Principal Security Consultant
Principal Security Consultant

Principal Security Consultant

Full-Time 43200 - 72000 £ / year (est.) No home office possible
Go Premium
M

At a Glance

  • Tasks: Lead security initiatives and ensure secure practices across projects.
  • Company: Join M&S, a dynamic and inclusive retail leader.
  • Benefits: Enjoy discounts, competitive holidays, bonuses, and wellness support.
  • Why this job: Make a real impact in cybersecurity while shaping the future of retail.
  • Qualifications: 6 years in tech with advanced security experience and relevant certifications.
  • Other info: Be part of a diverse team driving innovation and change.

The predicted salary is between 43200 - 72000 £ per year.

We’re looking for a Principal Security Consultant to manage one or more portfolios of change activities to ensure Secure-by-Design thinking is embedded into everything we do and the risks are understood and managed. You will be responsible for maintaining the relationship with your own portfolio(s) of change. This is a global role that requires cross-organisational influence over all areas of the business and technology, to support our mission in the management and reduction of Cyber Risk.

What You’ll Do

  • Own the InfoSec relationship with identified portfolio(s) of change.
  • Identify when your portfolio(s) requires additional InfoSec support from areas such as Security Architecture, Security Design or Security Engineering and broker the engagement.
  • Provide security requirements and guidance into the change activities.
  • Responsible for ensuring Threat Modelling is in place for the identified programs, projects, engineering.
  • Work with GRC to inform on risk, compliance and assurance with regard to your portfolio of change.

Who You Are

  • Clear understanding and experience of risk assessment and compliance frameworks.
  • 6 years in technology with at least 2 years’ experience delivering advanced level security engineering or similar role.
  • Must be knowledgeable in 2 or more security domains (e.g., Application Security, Network Security, Infrastructure Security, Cloud Security, End-User Compute Security, IoT and ICU Security).
  • Supporting qualifications in technology or security such as Microsoft/Azure Architecture, British Computer Society Diploma, CISSP, CISM, CRISK, CGEIT, CCAK, CCSK, CCSP, Computer Science or Cyber Security Degree.

What’s In It For You

  • Being part of M&S is exactly that – playing your part to bring the magic of M&S to our customers every day.
  • We’re an inclusive, dynamic, exciting, and ever-evolving business built on doing the right thing and bringing exceptional quality, value, service to every customer, whenever, wherever and however they want to shop with us.
  • After completing your probationary period, you’ll receive 20% colleague discount across all M&S products and many of our third-party brands for you and a member of your household.
  • Competitive holiday entitlement with the potential to buy extra holiday days.
  • Discretionary bonus schemes awarded based on how you achieve your personal objectives and our performance as a business.
  • A generous Defined Contribution Pension Scheme and Life Assurance.
  • A dedicated welcome to our teams with a tailored induction and a wide range of training programmes to develop your skills.
  • Amazing perks and discounts via our M&S Choices portal to maximise your financial and personal wellbeing.
  • Industry-leading parental, adoption and neonatal policies, providing support and flexibility for your family.
  • Access to a fantastic range of wellbeing support for all colleagues including 24/7 Virtual GP and PAM Assist to support you and your family.
  • A charity volunteer day to support a charity or cause you’re passionate about through a dedicated day away from work.

Everyone’s welcome. We’re ambitious about the future of retail. We’re innovating, disrupting, and leading the way into a more inspiring, digital era. It’s an exciting time to be part of M&S. To support us on our journey, we’re building inclusive, diverse teams where everyone can be themselves, do their best work, and make change happen. We support each other and succeed together. Don’t worry if you don’t meet every single requirement of the job description. It’s more of a guide to what’s possible within the role. If you’re passionate, ready to work hard, and think the role feels right for you, we’d love to hear from you.

Principal Security Consultant employer: Marks and Spencer

Joining M&S as a Principal Security Consultant means becoming part of a forward-thinking, inclusive team dedicated to embedding Secure-by-Design principles across the organisation. With competitive benefits such as a generous pension scheme, extensive training programmes, and a commitment to employee wellbeing, M&S fosters an environment where you can thrive both personally and professionally. The company's dynamic culture encourages innovation and collaboration, making it an exciting place to contribute to the future of retail while enjoying meaningful work.
M

Contact Detail:

Marks and Spencer Recruiting Team

StudySmarter Expert Advice 🤫

We think this is how you could land Principal Security Consultant

✨Tip Number 1

Network like a pro! Reach out to folks in your industry on LinkedIn or at events. A friendly chat can open doors that a CV just can't.

✨Tip Number 2

Prepare for interviews by researching the company and its culture. Show them you’re not just another candidate, but someone who truly gets what they’re about.

✨Tip Number 3

Practice your pitch! Be ready to explain how your experience aligns with their needs. Keep it concise and impactful – you want to leave them wanting more!

✨Tip Number 4

Don’t forget to follow up after interviews! A quick thank-you note can keep you top of mind and show your enthusiasm for the role. We love seeing candidates take that extra step!

We think you need these skills to ace Principal Security Consultant

Risk Assessment
Compliance Frameworks
Security Engineering
Application Security
Network Security
Infrastructure Security
Cloud Security
End-User Compute Security
IoT Security
CISSP
CISM
CRISK
GRC (Governance, Risk Management, and Compliance)
Threat Modelling
Cross-Organisational Influence

Some tips for your application 🫡

Tailor Your CV: Make sure your CV reflects the skills and experiences that align with the Principal Security Consultant role. Highlight your experience in risk assessment and compliance frameworks, as well as any relevant security domains you’re knowledgeable in.

Craft a Compelling Cover Letter: Use your cover letter to tell us why you're passionate about this role and how your background makes you a great fit. Be sure to mention your experience in managing change activities and your understanding of Secure-by-Design thinking.

Showcase Your Achievements: When detailing your past roles, focus on specific achievements that demonstrate your ability to manage portfolios and influence cross-organisational teams. Numbers and outcomes can really make your application stand out!

Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it shows you’re keen to be part of our exciting journey at M&S!

How to prepare for a job interview at Marks and Spencer

✨Know Your Security Domains

Make sure you brush up on the security domains mentioned in the job description, like Application Security and Cloud Security. Be ready to discuss your experience in these areas and how they relate to the role.

✨Understand Risk Assessment Frameworks

Familiarise yourself with risk assessment and compliance frameworks. Prepare examples from your past work where you've successfully managed risks or ensured compliance, as this will show your expertise in the field.

✨Prepare for Scenario-Based Questions

Expect scenario-based questions that test your problem-solving skills in real-world situations. Think of specific instances where you had to broker engagement between teams or provide security guidance during change activities.

✨Showcase Your Soft Skills

Since this role requires cross-organisational influence, be prepared to demonstrate your communication and relationship-building skills. Share examples of how you've effectively collaborated with different teams to achieve security goals.

Principal Security Consultant
Marks and Spencer
Go Premium

Land your dream job quicker with Premium

You’re marked as a top applicant with our partner companies
Individual CV and cover letter feedback including tailoring to specific job roles
Be among the first applications for new jobs with our AI application
1:1 support and career advice from our career coaches
Go Premium

Money-back if you don't land a job in 6-months

M
Similar positions in other companies
UK’s top job board for Gen Z
discover-jobs-cta
Discover now
>