GDS Link
Senior Information Security Consultant
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Description
Cyber & GRC / Cloud & Audit Focus
Role Summary
The Senior Information Security Consultant is a senior individual contributor role that spans both Cyber Security and Information Security Governance (GRC). The role owns security controls end-to-end and is directly accountable for ISO 27001 and/or SOC 2 audit outcomes, while remaining hands-on across AWS-hosted environments.
Key Responsibilities
- Own assigned areas of ISO 27001 and/or SOC 2 audits as technical control owner.
- Act as primary technical point of contact for auditors, leading walkthroughs and responding to queries.
- Define, review, and approve technical audit evidence and drive remediation of findings.
- Provide senior hands-on security expertise across AWS (IAM, logging, monitoring, network security).
- Own or oversee vulnerability management, including prioritisation, remediation, and audit-ready reporting.
- Provide senior input into SIEM, monitoring, and incident response.
- Oversee endpoint and SaaS security controls (e.g. Microsoft 365).
- Act as a senior technical authority and coach less-senior team members.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements
Required Experience
Essential:
- Senior experience in a technical information security role.
- Direct ownership of ISO 27001 and/or SOC 2 audit controls, including auditor interaction and remediation.
- Strong hands-on experience securing AWS-hosted environments.
- Practical experience with vulnerability management, SIEM, and monitoring.
- Strong judgement and ability to explain technical controls to auditors and engineers.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable:
- SaaS or cloud-native environments.
- Familiarity with NIST CSF or CIS Controls.
- Automation or scripting experience.
- Relevant certifications (ISO 27001, AWS Security, CISSP, etc.).
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location