At a Glance
- Tasks: Conduct security audits and assessments while supporting risk management activities.
- Company: Join a growing cyber and risk consultancy with a focus on innovation.
- Benefits: Enjoy a competitive salary, up to 31 days annual leave, and remote work flexibility.
- Other info: Work mostly remotely with opportunities for client visits across the UK.
- Why this job: Make a real impact in cybersecurity while gaining diverse industry experience.
- Qualifications: 3 years in cyber security, with knowledge of frameworks like ISO27001 and GDPR.
The predicted salary is between 50000 - 50000 £ per year.
We're working with a growing cyber and risk consultancy that's looking to bring in an Information Security Consultant to support the delivery of security assessments, audits, and client-facing projects across a varied portfolio. This is a great opportunity for someone with a solid grounding in security assurance or risk who wants to develop further in a client-facing, consultancy-style environment.
Location: Mostly remote with client visits across the UK south/ Cheltenham office.
Salary: £50,000
Package: Up to 31 days annual leave + expenses paid with overnight allowance
Start date: ASAP
Clearance: Must hold active or be eligible for SC clearance.
The Role:
You'll be working closely with the Head of Risk & Compliance, supporting across a range of security and governance projects. This includes audits, risk management, and helping clients improve their overall security posture. You'll also get exposure to different industries, frameworks, and environments - ideal if you're looking to broaden your experience.
Key Responsibilities:
- Conduct security audits and assessments against recognised frameworks (ISO27001, NIST, NCSC)
- Support risk management activities and improve security posture across client environments
- Assist with information governance processes and reporting
- Deliver client projects within agreed scope and timelines
- Work with stakeholders to define requirements and ensure clear delivery outcomes
- Support supplier assurance and third-party assessments
- Contribute to security awareness and training initiatives
Key Skills/ Experience:
- ~3 years' experience in a cyber security / IT security role
- Experience in security assurance, audits, or compliance-focused work
- Good understanding of frameworks such as ISO27001, NIST, NCSC
- Knowledge of risk management and information governance
- Familiarity with regulations like GDPR / Data Protection Act
- Strong communication skills - comfortable working with clients and stakeholders
- Ability to manage multiple projects and priorities
Nice to Have:
- Certifications such as CISSP, CISM, or CISA
- Experience working in consultancy or client-facing environments
- Exposure to frameworks like CAF, NIST 800-53 or JSP440
Information Security Consultant in Cheltenham employer: Oscar Technology
Contact Detail:
Oscar Technology Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Information Security Consultant in Cheltenham
✨Tip Number 1
Network like a pro! Reach out to your connections in the cyber security field and let them know you're on the lookout for opportunities. You never know who might have a lead or can refer you to someone looking for an Information Security Consultant.
✨Tip Number 2
Prepare for those interviews! Brush up on your knowledge of frameworks like ISO27001 and NIST, and be ready to discuss how you've applied them in past roles. Show them you’re not just a candidate, but the right fit for their consultancy-style environment.
✨Tip Number 3
Don’t underestimate the power of follow-ups! After an interview, drop a quick thank-you email to express your appreciation and reiterate your interest. It keeps you fresh in their minds and shows your enthusiasm for the role.
✨Tip Number 4
Apply through our website! We’ve got loads of opportunities that might just be perfect for you. Plus, it’s a great way to ensure your application gets seen by the right people. Let’s get you that Information Security Consultant role!
We think you need these skills to ace Information Security Consultant in Cheltenham
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Information Security Consultant role. Highlight your experience with security audits, risk management, and any relevant frameworks like ISO27001 or NIST. We want to see how your skills match what we're looking for!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about cybersecurity and how your background makes you a great fit for our consultancy. Keep it engaging and personal – we love to see your personality come through.
Showcase Relevant Experience: When filling out your application, be sure to showcase any relevant experience you have in client-facing roles or consultancy environments. We’re keen on seeing how you've helped clients improve their security posture in the past.
Apply Through Our Website: Don’t forget to apply through our website! It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it gives you a chance to explore more about what we do at StudySmarter.
How to prepare for a job interview at Oscar Technology
✨Know Your Frameworks
Make sure you brush up on key frameworks like ISO27001, NIST, and NCSC. Be ready to discuss how you've applied these in your previous roles, as this will show your practical knowledge and experience.
✨Showcase Your Client-Facing Skills
Since this role involves working closely with clients, prepare examples of how you've successfully communicated and managed client relationships in the past. Highlight any specific projects where you improved a client's security posture.
✨Prepare for Scenario Questions
Expect scenario-based questions that assess your problem-solving skills in real-world situations. Think about challenges you've faced in security audits or risk management and how you overcame them.
✨Demonstrate Your Passion for Security
Let your enthusiasm for information security shine through. Discuss any recent trends, news, or personal projects related to cybersecurity that excite you. This shows you're engaged and committed to the field.