At a Glance
- Tasks: Lead security engagements and improve clients' information governance and cyber security.
- Company: Civica, a GovTech champion improving public services globally.
- Benefits: 25 days annual leave, private medical insurance, and pension contributions.
- Other info: Inclusive workplace with opportunities for career growth and personal development.
- Why this job: Make a real impact on citizens' lives while solving complex security challenges.
- Qualifications: Experience in IT Governance, Risk & Compliance and strong communication skills.
The predicted salary is between 60000 - 75000 € per year.
We’re Civica and we make software that helps deliver critical services for citizens all around the world. From local to state government, to education, to health and care, over 5,000 public bodies across the globe use our software to help provide critical services to over 100 million citizens.
Our aspiration is to be a GovTech champion everywhere we work around the globe, supporting the needs of citizens and those that serve them every day. Building on 21 years of continuous growth and success, we're at a pivotal point on our journey to realise that aspiration.
This is a high-impact, client-facing role where you will help organisations strengthen their information governance and cyber security posture. You’ll work across a variety of public and private sector clients, delivering consultancy that directly improves resilience, compliance, and risk management.
You’ll have the opportunity to lead meaningful security engagements, from gap analysis and risk assessments to certification support and security improvement programmes. This role offers a strong mix of autonomy, variety, and influence—ideal for someone who enjoys solving complex security challenges and driving best practice.
If you are passionate about governance, risk, and compliance, and enjoy working closely with clients to deliver real-world impact, this role gives you the platform to do exactly that. This role can be performed predominantly from home, with occasional travel to offices.
Requirements
- Deliver Information Governance (IG) and Information Security (IS) consultancy services to clients
- Conduct gap analysis, risk assessments, and risk treatment planning
- Assess organisations against standards such as Cyber Essentials, Cyber Essentials Plus, and ISO 27001
- Support clients through certification processes and security improvement programmes
- Perform audits to ensure effectiveness of security controls
- Produce high-quality security reports and present findings to stakeholders
- Provide continuous assessment of client security practices and recommend improvements
- Contribute to the development and enhancement of IG and cyber security service offerings
- Deliver consultancy across recognised frameworks such as the NCSC Cyber Assessment Framework (CAF)
- Develop and review security policies, procedures, and controls
- Deliver security awareness training, workshops, and exercises
- Collaborate with internal teams and support pre/post sales activities
- Mentor colleagues and contribute to team knowledge sharing
- Maintain strong client relationships and stakeholder communication
Experience & Skills
- Strong experience in IT Governance, Risk & Compliance (GRC) across cloud and on-premise environments
- Knowledge of security and data protection frameworks including ISO 27001, Cyber Essentials Plus, and GDPR
- Experience applying risk management principles and methodologies
- In-depth understanding of Cyber Essentials and NCSC CAF
- Ability to advise on security strategy and risk mitigation
- Strong knowledge of information security principles and technical controls
- Proven experience in client-facing roles
- Excellent communication skills, with the ability to engage stakeholders at all levels
- Strong organisational skills with attention to detail
- Ability to work independently with minimal supervision
Nice to have:
- Experience implementing and auditing ISMS aligned to ISO 27001
- Relevant certifications such as CISSP, CISM, CISA, or CEH
- Experience working with frameworks such as DTAC, DSPT, CAF, or PSN
- Experience delivering security awareness programmes
- Experience in third-party assurance activities
- Ability to communicate complex security risks to both technical and non-technical audiences, including C-level stakeholders
- Strong presentation and reporting skills
- Experience working with Local Government
We Want You to Bring Your Whole Self to Work
There is no such thing as the perfect candidate, so if you think you have what it takes but don't necessarily meet every single point on the list above, please still get in touch. We'd love to have a chat and see if you could be a great fit.
Why You'll Love Working with Us
As a company, we're passionate about what we do and the citizens we serve. If you, too, want to champion the use of technology in public services to improve outcomes for citizens and public sector organizations, then Civica is the right place for you. We will help you unlock the best version of yourself, achieve career growth, and make a real difference to people and communities.
We know that when our people are happy, they work better and have greater job satisfaction. Here's what you can expect:
Benefits
- 25 Days Annual Leave + bank holidays – plus the option to buy up to 10 extra days!
- Days of Difference – Up to 3 extra days off for volunteering.
- Pension Contributions – 5% employer match to support your future.
- Income Protection – Up to 75% salary cover for long-term illness.
- Life Assurance – 4x salary tax-free lump sum.
- Critical Illness Cover – £25,000 lump sum (extendable to dependents).
- Private Medical Insurance – Fast access to private healthcare.
- Health Cash Plan – Claim back physio, therapies & more.
- Dental Insurance – Cover for routine & emergency care.
- Electric Vehicle (EV) Scheme – A wide range of electric & hybrid vehicles.
- Affinity Groups – Join employee-led communities.
- Bounty Bonus – Refer a friend & get rewarded.
At Civica, we are committed to building an inclusive and diverse workplace where everyone feels valued and supported. We believe that a variety of perspectives drives innovation and excellence, and we welcome applicants from all backgrounds, cultures, and experiences.
We are an equal opportunity employer. We do not discriminate based on race, ethnicity, religion, gender, sexual orientation, disability, age, or any other legally protected characteristic. Our recruitment process is designed to ensure fairness and transparency, so every candidate has an equal chance to contribute to our mission.
If you need any adjustments or accommodations to participate in our recruitment process, please let us know. We are here to support you.
Senior Information Governance Security Consultant in London employer: Civica UK
Civica is an exceptional employer that champions the use of technology to enhance public services, offering a dynamic work culture where employees can thrive and make a meaningful impact. With generous benefits including 25 days of annual leave, a strong pension scheme, and opportunities for professional growth, Civica fosters an inclusive environment that values diverse perspectives and encourages collaboration. The flexibility of remote work combined with occasional office engagement allows for a balanced work-life experience, making it an ideal place for those passionate about governance, risk, and compliance.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Information Governance Security Consultant in London
✨Tip Number 1
Network like a pro! Reach out to your connections in the industry, attend relevant events, and engage with professionals on platforms like LinkedIn. We all know that sometimes it’s not just what you know, but who you know that can help you land that dream role.
✨Tip Number 2
Prepare for interviews by researching the company and its culture. Understand their values and how they align with your own. We want you to show them that you’re not just a fit for the role, but also for the team and the mission they stand for.
✨Tip Number 3
Practice your pitch! Be ready to explain your experience and how it relates to the Senior Information Governance Security Consultant role. We suggest rehearsing common interview questions and your answers so you can present yourself confidently.
✨Tip Number 4
Don’t forget to follow up after your interview! A simple thank-you email can go a long way in showing your enthusiasm for the position. We believe this small gesture can keep you top of mind for the hiring team.
We think you need these skills to ace Senior Information Governance Security Consultant in London
Some tips for your application 🫡
Tailor Your Application:Make sure to customise your CV and cover letter for the Senior Information Governance Security Consultant role. Highlight your experience in IT Governance, Risk & Compliance, and showcase how your skills align with the job description.
Showcase Your Client-Facing Experience:Since this role is client-facing, emphasise any previous experience you have working directly with clients. Share examples of how you've successfully communicated complex security concepts to various stakeholders.
Be Clear and Concise:When writing your application, keep it clear and to the point. Use bullet points where possible to make your achievements stand out, and ensure your language reflects the professional tone of the job description.
Apply Through Our Website:We encourage you to apply through our website for a smoother process. It’s the best way for us to receive your application and ensures you don’t miss out on any important updates from our team.
How to prepare for a job interview at Civica UK
✨Know Your Stuff
Make sure you brush up on your knowledge of information governance and security frameworks like ISO 27001 and Cyber Essentials. Be ready to discuss how you've applied these in past roles, as this will show your expertise and confidence.
✨Showcase Your Client Skills
Since this role is client-facing, prepare examples of how you've successfully engaged with clients in the past. Think about specific challenges you faced and how you helped clients improve their security posture—this will demonstrate your ability to build strong relationships.
✨Prepare for Technical Questions
Expect some technical questions related to risk assessments and security controls. Brush up on your understanding of risk management principles and be ready to explain how you would approach a gap analysis or audit. This will highlight your problem-solving skills.
✨Practice Your Presentation Skills
You'll likely need to present findings to stakeholders, so practice explaining complex security concepts in simple terms. Use examples from your experience to illustrate your points, and remember to engage your audience—this will show your communication prowess.
