Infosec Business Engagement in England

Here at Whitbread, we are seeking an experienced Information Security Consultant with a strong focus on data security to join our team. This role is critical in ensuring the confidentiality, integrity, and availability of our data assets across the organization. The successful candidate will provide expert guidance on security for projects, vendor assurance, penetration testing, and emerging technologies, while ensuring security best practices are embedded throughout the Software Development Life Cycle (SDLC). This is a unique opportunity to get involved in guiding and supporting the organisation in understanding and implementing effective information security controls, as well as ensuring risk and compliance management aligns with the business's risk appetite.

As an InfoSec Consultant, you will be supporting our Data team and act as a security advisor for business and IT projects, ensuring security requirements are integrated into the SDLC. Alongside this, you will develop and implement data protection policies, standards, and procedures aligned with regulatory requirements. You will be responsible for performing security reviews and risk assessments of third-party vendors and managing vendor security compliance and maintain assurance documentation. Additionally, you will lead risk management, conducting data-centric risk assessments and vulnerability analyses, recommending mitigation strategies.

What you’ll need:

• Proven experience working within Information Security.
• Good understanding of cloud architecture, security models, and best practices to protect data and applications in cloud environments.
• Implement and manage security technologies, including: DSPM, Akamai, Prisma Cloud, Tenable and Sectigo.
• Knowledge of security tools, policies and processes.

Be part of our Technology Team at Whitbread. Through collaboration, passion and hiring the smartest minds, our Technology team builds products and services that are used by 38,000 of us at Whitbread and millions of guests. Everything from an eCommerce website that handles £2 billion in transactions per year, applications that are scalable across our 1,200 hotels and restaurants, devices that enable our teams and guests to have a seamless experience, all whilst keeping data secure. Together we’re building the hotel of the future.