Information Security Consultant

Security Consultant, Information Security - CISSP, CISM

Marshall Wolfe are proud to be supporting our client, a blue-chip organisation with offices based in Ipswich, iwith the recruitment of an experienced Information Security Consultant on a permanent basis. The role is hybrid, with the post holder required on-site 3 days per week.

The role will involve working with key business partners and project managers to understand and guide them through the security due diligence process. This includes performing risk assessments of current product increments, provide guidance and acquire outcomes/decisions from the project managers, enterprise architect, technical architect, solutions architect, data privacy officer, portfolio management office, strategic change development, IT Infrastructure and Operations and penetration testers.

The responsibilities of the role will include:

• Partnering with different business units to ensure security is managed effectively.
• Manage governance to support these activities.
• Raise awareness of all security activities with understanding of risk impact and reporting.
• Providing Information Security consultancy including advice for projects, solution design, audit/assurance and application of security policy, standards, regulation, and good practice.
• Ensure ad-hoc review meetings with stakeholders take place, as needed.
• Supporting the assessment and interpretation of risk, recommending risk treatment options, tracking, and supporting remediation or acceptance.
• Develop and maintain relationship with business partners to proactively engage and understand plans and to ensure security requirements are considered.
• Review of in-scope project security requirements and evidence provided by the project manager or scrum master to support closure of Secure Project Lifecycle processes where the business units require support.

Required skills and experience:

• Excellent knowledge of working within an Agile Framework such as SAFe
• Advanced knowledge of working in a DevSecOps environment
• Knowledge of performing project risk assessments
• Experience in performing Information Security technical risk assessments
• Proficient in information security risk and governance frameworks (ISO 27005, EBIOS)
• Expert analytical and reporting skills
• Ability to effectively communicate and positively influence diverse stakeholders and team members.
• Information Security certification (CISSP, CISM or equivalent)
• Experience in articulating IS risks in business language and advising on the appropriate risk management action
• Experience in information security management reporting and related methodologies

Please forward your CV for more information on this exciting opportunity.