Information Security Consultant Jobs

New

Senior Information Security Consultant (QSA)

PGI is a global consultancy that helps organisations build digital resilience. W...

Location

United Kingdom , London

Salary:

Not provided

Protection Group International

Expiration Date

Until further notice

Requirements

Proven relationship management skills and experience in Information Assurance consultancy
Qualified Security Assessor (QSA) experience with valid PCI-DSS QSA accreditation with a minimum of 2 years of experience performing PCI DSS compliance consultancy
Familiarity with PCI DSS and NIST CSF
Experience in conducting risk assessments, cyber security maturity evaluations, and remediation strategies
Strong communication skills, able to present to clients and senior stakeholders
A collaborative, solutions-oriented mindset with excellent time-management skills

Job Responsibility

Provide expert guidance to clients, supporting both pre-sales and delivery, and establishing trusted advisor relationships to drive compliance and security improvements
Lead and deliver hands-on PCI DSS compliance consultancy, performing assessments, gap analyses, and remediation strategies tailored to client needs
Act as a subject matter expert in PCI DSS compliance and Governance, Risk, and Compliance (GRC), advising clients on regulatory compliance, risk management, and information security best practices
Contribute to PGI’s consultancy growth by aligning services with emerging trends and industry standards. Drive PGI’s accreditations and assist with maintaining ISO 27001, PCI DSS and data protection compliance
Mentor junior team members, contribute to the recruitment process, and oversee third-party relationships to ensure project profitability and delivery quality
Stay ahead of industry trends, emerging security threats, and best practices to maintain professional growth and continuously improve PGI’s consultancy offerings

Security Consultant

As a digital transformation company, Sopra Steria’s digital assets are vital; an...

Location

Netherlands , Nieuwegein

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

A bachelor's or master's degree in IT, Safety & Security Management
At least one certification in the field of information security, such as CISM, ISO27001, CRISC, CISSP
At least 3 years of experience in the field of information security
Strong fundamental knowledge and experience in the field of information security

Job Responsibility

Implement security protocols
Conduct regular audits
Develop and enforce security policies
Educate staff and raise awareness of potential threats

What we offer

Flexible, location-independent work
Laptop, phone and home office necessities
A competitive salary and indefinite contract
A company car or mobility budget
27 days paid time off (20 fixed days + 7 bonus days)

Fulltime

Lead Cyber Security Consultant

As a Lead Cyber Security Consultant at Actica Consulting, you will have the oppo...

Location

United Kingdom , London; Guildford; Bristol; M4 corridor

Salary:

Not provided

Actica Consulting

Expiration Date

Until further notice

Requirements

Experience of complex ICT systems security in a technical delivery or consulting capacity in the UK Defence sector or Public Sector
The ability to present and justify conclusions to project teams and business stakeholders
Proven abilities in delivering to client expectations and requirements
Strong verbal and written communications skills
Must be eligible and willing to obtain UK Government Security Clearance

Job Responsibility

Leading one or more Actica teams to undertake varying consultancy assignments
Providing security expertise for major system procurements and Agile programmes to ensure secure delivery
Identifying, analysing and evaluating information risks across a range of programmes, projects and systems
Explaining to risk owners the causes, likelihood and potential business impacts of information risks
Identifying and presenting options for treating or transferring information risks
Authoring and/or supporting the development of security assurance documentation
Developing or reviewing new security architectures
Scoping security testing activities, and explaining the results and required remediation
Managing the delivery of security services by Actica teams across several live projects
Working with our client-side customers to manage contract delivery

What we offer

25 days of paid leave per annum plus 8 UK bank holidays
Discretionary, Performance-Based Bonus Scheme
Enrolment in Stakeholder Pension Scheme
Cycle To Work Scheme
Employee Assistance Programme
Electric Vehicle Leasing Scheme
Private Medical Insurance
Substantial training leading to nationally recognised certifications
Mentor support and guidance
Performance and Development Manager for regular reviews and career progression planning

Fulltime

Graduate Cyber Security Consultant

We will provide you with a fantastic springboard into a consulting career with c...

Location

United Kingdom , London; Guildford; Bristol

Salary:

Not provided

Actica Consulting

Expiration Date

Until further notice

Requirements

A good degree in a STEM subject
Further study at Masters and/or PhD level a bonus
An NCSC certified Information / Cyber / Systems Security master’s degree
Understanding of the use of technology in business and public sector contexts
Familiarity with the HMG Security Policy Framework (SPF) and the NCSC Information Assurance Portfolio
Must be eligible and willing to obtain UK Government Security Clearance

Job Responsibility

Provide technical assurance that proposed solutions are fit for purpose
Develop new architectures that mitigate risks posed by new technologies
Provide advice on Information Assurance and architectural problems
Support development of Risk Management Accreditation Document Sets (RMADS)
Scope security testing activities and explain findings
Investigate security incidents
Promote security awareness
Conduct Cyber Security Risk Assessments
Provide Assurance of cyber security management controls

What we offer

25 days of paid leave per annum plus 8 UK bank holidays
Discretionary, Performance-Based Bonus Scheme
Enrolment in Stakeholder Pension Scheme
Cycle To Work Scheme
Employee Assistance Programme
Electric Vehicle Leasing Scheme
Private Medical Insurance
Substantial training leading to nationally recognised qualifications
Mentor support
Performance and Development Manager

Fulltime

Senior Cyber Security Consultant

As a Senior Cyber Security Consultant at Actica, you will have the opportunity t...

Location

United Kingdom , London; Guildford; Bristol; M4 corridor

Salary:

Not provided

Actica Consulting

Expiration Date

Until further notice

Requirements

Experience of complex ICT systems in a technical delivery or consulting capacity
A good understanding of enterprise information and communications technology
The ability to present and justify conclusions to project teams and business stakeholders
Proven abilities in delivering to client expectations and requirements
Strong verbal and written communications skills
Must be eligible and willing to obtain UK Government Security Clearance

Job Responsibility

Providing security expertise for major system procurements and Agile programmes
Identifying, analysing and evaluating information risks across a range of programmes, projects and systems
Explaining to risk owners and other stakeholders the causes, likelihood and potential business impacts of information risks throughout the information system lifecycle
Authoring and/or supporting the development of security assurance documentation in accordance with risk management frameworks
Developing or reviewing new security architectures that mitigate the risks posed by new technologies and business practices
Scoping security testing activities, and explaining the results and required remediation
May lead assignments and be responsible for supervising direct reports

What we offer

25 days of paid leave per annum plus 8 UK bank holidays
Discretionary, Performance-Based Bonus Scheme
Enrolment in Stakeholder Pension Scheme
Cycle To Work Scheme
Employee Assistance Programme
Electric Vehicle Leasing Scheme
Private Medical Insurance
Substantial training leading to nationally recognised certifications
Mentor support
Performance and Development Manager

Fulltime

Information Security Analyst

Robert Half is the world’s first and largest specialized talent solutions firm t...

Location

United States , Ashland

Salary:

Not provided

Robert Half

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Information Security, Computer Science, or related field
3-5+ years of experience in information security, with specific expertise in risk assessments, compliance, and strategic security planning
Strong working knowledge of NIST, ISO/IEC 27001, and other industry standards
Experience conducting security-focused business impact analyses
Familiarity with regulatory requirements such as GDPR, HIPAA, and PCI DSS
Strong communication skills with the ability to translate technical concepts for non-technical audiences in consultative settings
Industry certifications such as CISSP, CISM, CRISC, or CISA are highly preferred

Job Responsibility

Develop and implement comprehensive information security strategies and programs that align with the business’s overall goals
Facilitate consultative discussions across departments to identify security needs and integrate them into long-term planning processes
Apply and customize NIST Cybersecurity Framework (CSF) and ISO/IEC 27001 standards to create secure systems, processes, and environments
Conduct gap analyses to benchmark current security processes against established frameworks and recommend improvements
Perform and document risk assessments, evaluating potential vulnerabilities and threats
Conduct business impact analyses to prioritize assets and ensure appropriate allocation of security resources to critical areas
Evaluate the organization’s compliance with relevant regulatory standards, such as GDPR, HIPAA, CCPA, and PCI DSS, and provide remediation plans to address deficiencies
Partner with internal and external auditors to perform compliance-related audits and assessments
Act as a point of consultative support for business leaders and departments regarding information security risks, requirements, and best practices
Collaborate with IT teams, project managers, and other stakeholders to ensure security is embedded into new system implementations and upgrades

What we offer

medical
vision
dental
life and disability insurance
401(k) plan

VP, Information Security Officer (ISO), Markets, Taiwan

The Chief Information Security Office (CISO) is home to deeply talented colleagu...

Location

Taiwan , Taipei

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

10+ years of relevant experience in Information & Cybersecurity space or related domains such as risk management, auditing, consulting & advisory services
One or more of IS/Cybersecurity industry standard certifications (e.g. CISA, CISSP, CISM, SANS GIAC, CEH, CRISC, CCSP,SSCP, CompTIA Security+ etc.) are mandatory
Strong understanding of Information security domains with hands on experience of performing application security risk assessments covering controls such as Identity & Access Management, API Security, Cloud/SaaS Security, Cryptography, Sensitive Data protection, Audit Logging/Monitoring, Secure SDLC controls
Sound knowledge of Network Security controls (including Firewalls, IDS/IPS) and Application Vulnerability Assessments/Source code & component vulnerability scanning related controls
Good understanding of Markets Business and Applications such as such as trading platforms, order management systems, risk management systems, pricing engines etc. is an advantage
Hold relevant professional certificates recognized by local authorities
Sound knowledge of IS/Cybersecurity related local regulatory, and compliance requirements in the financial services industry and Securities & Futures Markets
Understanding of policy compliance and how it relates to risk
Extensive knowledge of information security risk assessment methodologies/industry standards
Demonstrated ability to take ownership and follow up on issues

Job Responsibility

Act as a Trusted Security Advisor to business and technology teams, guiding them on IS/Cyber risks
Appropriately assess risks when business decisions are made, demonstrating consideration for the firm's reputation and safeguarding Citigroup, its clients and assets
Drive compliance with applicable Information & Cybersecurity laws, rules and regulations, adhering to relevant Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency
Serve as the local point of contact of all information security matters, including management, governance, compliance, and third-party risk management
Manage local audit and regulatory engagements impacting CISO
Drive country-specific control implementations or special programs, where deemed necessary based on risk assessments or local regulatory requirements
Work with business & technology management to drive the information security program and govern risk management activities including CSRA (Cybersecurity Risk Appetite) reporting
Work with the internal Applications Development function to facilitate improvements in both architectural and application security posture
Provide strategic risk guidance for business and technology projects, including the evaluation and recommendation of security controls and corrective actions to mitigate/remediate risks
Manage security incidents and events to protect corporate IT assets, including intellectual property, regulated data and the company's reputation

What we offer

Extensive on-the-job training and exposure to senior leaders
Access to telehealth options, health advocates, confidential counseling
Expanded Paid Parental Leave Policy
Access to an array of learning and development resources
Generous paid time off packages
Resources and tools to volunteer in the communities

Fulltime

Information Security Risk Lead

The Information Security Risk Lead is responsible for driving efforts to support...

Location

Thailand , Bangkok

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Master’s/Bachelor’s/University degree or equivalent experience in Computer Science, Cyber Security, Computer/Information Engineering, Information Technology or a related discipline is preferred
One or more industry-recognized cybersecurity-related certifications such as CISSP, CISA, CISM, CRISC, ISO 27001
6 - 10 years or above of relevant experience in Cyber Security Management / Cyber Security Operations / Technology Risk Management / Third-party Risk Management or IT Audit, preferably with experience gained from banking / finance services industry / consultancy / control compliance or legal disciplines
Experience in assessing cyber regulatory compliance from BOT, SEC etc.
Strong understanding of International Standards/Frameworks such as: NIST, ISO 27001series, COBIT, CIS, GDPR, DORA, etc.
Proficient in interpreting and applying policies, standards and procedures
Excellent project management and organizational skills (PMP, PRINCE2, etc. is a plus)
Strong consultation, reporting writing and communication skills with highly proficiency in both spoken and written English and Thai
Thai language fluency is a must.

Job Responsibility

Manage and validate deliverables of all Information Security (IS) programs, ensuring closure per agreed timelines and goals
Engagement with local regulators BOT, SEC, TB-CERT, Thai-CERT, MDES, NCSA, etc. on IS related matters
Manage regulatory exams and internal & external audits
Work closely with Global & Regional Information Security teams to improve processes and reduce risk, and support the IS regulatory related activities for Thailand
Manage internal/external resources to organize cyber-attack simulations exercise, coordinating and overseeing vulnerability, mitigation/remediation/correction action plans, and issues management process
Accountable for delivery of the associated remediation from regulatory assessments
Proficiency in preparing periodic updates / reports / presentation deck for both internal stakeholders and regulators
Provide timely and appropriate updates to regional and global stakeholders
escalate issues in a timely manner to senior management
Build and develop partnerships with business, IT, risk, compliance, IS, senior management staff and stakeholders

Fulltime

Information Security Consultant

Protection Group International

Location:
United Kingdom, London

Category:
Consulting

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
December 11, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Information Security Consultant