Security Risk Consultant (H&PS)

About the job
Location: UK (with client travel) | Employment type: Permanent | Career level: Consultant
Salary: Competitive Salary & Package (dependent on experience)

A leading data engineering consultancy is looking for a Security Risk Consultant to advise on and mitigate risk across some of the UK's most complex programmes in health, public sector, defence and central government.

Due to client and UK Government security requirements, this role requires eligibility for BPSS and SC security clearance at the point of application. This typically requires UK citizenship (as specified by the end-client's security policy) and at least 5 years' continuous UK address history, usually without any single period of 30+ consecutive days spent outside the UK. Existing UK Government clearance (e.g. SC, DV) is highly desirable, but we will consider candidates who can obtain it.

What you'll do
- Apply a range of risk methodologies, advising internal and external stakeholders on risk mitigations.
- Provide security risk advisory support to complex transformation programmes shaping the future of UK public services.
- Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS).
- Identify security vulnerabilities across system architectures and articulate them in clear risk terminology.
- Communicate risk mitigation strategies to both technical and non-technical stakeholders.
- Solve challenging security problems through research and innovation.

What we're looking for
- Strong understanding of cybersecurity principles and risk management.
- Experience applying risk methodologies and advising on mitigations across complex IT solutions.
- Solid grasp of IT infrastructure, technical concepts and design methodologies.
-Familiarity with security technologies such as PAM, SSO, IDAM, network security and encryption.
- Experience with threat modelling and reference architecture.
- Ideally SABSA, CISSP, or a similar certification.
- A genuine passion for improving the UK public sector's security posture.