Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Act as a trusted advisor on security for third-party integrations and manage cyber risk.
- Company: Join M&S, a dynamic and inclusive retail leader innovating for the future.
- Benefits: Enjoy a 20% discount, competitive holidays, bonuses, and wellbeing support.
- Other info: Be part of a diverse team where your voice matters and growth is encouraged.
- Why this job: Make a real impact in cybersecurity while working with cutting-edge technology.
- Qualifications: 6 years in tech with advanced security experience and relevant certifications.
The predicted salary is between 60000 - 80000 £ per year.
TPRM Security Consultant to act as a trusted advisor to senior stakeholders responsible for ensuring the security of a broad range of technical integrations between M&S and its suppliers, providing risk-based assessments and supporting third-party options to mitigate security risks related to complex TPRM engagements. Additionally, to ensure Secure-by-Design thinking is embedded into everything we do and that the risks are understood and managed.
You will be responsible for establishing and maintaining an effective relationship with assigned portfolio(s) of change from the Third-Party scope at both engineering and management levels. This is a global role that requires cross-organisational influence over all areas of the business and technology including traditional retail, online, international, delivery centres, partners, etc., to support our mission in the management and reduction of Cyber Risk.
What you’ll do
- Own the InfoSec relationship with identified Third-Party portfolio(s) of change to drive risk-aware business decisions.
- Become a trusted advisor to the technical and management teams in your assigned portfolio(s).
- Identify when your TPRM portfolio(s) require additional InfoSec support from areas such as Security Architecture, Security Design or Security Engineering and broker a successful engagement.
- Lead technical security risk assessments and provide requirements and guidance into change activities, founded on CIS and secured by design principles.
- Oversee supplier onboarding risk assessments and ongoing monitoring programmes.
Who you are
- Detailed knowledge of 2 or more security domains and good understanding of others e.g. Application Security, Network Security, Infrastructure Security, Cloud Security, End-User Compute Security, IoT and ICU Security.
- Demonstrable understanding and experience of risk assessment and compliance frameworks.
- 6 years in technology with at least 2 years’ experience delivering advanced level security engineering or similar role.
- Supporting qualifications in technology or security e.g. Microsoft/Azure Architecture, OR CISSP, CISM, CRISK, CGEIT, CCAK, CCSK, CCSP.
What’s in it for you
- Being a part of M&S is exactly that – playing your part to bring the magic of M&S to our customers every day.
- We’re an inclusive, dynamic, exciting, and ever-evolving business built on doing the right thing and bringing exceptional quality, value, service to every customer, whenever, wherever and however they want to shop with us.
- After completing your probationary period, you’ll receive a 20% colleague discount across all M&S products and many of our third-party brands for you and a member of your household.
- Competitive holiday entitlement with the potential to buy extra holiday days.
- Discretionary bonus schemes awarded based on how you achieve your personal objectives and our performance as a business.
- A generous Defined Contribution Pension Scheme and Life Assurance.
- A dedicated welcome to our teams with a tailored induction and a wide range of training programmes to develop your skills.
- Amazing perks and discounts via our M&S Choices portal to maximise your financial and personal wellbeing.
- Industry-leading parental, adoption and neonatal policies, providing support and flexibility for your family.
- Access to a fantastic range of wellbeing support for all colleagues including access to our 24/7 Virtual GP and PAM Assist to support you and your family.
- A charity volunteer day to support a charity or cause you’re passionate about through a dedicated day away from work.
We’re ambitious about the future of retail. We’re innovating, disrupting, and leading the way into a more inspiring, digital era. It’s an exciting time to be part of M&S. To support us on our journey, we’re building inclusive, diverse teams where everyone can be themselves, do their best work, and make change happen. We support each other and succeed together.
Don’t worry if you don’t meet every single requirement of the job description. It’s more of a guide to what’s possible within the role. If you’re passionate, ready to work hard, and think the role feels right for you, we’d love to hear from you.
TPRM Principal Security Consultant in London employer: M&S
Contact Detail:
M&S Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land TPRM Principal Security Consultant in London
✨Tip Number 1
Network like a pro! Reach out to current employees at M&S on LinkedIn or other platforms. Ask them about their experiences and any tips they might have for landing the TPRM Principal Security Consultant role. Personal connections can give you insights that a job description just can't.
✨Tip Number 2
Prepare for the interview by brushing up on your knowledge of security domains. Make sure you can discuss Application Security, Cloud Security, and risk assessment frameworks confidently. We want to see that you can be a trusted advisor right from the get-go!
✨Tip Number 3
Showcase your problem-solving skills during interviews. Think of examples where you've successfully mitigated security risks in past roles. This will demonstrate your ability to handle complex TPRM engagements and make you stand out as a candidate.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you're genuinely interested in being part of the M&S team. Let’s get you on board!
We think you need these skills to ace TPRM Principal Security Consultant in London
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your CV and cover letter to highlight your experience in TPRM and security domains. We want to see how your skills align with the role, so don’t hold back on showcasing your relevant achievements!
Showcase Your Soft Skills: As a TPRM Principal Security Consultant, building relationships is key. Use your application to demonstrate your communication and advisory skills. We love seeing candidates who can influence and engage with stakeholders at all levels.
Be Clear and Concise: When writing your application, keep it straightforward. We appreciate clarity, so avoid jargon and get straight to the point about your qualifications and experiences. This will help us understand your fit for the role quickly!
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it’s super easy to do!
How to prepare for a job interview at M&S
✨Know Your Security Domains
Make sure you brush up on your knowledge of security domains like Application Security, Network Security, and Cloud Security. Be ready to discuss how your experience aligns with these areas and how they relate to the role of a TPRM Principal Security Consultant.
✨Showcase Your Risk Assessment Skills
Prepare to talk about your experience with risk assessment and compliance frameworks. Have specific examples ready that demonstrate how you've successfully identified and mitigated risks in previous roles, especially in complex TPRM engagements.
✨Build Relationships
Since this role involves establishing relationships with stakeholders, think about how you can convey your ability to influence and collaborate across different teams. Share examples of how you've built trust and worked effectively with both technical and management teams.
✨Emphasise Secure-by-Design Thinking
Be prepared to discuss how you incorporate Secure-by-Design principles into your work. Highlight any past projects where you ensured security was embedded from the start, and how that approach benefited the overall project outcomes.