Information Security Consultant

3 weeks ago


London, United Kingdom Wanstor Full time

**Description**:
Summary

We are pleased to be advertising an exciting opportunity for a Information Security / Data Protection professional. This role will act as a focal point for security governance, risk & compliance activities within Wanstor, and undertake GRC consultancy for our customers.

Taking responsibility for planning and carrying out security control reviews, producing reports and proposing recommendations to provide assurance to stakeholders.

Actively engaging to help and guide organisational change for customers and Wanstor through stakeholder engagement. Deliver new policies and procedure documents to align with existing and new business, legal and regulatory requirements.

**Key Responsibilities**:
**Overview**
- Customer GRC consultancy project work including ISO27001 and data protection
- Internal process, policy, controls and technical documentation
- Internal audit and compliance activity

Detailed Responsibilities
- Maintain ISO certifications for Wanstor through assisting with ISMS (Information Security Management Systems) or BCMS (Business Continuity Management Systems) processes, meetings, policies and procedures maintenance.
- Understand Business Continuity Plans to support areas of the business to complete Business impact assessments and act on the outputs.
- Ongoing development and maintenance of the ISMS/BCMS to ensure they continue to meet business and performance requirements.
- Maintain data protection compliance by assisting departments with DPIAs, SARs, updating policies, procedures and providing support for new information systems.
- Support all areas of the business completing supplier information security risk assessments.
- Respond to changes in legal and regulatory changes affecting the business or customers and review policies to ensure changes and training are completed where necessary
- Manage information security awareness and training for all employees
- Engage with stakeholders on areas for information security improvement within the business.
- Perform gap analyses, providing strategic and tactical recommendations for security maturity and resilience
- Assist clients in implementing Information Security Management Systems and achieving/maintaining security certifications
- Advising clients on security and cyber risk, governance, and maturity, considering the broader business landscape and associated threats.
- Explaining to risk owners and other stakeholders the causes, likelihood and potential impacts of information risks throughout the information system lifecycle;
- Assist with the maintenance and communication of information security and data protection policies, standards, procedures, and guidelines.
- Coordinate independent audit activities, including internal audits, external audits and facilitating responses to audit evidence requests and subsequent audit actions.

**KPIs**
- Support maintaining ISO27001 Certification for Wanstor
- Timely completion of compliance/certification reporting
- Consistent and regular ISWG, ISMG & internal actions to meet compliance requirements
- Successful delivery of client projects/consultancy to statement of work (SoW) requirements

**Skills, Knowledge and Expertise**:

- Experience in or understanding of industry standards and frameworks, such as ISO 27001, ISO22301, Cyber Essentials and IASME Assurance/Governance
- Broad knowledge of applicable data privacy practices and laws (e.g. DPA, GDPR)
- Experience and knowledge of IT systems, networking principles and associated technology-based security controls
- Knowledge and experience of logical access control management and administration.
- Strong communication and presentation skills and ability to influence at all levels of an organisation
- Practical knowledge of information security risks, controls and frameworks (e.g. ISO27001, Cyber Essentials, COBIT,).
- Experience in facilitating and supporting internal and/or external audit activities.
- Passion for information security, with a proactive attitude toward maintaining up-to-date knowledge.
- High level of personal and professional integrity.
- Problem Solving: Getting to the root cause of problems and coming up with practical, commercial solutions.
- Business & Customer Focus: Works consistently in the best interests of customers and the business.
- Relationship Building: Building positive relationships with colleagues and customers through respect, listening and teamwork
- Developing and delivering our information security services and consultancy across a wide range of clients.
- Willing to learn and take on new responsibilities

**Benefits**:
Wanstor is a sociable organisation and want to make sure everyone feels part of the team. Below are some of the perks we offer you:

- 24 days annual leave, rising by 1 day each year to a maximum of 28 days + Bank Holidays
- We have regular lunch and learns from staff and external speakers
- We offer everyone 5 days a year to learn something new
- We provide 2 days to volun



  • London, United Kingdom Saepio Information Security Full time

    Location: London or High Wycombe, United Kingdom Salary: £50k basic, £70k OTE Year 1, £90k OTE Year 2 Hours: Full Time - (Mon – Fri, 9am – 6pm) Reporting To: Solutions Architecture Manager Saepio are an Information Security Solutions Provider that work with UK based corporate customers with between 100-10,000 users. We help them to protect their...


  • London, United Kingdom Lorien Full time

    Information Security Consultant Contract - £650p/d Are you an enthusiastic and driven Information Security Consultant with experience of supporting a wide range of projects. You will need to have a very broad skillset across the security space, so security infrastructure, cloud security, Privacy and AI etc. What we are looking for: - Represent...


  • London, United Kingdom Saepio Information Security Full time

    Location: London or High Wycombe, United Kingdom Salary: £50k basic, £70k OTE Year 1, £90k OTE Year 2 Hours: Full Time - (Mon – Fri, 9am – 6pm) Reporting To: Solutions Architecture Manager Saepio are an Information Security Solutions Provider that work with UK based corporate customers with between 100-10,000 users. We help them to protect their...


  • London, United Kingdom Barclay Simpson Full time

    **Information Security Consultant**: - London - £500 per day (outside IR35) - Job type: Contract - Sector: Financial Services, Insurance - Job reference: JEM / 39761 Information Security Consultant required leading financial services firm. The role will be centred around providing technical assurance & implementing controls to a range of different...


  • London, United Kingdom Tech Pursuit Full time

    We have an exciting opportunity for an InfoSec Consultant to join a leading FTSE 100 company. Acting as the Security SME, you would be responsible for ensuring information security, and managing the risk & controls for projects across the company. They are looking to pay circa £70,000 plus benefits and it is a hybrid role. **What you will be doing**: -...


  • London, United Kingdom Barclay Simpson Full time

    Technical Information Security Consultant required for market-leading financial services firm. The role will be centred on ensuring security is delivered into a wide range of projects. There will be a focus on working closely with DevOps teams and embedding security throughout a software development life cycle.Responsibilities:Act as the main security point...


  • London, United Kingdom eFinancialCareers Full time

    **Junior Information Security Consultant** **Tasks**: - Provide consulting service within Information Security sphere to variety of existing and prospective Reply Customers - Awareness of Hybrid and Multi-Cloud architecture model across AWS, Azure, GCP - Awareness and understanding of Zero Trust Framework fundamentals - Awareness and understanding of basic...


  • London, United Kingdom Cloudsecurityexpo Full time

    You will need to login before you can apply for a job. Technical Information Security Consultant required for market-leading financial services firm. The role will be centred on ensuring security is delivered into a wide range of projects. There will be a focus on working closely with DevOps teams and embedding security throughout a software development...

  • Security Consulting

    4 days ago


    London, United Kingdom Cyber Security Jobsite Full time

    BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. National Security at BAE Digital...

  • Security Consulting

    5 days ago


    London, United Kingdom Cyber Security Jobsite Full time

    BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. National Security at BAE Digital...


  • City of London, Greater London, United Kingdom Barclay Simpson Full time

    Technical Information Security Consultant required for market-leading financial services firm. The role will be centred on ensuring security is delivered into a wide range of projects. There will be a focus on working closely with DevOps teams and embedding security throughout a software development life cycle. Responsibilities: Act as the main security...


  • City of London, Greater London, United Kingdom Barclay Simpson Full time

    Technical Information Security Consultant required for market-leading financial services firm. The role will be centred on ensuring security is delivered into a wide range of projects. There will be a focus on working closely with DevOps teams and embedding security throughout a software development life cycle. Responsibilities: Act as the main security...


  • City of London, Greater London, United Kingdom Barclay Simpson Full time

    Job Description Technical Information Security Consultant required for market-leading financial services firm. The role will be centred on ensuring security is delivered into a wide range of projects. There will be a focus on working closely with DevOps teams and embedding security throughout a software development life cycle. Responsibilities: Act as...


  • City of London, United Kingdom Barclay Simpson Full time

    Technical Information Security Consultant required for market-leading financial services firm. The role will be centred on ensuring security is delivered into a wide range of projects. There will be a focus on working closely with DevOps teams and embedding security throughout a software development life cycle.Responsibilities:Act as the main security point...


  • City Of London, United Kingdom Barclay Simpson Full time

    Technical Information Security Consultant required for market-leading financial services firm. The role will be centred on ensuring security is delivered into a wide range of projects. There will be a focus on working closely with DevOps teams and embedding security throughout a software development life cycle.Responsibilities:Act as the main security point...


  • City Of London, United Kingdom Barclay Simpson Full time

    Technical Information Security Consultant required for market-leading financial services firm. The role will be centred on ensuring security is delivered into a wide range of projects. There will be a focus on working closely with DevOps teams and embedding security throughout a software development life cycle. Responsibilities: Act as the main security...


  • City Of London, United Kingdom Barclay Simpson Full time

    Technical Information Security Consultant required for market-leading financial services firm. The role will be centred on ensuring security is delivered into a wide range of projects. There will be a focus on working closely with DevOps teams and embedding security throughout a software development life cycle.Responsibilities:Act as the main security point...


  • Hybrid-WFH/London 2 days a week, United Kingdom Barclay Simpson Full time

    Technical Information Security Consultant required for market-leading financial services firm. The role will be centred on ensuring security is delivered into a wide range of projects. There will be a focus on working closely with DevOps teams and embedding security throughout a software development life cycle.Responsibilities: Act as the main security point...


  • Hybrid-WFH/London days a week, United Kingdom Barclay Simpson Full time

    Technical Information Security Consultant required for market-leading financial services firm. The role will be centred on ensuring security is delivered into a wide range of projects. There will be a focus on working closely with DevOps teams and embedding security throughout a software development life cycle.Responsibilities:Act as the main security point...


  • London, United Kingdom Cloudsecurityexpo Full time

    Technical Information Security Consultant required for market-leading financial services firm. The role will be centred on ensuring security is delivered into a wide range of projects. There will be a focus on working closely with DevOps teams and embedding security throughout a software development life cycle. Act as the main security point of contact &...