Senior Information Security Consultant

Who you’ll be joining We’re problem solvers at heart. Sometimes the answer is technology, sometimes it is strategy, and sometimes it is a strong cup of tea and a bit of thoughtful conversation. Whatever it takes, we work it out with our clients. We’re an IT consultancy that helps organisations get the best out of their technology. That means keeping them secure and keeping the bad guys out, making sure everything works and is easy to use, and doing smart things with data and software to give their business an edge. It is important work, and we care about doing it well and for the right reasons. Life at Waterstons is friendly, flexible and built on trust. We hire people who are curious, thoughtful and good at getting to the heart of a problem. You get support, trust and room to grow in a place that still feels human. The unlimited holidays and private healthcare are a nice touch, although most people stay because it feels like the right place to do good work with good people. What You’ll Be Doing We're seeking a passionate candidate with a strong background in Information Security and a focus on working to protect those utilising Operational Technology. As a Senior Information Security Consultant, you'll have a good understanding and experience of working with organisations that have OT networks and standards utilised in the energy sector such as the Cyber Assessment Framework and IEC ISA 99/62443. You’ll be helping multiple clients with different aspects of their security. The role is interesting and varied and a great opportunity for those that prefer spontaneity over routine. Your Day-to-Day Delivering projects, including creating information security strategies, risk assessments of OT projects and assessments against frameworks like ISO 27001. Conducting CAF audits for our clients, sometimes working on behalf of a regulator. Stay updated on the latest information security best practices to provide clients with the best advice. Identify and develop new opportunities with existing clients and new prospects. What we're looking for If some (or most) of the following sound like you, we'd love to hear from you: Experience working with Operational Technology environments, ideally within the energy sector Hands-on experience auditing against ISO 27001 and the Cyber Assessment Framework Strong understanding of IT and OT security risks and the current threat landscape Comfortable working directly with senior stakeholders and acting as a trusted advisor Clear communication skills and strong stakeholder management Nice to have Experience with frameworks such as NIST CSF, NIST SP 800-82, IEC ISA 99/62443 or CIS Controls Experience supporting business development activities such as proposals or tender responses How We Take Care of You As well as offering a competitive salary, we have an attractive benefits package including: A healthy work life balance with flexible and agile working being the norm Unlimited holiday allowance EV car scheme (salary sacrifice) Room to grow with supported development opportunities and sponsored training Enhanced family policies If you ever need it, company sick pay and life assurance Supported wellbeing with regular initiatives, an employee assistance programme and private medical insurance Flexible benefits such as a dental scheme, eye care support, season ticket loan and cycle to work We require a security check to be carried out on all colleagues due to the nature of some of our clients’ industries. Waterstons is committed to creating and an inclusive, understanding, and flexible place to work. We value diversity, equality and inclusion and encourage everyone to 'bring their whole selves' to work. We believe that a company that works to truly embrace and value diversity, create an environment where everyone from any background can do their best work, and feel valued and appreciated is a better company to work for. Privacy Statement Waterstons are gathering the data in this application for the purpose of recruitment and to ensure we can contact you regarding this application. For information about what we do with your personal data see our Privacy Notice.