Security Information Assurance Consultant

Senior Information Assurance Consultant

Location: 5 Days Onsite, Central London.

Security Clearance Requirements

Eligible for or currently holding SC or DV. Must be a sole UK national/British citizen and have resided in the UK for 10 years or more.

Role Responsibilities

• Work closely with Security Architects and design teams to act as a bridge between technical teams and business risk owners, translating technical security risks into business terms.
• Advise risk owners on the severity of risks and potential mitigation strategies, including impacts, to enable informed risk management decisions.
• Monitor implementation and ongoing maintenance of agreed risk management actions.
• Create, maintain, and utilize risk assessment artefacts such as the risk register and security-specific documentation such as Security Operating Procedures.
• Assist the Account Security Lead with creating and maintaining security-related processes, policies, and guidance.
• Proactively identify areas for improvement in security across the account, both to enhance security and make good security easier.

Desired Qualifications

• Experience in a similar or related role with desirable additional qualifications including CISM, CISSP, IISP or other professional body membership.
• Experience working to HMG best practices such as NCSC guidance, DSIT Secure by Design, GovS 007.
• Desire to improve processes and identify root causes of problems.
• Willingness to share knowledge and learn from others.
• Proactive approach to identifying risks and problems.
• Strong team‑working ethic, customer‑first focus and thirst for knowledge.

Desirable Skills and Technologies

• Deep knowledge and understanding of information and cyber security risk management.
• Experience in threat modelling using STRIDE or Attack Trees, NIST Cyber Security Framework.
• Experience/knowledge of technology stacks including Cloud (AWS, MS Azure), M365, VMWare, Redhat Openshift, Windows and Linux operating systems.
• Knowledge of industry security guidance such as OWASP and CIS.
• Awareness of security champions programmes.

Benefits

• Competitive compensation.
• Pension scheme.
• DXC Select – comprehensive benefits package including private health/medical insurance, childcare vouchers, gym membership, and more.
• Perks at Work – discounts on technology, groceries, travel, and more.
• DXC incentives – recognition tools, employee lunches, regular social events.

#J-18808-Ljbffr…