Information Security Professional

• Conduct information security reviews and identify potential risks and vulnerabilities.
• Prepare clear reports and practical security recommendations for clients.
• Support clients with information security policies, procedures and risk assessments.
• Assist with audits and recognised security frameworks, including Cyber Essentials, IASME Cyber Assurance and ISO 27001.
• Support the identification, investigation and management of cyber security incidents.
• Document incident findings and recommend improvements to security controls.
• Review security arrangements across systems, infrastructure and cloud environments.
• Assist with identifying and addressing technical vulnerabilities.
• Provide practical information security advice to clients and stakeholders.
• Communicate technical findings clearly to senior management and Boards.
• Work collaboratively with technical and professional services colleagues.
• Support clients in understanding their regulatory and information security obligations.
• Contribute to the continuous improvement of information security processes and services.

The ideal candidate will have a background in IT, cyber security, information security, risk management or compliance, with a good understanding of information security principles and cyber risks. You'll have strong analytical, problem-solving and communication skills, alongside excellent organisation and attention to detail. Familiarity with Microsoft 365, Azure and associated security technologieswould be advantageous, although a willingness to develop knowledge in these areas is equally welcomed. Relevant professional qualifications or cyber security certifications would be beneficial but are not essential. Candidates at different levels of experience will be considered, from those looking to develop their careers to established information security professionals, with responsibilities tailored accordingly.