Security Consultant (Supply Chain)

Overview

In this role you will strengthen the group’s resilience to supply chain cyber risks by shaping how threats in third‑party ecosystems are identified and managed. You work within the Threat Lab, connecting threat intelligence, incident response and supplier risk to deliver clear, actionable guidance for business and tech teams. You will influence security design, drive proactive controls, and explore automation and AI to enhance detection and response. This is a high‑impact, cross‑team role at a leading UK financial services group.

Pay / Benefits

• pension contribution up to 15%
• annual bonus (group performance)
• share schemes including free shares
• discounted shopping benefits
• 28 days’ holiday plus bank holidays
• wellbeing initiatives and parental leave policies

Responsibilities

• Shape how the organisation identifies, understands and responds to cyber risk across third‑party ecosystems
• Detect and analyse threats using data, tooling and insight and translate findings into actionable guidance
• Influence security design and continuous improvement across cyber, resilience and supplier teams
• Strengthen supply chain threat management, support incident response and inform risk decisions
• Drive proactive, intelligence‑led controls and explore automation/AI to improve detection, analysis and response
• Collaborate across groups using agile ways of working and contribute to high‑priority scenarios including incidents

Key requirements

• Understanding of supply chain threats and current cyber risks in third‑party environments
• Deep security expertise across threat detection, endpoint security, malware protection and information security controls
• Strong risk awareness and ability to apply operational risk principles
• Ability to analyse complex data and translate into business‑relevant recommendations
• Influence and collaboration skills with the ability to challenge stakeholders
• Comfort with agile environments and driving continuous improvement
• Interest in automation and AI to improve security outcomes
• recognised SME status and judgement for high‑priority incidents
• Certifications such as CISSP, CISM or CISMP are desirable but not essential

• collaboration
• ability to influence stakeholders
• analytical thinking
• threat detection
• endpoint security
• malware protection

…