Information Security & Resilience Consultant

About the role

We are seeking two highly skilled, hands‑on Information Security & Resilience Consultants to support critical, high‑priority strategic initiatives on a 6‑month contract. The role combines M&A security due diligence, ISMS governance and business continuity program leadership.

Key responsibilities

• Conduct comprehensive cybersecurity risk assessments and security due diligence on target acquisition companies.
• Review and evaluate security controls, policies, third‑party assurance reports (SOC 2, ISO certifications) and incident logs.
• Identify deal‑impacting risks, quantify remediation effort and advise on onboarding security priorities.
• Develop post‑acquisition security integration roadmaps and transition plans.
• Assess, maintain and mature ISO 27001 and SOC 2 Type II frameworks, including policies, standards and procedures.
• Run security risk assessments, update risk registers and drive remediation plans.
• Prepare evidence and support internal teams for external surveillance and compliance audits.
• Lead the review and update of Business Continuity Plans, facilitate Business Impact Analyses and define Recovery Time Objectives.
• Design and execute tabletop exercises and simulation tests to validate recovery strategies.
• Perform vendor risk assessments and ensure third‑party security and continuity requirements are met.

Required profile

• Proven experience delivering information security and resilience projects, preferably within M&A contexts.
• Strong knowledge of ISO 27001 and SOC 2 Type II compliance requirements.
• Hands‑on experience with business continuity planning, disaster recovery and risk assessment methodologies.
• Ability to work independently, produce audit‑ready evidence and communicate findings to senior stakeholders.

Required skills

• ISO 27001
• SOC 2 Type II
• M&A security due diligence
• Business Continuity Planning
• Disaster Recovery
• Risk Assessment
• Vendor Risk Management

What we offer

• Hybrid working model – 2 days onsite (London or Bradford) and remote.
• Competitive daily rate up to £500.
• Opportunity to work on high‑profile strategic initiatives.