Information Security Consultant

Here at Whitbread, we are seeking an experienced Information Security Consultant with a strong focus on data security to join our team. This role is critical in ensuring the confidentiality, integrity, and availability of our data assets across the organization. The successful candidate will provide expert guidance on security for projects, vendor assurance, penetration testing, and emerging technologies, while ensuring security best practices are embedded throughout the Software Development Life Cycle (SDLC).

As an InfoSec Consultant, you will be supporting our Data team and act as a security advisor for business and IT projects, ensuring security requirements are integrated into the SDLC. You will also develop and implement data protection policies, standards, and procedures aligned with regulatory requirements. You will perform security reviews and risk assessments of third-party vendors, manage vendor security compliance, and maintain assurance documentation. You will lead risk management, conduct data-centric risk assessments and vulnerability analyses, and recommend mitigation strategies.

• Provide expert guidance on information security across projects and vendor assurance.
• Embed security best practices throughout the Software Development Life Cycle (SDLC).
• Develop and implement data protection policies, standards, and procedures aligned with regulatory requirements.
• Perform security reviews and risk assessments of third-party vendors; manage vendor security compliance and assurance documentation.
• Lead risk management activities, conduct data-centric risk assessments and vulnerability analyses, and recommend mitigations.
• Support the Data team as a security advisor for business and IT projects.
• Stay current with emerging technologies and security trends to inform controls and risk posture.

• Proven experience working within Information Security.
• Good understanding of cloud architecture, security models, and best practices to protect data and applications in cloud environments.
• Proven certificate management experience.
• Experience implementing and managing security technologies, including DSPM, Akamai, Prisma Cloud, Tenable, and Sectigo.
• Knowledge of security tools, policies, and processes.

• 10% matched pension.
• Discounts: Up to 60% discount on Premier Inn stays and 25% discount on our Restaurant brand.
• Annual Incentive of up to 20% Bonus.

Here at Whitbread, we are committed to being an inclusive organisation that values diversity and welcomes applications from all backgrounds. We encourage under-represented groups to apply and are happy to discuss workplace adjustments, part-time, and flexible working arrangements where possible.