Information Security Consultant

Role Description

We are looking for an experienced Senior Information Security Consultant to join our team. This is a senior advisory role — you will provide expert guidance across security architecture review, threat modelling, and AI risk assessment, working closely with project teams, technology leads, and senior business stakeholders to ensure security risk is understood and addressed at every level. You will also mentor junior consultants and contribute to the continuous improvement of the team.

This will be a hybrid role based in our Guildford office, with expectation one day a week (Wednesday) office attendance.

Salary Information

Pay: Circa £76,000 per year.

Pay is based on relevant experience, skills for the role, and location. Salary is only one part of our total reward package.

About You

• You will be engaging with change programs and project teams to embed security by design into business change, ensuring security is considered early and throughout the delivery lifecycle.
• Deliver security advisory services to the business, acting as a trusted consultant to stakeholders at all levels — from project teams to senior leadership.
• Lead threat modelling exercises across programs and key systems, translating findings into clear, business-relevant risk statements for non-technical audiences.
• Conduct security architecture reviews, assessing proposals and designs against NIST CSF, COBIT, and internal standards.
• Conduct risk assessments of AI systems and AI-enabled products, covering risks such as model integrity, bias, data poisoning, and explainability.
• Work collaboratively with other security teams to ensure appropriate security gates are completed across programs – including penetration testing and supplier assurance reviews where applicable.
• Represent the team in governance forums, program boards, and working groups, communicating security risk with clarity and authority.
• Manage multiple concurrent workstreams, delivering quality outputs against competing priorities and deadlines in a fast-paced environment.
• Mentor junior consultants through day-to-day guidance, quality review, and knowledge sharing.

Essential Skills

• Significant experience in an information security advisory or consultancy role.
• Proven threat modelling capability — able to lead sessions and communicate outputs to senior, non-technical stakeholders.
• Demonstrable experience assessing security and risk in AI systems or AI-enabled products.