Security Consultant – Risk & Resilience – Financial Services

Overview

As a Security Consultant in our Financial Services Cyber Security practice, you help banks, insurers, and payments firms strengthen cyber and operational resilience. You’ll assess risks, design resilience programs, and translate regulatory requirements into practical controls. You collaborate with cross-functional client teams to drive measurable security and continuity improvements. The role offers exposure to cutting-edge tech, global projects, and a path to advanced certifications and career growth.

Pay / Benefits

• 30 days annual leave
• Private medical insurance
• Volunteering leave
• Learning and development programmes
• Flexible and hybrid working
• Opportunities to work with leading financial institutions

Responsibilities

• Identify, assess, and manage cyber, technology, and operational resilience risks across critical services and environments
• Develop and implement cyber resilience, operational resilience, and technology risk management frameworks
• Conduct risk assessments, control reviews, and resilience evaluations to identify gaps and improvements
• Design and execute scenario testing, cyber exercises, tabletop exercises, and resilience validation activities
• Evaluate controls against regulatory requirements and industry standards
• Identify important business services, impact tolerances, and supporting assets within resilience programs
• Support third-party and supply chain risk management activities, including security assessments
• Assist clients in preparing for, responding to, and learning from cyber incidents and disruptions
• Translate regulatory requirements into practical policies and implementation plans
• Produce risk reports, presentations, and governance-ready recommendations
• Collaborate with client teams across security, risk, compliance, and business functions to drive resilience outcomes
• Support workshops, assessments, maturity reviews, and transformation programs

Key requirements

• Bachelor’s degree in a relevant discipline
• Experience in cyber security, technology risk, or operational resilience
• Experience in financial services or regulated industries
• Understanding of cyber risk management, business continuity, disaster recovery, and incident response
• Knowledge of NIST, ISO 27001, COBIT, CIS Controls, FFIEC guidance
• Familiarity with financial services regulatory requirements relating to technology risk and resilience
• Experience conducting risk assessments, audits, or governance activities
• Strong analytical and problem-solving skills with the ability to recommend practical actions
• Excellent written, verbal, and stakeholder management skills
• Experience leveraging AI-enabled tools for risk management

• strong communication
• stakeholder management
• analytical thinking
• NIST, ISO 27001, COBIT, CIS Controls, FFIEC guidance
• risk assessment and control review
• operational resilience and business continuity

…