Senior IT Security Consultant

We are looking for an experienced IT security professional to join our team to support our customers defining and managing their security posture and to also work internally on security projects within our organisation. As an Senior IT Security Consultant within Netcompany, you will be responsible for supporting our UK company’s computer security. In parallel the role will require the IT Security Senior Consultant to support our customers – whether that be helping us to deliver our products and services securely in alignment with our customers’ governance processes; or helping customers with their own security maturity journey. You will work closely with our customers, security colleagues and various departments within the UK business to ensure security and privacy by design. Your role will involve assisting and advising staff and customers on IT security practices, internal and external assurance activities, and staying up-to-date with the latest security standards and industry best practices to continuing building our security culture. The successful candidate will have excellent analytical and problem-solving skills, strong attention to detail, a willingness to learn, and the ability to communicate effectively and pragmatically with a diverse range of technical and non-technical audiences at all levels. Key Responsibilities - Identify, assess, treat and monitor security risks to IT systems - Conduct threat assessments and maintain threat awareness - Design and assist with the implementation of proportionate security controls - Collaborate on the design of new systems to ensure security by design - Develop and report on security metrics to effectively manage risk - Upgrade existing security systems or design new ones tailored to business needs - Conduct security audits, controls tests and assurance exercises - Ensure compliance with customer, international and national security standards and regulation - Prepare technical documentation and reports for both technical and non-technical audiences. - Share knowledge and expertise, fostering a culture of security awareness within the organisation and with our customers. - Support customer organisations with defining, improving and managing their security posture. - Provide support to the IT, Personnel and Facilities Security Managers including incident response and security helpdesk assistance - Proven experience in IT security - Knowledge of General Data Protection Regulations and privacy by design - Experience of security frameworks and standards (e.g. ISO27001, CE+, COBIT, NIST800-53) - Experience in security by design, DevSecOps, etc - General knowledge of IT architecture e.g. networking, databases, operating systems - Excellent problem-solving and analytical skills and willingness to learn - Demonstrable experience in pragmatically applying security policies, standards and patterns to build secure products and a positive security culture. - Proven experience of delivering security improvements within a large organisation (Regulated industries, UK Defence and government departments are of particular interest). - Certifications such as CISMP, COMPTIA Security+, CISSP, CISM. You may be actively working towards these or can demonstrate equivalent skills and experience. - Knowledge of the NCSC cloud security principles and experience with a particular cloud vendor such as Azure, AWS or Google Cloud. - Knowledge of HM government standards and processes including NCSC Guidance, GovS007, SAF, JSP 440 and JSP 453 is helpful but not essential