Senior Information Security Consultant

Overview

In this senior advisory role, you will guide security architecture, threat modelling, and AI risk assessments to embed security by design across programmes. You’ll partner with project teams, technology leads, and senior stakeholders to translate risk into actionable actions. You will mentor junior consultants and help continuously improve the team. The position is hybrid with weekly office presence in Guildford. You will influence governance forums and drive secure delivery across fast-paced projects, leveraging your deep security expertise to protect business value.

Pay / Benefits

• flexible benefits package
• hybrid working
• annual performance-related bonus
• contributory pension scheme
• development days
• discount on insurance products including car, home and pet

Responsibilities

• Lead threat modelling exercises across programs and translate findings into business risk statements
• Conduct security architecture reviews against NIST CSF, COBIT, and internal standards
• Perform risk assessments of AI systems and AI-enabled products (model integrity, bias, data poisoning, explainability)
• Embed security by design in change programmes and delivery lifecycle
• Coordinate security gates across programs (penetration testing, supplier assurance) and collaborate with other security teams
• Represent the team in governance forums, program boards, and working groups with clear risk communication
• Manage multiple concurrent workstreams and deliver quality outputs under deadlines
• Mentor junior consultants through day-to-day guidance and knowledge sharing

Key requirements

• Significant experience in an information security advisory or consultancy role
• Proven threat modelling capability and ability to communicate outputs to senior/non-technical audiences
• Experience assessing security and risk in AI systems or AI-enabled products
• Exceptional communication skills translating technical risk for executives
• Experience conducting security architecture reviews across applications/platforms/infrastructure
• Commitment to continuous learning and staying current with threat landscape and technologies

• strong communication with executive audiences
• mentoring and coaching
• stakeholder management
• Threat modelling
• Security architecture reviews
• AI risk assessment for AI systems

…