Senior Information Security Consultant – UK

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Provide continuous information security advisory services across various clients and sectors.

• Offer practical recommendations on security threats, programs, and areas for improvement.

• Spearhead vCISO-style advisory initiatives and the development of security programs.

• Evaluate and enhance the effectiveness, maturity, and sustainability of security programs.

• Prioritize security projects based on risk factors, business goals, and available resources.

• Assist with specialized information security projects and additional client engagements.

• Assess security vulnerabilities, controls, processes, and operational practices.

• Create and maintain security roadmaps, risk registers, remediation strategies, and improvement programs.

• Provide guidance on security governance, risk management, controls, policies, procedures, and operational processes.

• Support security assurance and compliance efforts.

• Utilize GRC platforms and other security tools as appropriate.

• Foster trusted relationships with technical teams, security experts, operational stakeholders, and senior leadership.

• Conduct remote client meetings, workshops, and advisory sessions.

• Clearly communicate risks, recommendations, and potential trade-offs.

• Manage client engagements from start to finish, including scoping, delivery, and ensuring quality.

• Oversee multiple clients, projects, priorities, timelines, and outcomes.

• Serve as a senior escalation point and mentor to other consultants.

• Define and scope additional client work while supporting proposals and pre-sales activities.

• Ensure quality across all client deliverables.

• Mentor and develop junior and mid-level consultants.

• Implement Cognisys methodologies and uphold quality standards.

• Share expertise and contribute to the broader GRC consulting team.

⛳️ Requirements

• Minimum of 6 years' experience in information security, cybersecurity, security consulting, or a related field.

• Strong practical knowledge of information security and cybersecurity principles.

• Experience in an operational, technical, or industry-specific information security setting.

• Proven experience in identifying and managing real-world security threats.

• Background in developing, operating, assessing, or enhancing security programs.

• Familiarity with security controls, risk management, security processes, or security operations.

• Exposure to frameworks such as ISO 27001, SOC 2, CAF, NIST, or similar standards.

• Excellent client-facing and consulting capabilities.

• Exceptional written and verbal communication skills.

• Experience in advising and influencing senior leadership and board-level stakeholders.

• Ability to grasp complex issues and formulate practical, commercially viable solutions.

• Strong organizational skills with the capacity to manage multiple clients, workstreams, and competing priorities.

• Comfortable working independently and exercising professional judgment.

• Proven track record of building client relationships and delivering in a remote-first consulting environment.

• Consulting experience is highly preferred.

• Experience with vCISO, security advisory roles, or ongoing security program support is highly desirable.

• Familiarity with GRC platforms like Vanta is advantageous.

• Relevant certifications such as CISSP, CISM, or CCSP are desirable.

🏝️ Benefits

• 25 days of annual leave per year in addition to 8 English bank holidays.

• 1 day of paid leave to celebrate your Birthday.

• Access to the Westfield Health Care Cash Plan.

• Employee mental health and wellbeing platform.

• £2,000 annual training budget.

• Up to £2,000 for each successful referral.

• Flexible/remote-first working model with minimal client-site travel required.

• Reasonable adjustments and accessibility support offered.