Principal Information Security Consultant

About the role

This senior security position sits within a high‑performing team that embeds and improves security across a modern cloud environment. The role is hands‑on, working side‑by‑side with engineering and product groups to make security practical and effective.

Key responsibilities

• Lead threat modelling and risk assessments for key initiatives.
• Define and implement security controls in a cloud‑native (AWS) environment.
• Collaborate with engineering teams to embed security into delivery pipelines.
• Support compliance, assurance and vendor‑risk activities.
• Act as a trusted advisor, balancing risk with business outcomes.

Required profile

• Strong technical security knowledge with a proven ability to deliver results in real environments.
• Extensive experience leading threat modelling and risk assessments.
• Deep understanding of cloud security, preferably AWS.
• Ability to operationalise security architecture and controls.
• Solid familiarity with SOC2, PCI‑DSS, NIST or similar frameworks.
• Excellent collaboration skills to translate security into practical actions.

Required skills

• AWS cloud security
• Threat modelling
• Risk assessment
• SOC2, PCI‑DSS, NIST frameworks
• Vendor risk management
• DevSecOps / security engineering
• Python scripting for automation

What we offer

• Senior role with real influence and visibility.
• Flexible, family‑friendly working environment with inclusive policies.
• Competitive salary and autonomy to shape security practices.
• Opportunities for professional growth in a supportive team.