in contracts with external partners.
• Conduct security due diligence on new technology solutions and vendors.

Essential Skills & Qualifications

Technical Skills

• Strong understanding of cybersecurity principles, frameworks, and best practices.
• Experience with security tools such as SIEM, firewalls, IDS/IPS, and endpoint protection.
• Knowledge of cloud security (AWS, Azure, GCP) and DevSecOps practices.
• Experience with security risk assessments, penetration testing, and vulnerability management.
• Understanding of encryption, access control, and identity management solutions.

Soft Skills

• Excellent problem-solving and analytical skills.
• Strong communication and stakeholder management abilities.
• Ability to work independently and as part of a team.
• Strong attention to detail and ability to manage multiple priorities.

Qualifications & Experience

• Bachelor's degree in Cybersecurity, Computer Science, or a related field (or equivalent experience).
• Certifications such as CISSP, CISM, CISA, CEH, or equivalent are preferred.
• Experience in an advisory or security management role within an enterprise environment.
• Knowledge of regulatory and compliance requirements (e.g., GDPR, PCI DSS, HIPAA, SOX).