At a Glance
- Tasks: Conduct cybersecurity assessments and develop business continuity plans for M&A activities.
- Company: Dynamic consultancy firm focused on information security and resilience.
- Benefits: Competitive daily rate, hybrid working, and opportunities for professional growth.
- Other info: Collaborative environment with a focus on impactful projects and career advancement.
- Why this job: Join a critical role in shaping security strategies during exciting M&A initiatives.
- Qualifications: Experience in M&A security, ISO 27001, and stakeholder management required.
The predicted salary is between 70000 - 90000 £ per year.
We are seeking two highly skilled, hands-on Contract Information Security & Resilience Consultants to support several critical, high-priority strategic initiatives. In this dual-role, you will be responsible for executing rigorous security due diligence on upcoming M&A activities, maintaining and maturing our Information Security Management System (ISMS) compliance frameworks, and driving our Business Continuity and Resilience programs.
Key Responsibilities
- M&A Security Due Diligence
- Conduct comprehensive cybersecurity risk assessments and security due diligence on target acquisition companies.
- Review target company security controls, policies, third-party assurance reports (e.g., SOC 2, ISO certifications), and historical security incident logs.
- Identify deal-impacting risks, quantify remediation effort (cost/timeline ranges), and advise on onboarding security priorities.
- Identify risk areas and formulate actionable post-acquisition security integration roadmaps and transition plans.
- Information Security Standards & Compliance (ISO 27001 & SOC 2)
- Assess, maintain, and mature existing security frameworks aligned with ISO/IEC 27001 and SOC 2 Type II.
- Develop and maintain information security policies, standards, and procedures aligned to these standards and business objectives.
- Run security risk assessments, update risk registers, and drive risk treatment/remediation plans.
- Identify control gaps, collaborate with internal system owners to implement remediation plans, and collect audit-ready evidence.
- Assist in preparing the business, staff, and control owners for upcoming external surveillance and compliance audits.
- Business Continuity & Disaster Recovery
- Lead the review and update of Business Continuity Plans (BCPs) across key business departments.
- Facilitate Business Impact Analyses (BIAs) to identify critical business processes, evaluate upstream/downstream dependencies, and define Recovery Time Objectives (RTOs).
- Design and execute tabletop exercises and simulation tests to validate recovery strategy effectiveness.
- Third-Party & Supplier Security
- Perform vendor risk assessments, review security clauses, and ensure suppliers meet security and business continuity requirements.
- Manage the relationship with our outsourced managed IT and information security suppliers.
- Security Awareness & Stakeholder Management
- Deliver security awareness initiatives and provide advisory support to projects and teams.
- Communicate risks and recommendations clearly to leadership and non-technical stakeholders.
Required Skills & Experience
- Proven track record of executing security due diligence on target entities during corporate acquisitions.
- Deep, hands-on experience implementing, auditing, or managing ISO 27001 and SOC 2 compliance programs.
- Experience designing, updating, and testing Business Continuity frameworks (experience aligning with ISO 22301 is a plus).
- Outstanding stakeholder management skills, with the ability to communicate complex security risks to business leads and M&A deal teams.
Contact Details:
Advanced Resource Managers Ltd Recruitment Team
StudySmarter Expert Advice🤫
We think this is how you could land Information Security & Resilience Consultant in London
✨Get Engaged in Cybersecurity Communities
Dive into online forums or local meetups, like OWASP events or Cybersecurity conferences. These spaces are packed with pros who can share insights and might even know about temporary roles at places like Advanced Resource Managers Ltd.
✨Showcase Your Skills Publicly
Link your GitHub or create a series of blogs sharing your knowledge on cybersecurity topics. It’s a great way to demonstrate your expertise and attract attention from hiring managers, especially when they see your passion in action.
✨Stay On Top of Temp Opportunities
Keep an eye on platforms that list temporary positions specifically in tech. Websites focusing on contract roles in cybersecurity can lead straight to employers like Advanced Resource Managers Ltd.
✨Make Contact with Recruiters Specialising in Cybersecurity
Reach out to recruitment agencies that focus on cybersecurity roles. They often have insights into temporary roles before they’re advertised and can put your name forward to companies like Advanced Resource Managers Ltd.
We think you need these skills to ace Information Security & Resilience Consultant in London
Some tips for your application 🫡
Show Off Your Technical Skills:In cybersecurity, it's vital to highlight your skills with relevant tools and technologies. Make sure your CV showcases your experience with firewalls, intrusion detection systems, and any cybersecurity frameworks you've worked with. This gives Advanced Resource Managers Ltd a clear view of your capabilities right off the bat.
Certifications Matter:If you’ve got any cybersecurity certifications, like CompTIA Security+ or CISSP, flaunt them! These not only validate your skills but also show that you’re committed to the field. Add a section to your CV specifically for this, because in a temporary role like this, those credentials can really set you apart.
Tailor Your Cover Letter to the Role:For a temporary position, we want to see your willingness to learn and adapt quickly. Make your cover letter specific to the role at Advanced Resource Managers Ltd; mention why you’re excited about the opportunity and how it fits your career goals. A personal touch can make a big difference!
Don’t Forget the Soft Skills:In cybersecurity, technical skills are crucial, but so are soft skills like teamwork and communication. Make sure to weave examples of how you've collaborated with teams or communicated complex ideas into your application. This shows that you're not just a tech whizz but also a great team player, perfect for a temporary role at Advanced Resource Managers Ltd.
How to prepare for a job interview at Advanced Resource Managers Ltd
✨Brush Up on Technical Skills
Make sure you’re familiar with the latest cybersecurity tools and techniques, like firewalls, intrusion detection systems, and malware analysis. During the interview with Advanced Resource Managers Ltd for the Information Security & Resilience Consultant, be prepared to discuss specific scenarios where you tackled security threats or vulnerabilities.
✨Show Your Problem-Solving Prowess
Cybersecurity is all about thinking on your feet. Expect technical questions that require you to demonstrate your problem-solving abilities. You might be presented with a mock security breach scenario, so practising your responses to potential threats can be a game changer!
✨Demonstrate Your Adaptability
As this is a temporary role, showing that you're adaptable and quick to learn is crucial. Talk about times you've picked up new skills or reacted to changing situations quickly. Employers want to know you can hit the ground running and keep things secure during your short stay at Advanced Resource Managers Ltd.
✨Bring Relevant Certifications
If you have any relevant cybersecurity certifications, like CompTIA Security+ or CEH, be sure to mention them. This can really help you stand out during a temporary hiring process, as it showcases your commitment to the field and your readiness to take on the Information Security & Resilience Consultant role at Advanced Resource Managers Ltd.
