How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Work where work matters.
We are a global technology group built for what’s next, offering high-calibre professionals the platform for high-stakes work—the kind of work that defines an entire career. When you join us, you're not just taking on projects, you’re solving problems that don’t even have answers yet.
You will join an exclusive roster of talent that global leaders, including Google, Snap, Diageo, PayPal, and Jaguar Land Rover, call when deadlines seem impossible, when others have already tried and failed, and when the solution absolutely has to work. Forget routine consultancy—you will operate where technology, design, and human behaviour meet to deliver tangible outcomes, fast. This is work that leaves a mark, work you’ll be proud to tell your friends about.
We look for people who embody:
- Innovation to solve the hardest problems
- Accountability for every result
- Integrity always
About The Role
As a Senior Security Consultant within the Governance, Risk & Compliance (GRC) practice, you will lead and deliver a broad range of cybersecurity, governance, risk and assurance engagements across public and private sector organisations.
This is a client-facing consultancy role, requiring a strong balance of strategic advisory capability, practical delivery experience and commercial awareness. You will work closely with client stakeholders at all levels, helping organisations strengthen their security posture, manage cyber risk, improve compliance maturity, and implement pragmatic security governance frameworks aligned to business objectives.
The successful candidate will possess:
- Strong experience across information security governance, risk management, security compliance, and assurance activities
- Practical knowledge of frameworks and standards, such as ISO/IEC 27001, NIST, Cyber Essentials, CIS Controls, and the NCSC Cyber Assessment Framework (CAF)
- Ability to lead engagements, support business development activities, contribute to proposals and Statements of Work (SoWs), mentor junior consultants, and help shape the continued growth and capability of the Secure Advisory practice
This role is designed for impact, and we believe our best work happens when we connect. While we operate a flexible model, we expect you to spend regular quality time on-site (at our offices or a client location) for collaboration sessions, customer meetings, and internal workshops.
What Success Looks Like
Key Responsibilities
- Lead and deliver a range of Governance, Risk & Compliance (GRC) and cybersecurity consultancy engagements across public and private sector clients
- Provide subject matter expertise across information security governance, risk management, compliance, assurance, and security best practices
- Deliver security assessments, audits, gap analyses, risk assessments, maturity reviews, and remediation planning activities aligned to recognised frameworks and standards
- Support clients in the development, implementation, and continual improvement of Information Security Management Systems (ISMS) and associated governance processes
- Produce high-quality client deliverables, including:
- Reports
- Policies
- Standards
- Procedures
- Risk registers
- Executive summaries
- Roadmap documentation
- Facilitate workshops and engage with stakeholders at all levels, including:
- Technical teams
- Operational management
- Senior leadership
- Support clients in understanding and managing cyber risk in a pragmatic and business-aligned manner
- Conduct supplier and third-party assurance activities (e.g. due diligence and control assessments)
- Contribute to business development activities, including:
- Proposal responses
- Statements of Work (SoWs)
- Bid support
- Pre-sales engagements
- Support and mentor junior consultants through:
- Knowledge sharing
- Quality assurance activities
- Collaborative delivery
- Maintain awareness of emerging threats, regulatory developments, industry trends, and evolving security frameworks and standards
- Contribute to the ongoing growth, capability, and maturity of the Secure Advisory practice
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Skills & Experience
Essential
- Strong experience delivering Governance, Risk & Compliance (GRC) and information security consultancy services in client-facing environments
- Practical experience with:
- Implementing, assessing, or managing security frameworks and standards such as:
- ISO/IEC 27001
- NIST
- Cyber Essentials
- CIS Controls
- PCI DSS
- NCSC Cyber Assessment Framework (CAF)
- Implementing, assessing, or managing security frameworks and standards such as:
- Strong understanding of:
- Information security governance
- Risk management
- Compliance
- Assurance principles
- Experience in:
- Conducting risk assessments
- Control reviews
- Compliance gap assessments
- Security maturity assessments
- Developing and maintaining ISMS
- Ability to produce clear, high-quality documentation and reports for both technical and non-technical audiences
- Strong stakeholder management and communication skills, with capability to engage at senior leadership levels
- Experience facilitating workshops, presenting findings, and supporting remediation and improvement activities
- Commercial awareness with experience in:
- Proposals
- Statements of Work (SoWs)
- Pre-sales activities
- Bid responses
- Good understanding of modern IT and cloud environments, including:
- Microsoft 365
- SaaS platforms
- Cloud services
- Traditional infrastructure
- Ability to manage multiple engagements and priorities within a consultancy environment
- Analytical, problem-solving, and decision-making skills
- Willingness to travel to customer locations when required
- Ability to secure UK Security Clearance to obtain SC and NPPV3
Desirable
- Experience delivering consultancy services in UK Public Sector or regulated environments
- Knowledge of data protection and privacy regulations, including:
- UK GDPR
- Data Protection Act
- Knowledge of Financial Conduct Authority (FCA) security requirements
- Experience in:
- Supplier assurance
- Third-party risk management
- Operational resilience activities
- Exposure to delivering:
- Security awareness sessions
- Workshops or client training activities
- Hands-on experience with business continuity, disaster recovery, or wider operational resilience programs
- Technical security or infrastructure experience
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Certifications & Qualifications
You must demonstrate experience within information security, cybersecurity, governance, risk, compliance, or assurance-focused roles, as well as a former consulting environment background. Hold a minimum of two of the following certifications or qualifications:
- ISO/IEC 27001 Lead Auditor and/or Lead Implementer
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CRISC (Certified in Risk and Information Systems Control)
- CISMP or an equivalent security qualification
- Cyber Essentials Assessor qualification
- Relevant NIST, CAF, PCI DSS, or risk management certifications
- Degree-level qualification in:
- Cyber Security
- Information Security
- Computer Science
- Risk Management
- Related disciplines
Our Benefits
We believe in supporting our team members both professionally and personally. Here’s how we invest in you:
Compensation and Financial Wellbeing
- Competitive base salary
- Matching pension scheme up to 5% from day one
- Discretionary company bonus scheme
- 4x annual salary Death in Service coverage from day one
- Employee referral scheme
Tech Scheme
- Access to cutting-edge tech tools
Health and Wellness
- Private medical insurance from day one
- Optical and dental cash-back scheme
- Help@Hand app, offering:
- Access to remote GPs
- Second opinions
- Mental health support
- Physiotherapy
- Employee Assistance Programme (EAP) service
- Cycle to Work scheme
Work-Life Balance and Growth
- 28 days of annual leave + bank holidays
- Extra paid day off on your birthday
- Ten paid learning days per year
- Flexible working hours
- Market-leading parental leave
- Sabbatical leave (after five years)
- Work from anywhere (up to 3 weeks per year)
- Industry-recognised training and certifications
- Bonusly employee recognition and rewards platform
- Clear opportunities for career development
- Length of Service Awards
- Regular company events
Diversity and Inclusion
At Qodea, we champion diversity and inclusion. We believe a career in IT should be open to everyone, regardless of:
- Race
- Ethnicity
- Gender
- Age
- Sexual orientation
- Disability
- Neurotype
We value the unique talents and perspectives each individual brings to our team and strive to create a fair and accessible hiring process for all.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills