Senior Cyber Security Risk Assessment Consultant

About the role

We are seeking a Senior Cyber Security Risk Assessment Consultant to join a global financial services organisation’s cyber and information security function. The role involves providing security expertise across a wide range of business and technology projects, working closely with architects, developers and risk managers to embed Secure‑by‑Design principles.

Key responsibilities

• Perform technical security risk assessments for business and IT projects, identifying threats, vulnerabilities and potential impacts.
• Translate security architecture, policies and risks into clear functional and technical security requirements.
• Define and advise on security testing requirements, including DAST, SAST, code scanning and penetration‑testing scopes.
• Review and validate solution designs against security requirements and OWASP guidelines.
• Produce and maintain security standards, baselines and documented requirements.

Required profile

• 10+ years of experience in cyber or information security, preferably within large enterprise or financial services environments.
• Proven experience performing technical security risk assessments and translating findings into practical controls.
• Strong understanding of application and infrastructure security, including Secure SDLC and Secure‑by‑Design.
• Excellent stakeholder‑management and communication skills, able to present risks to senior business leaders and technical specialists.

Required skills

• DAST (Dynamic Application Security Testing)
• SAST (Static Application Security Testing)
• OWASP Top 10 and related security principles
• Secure SDLC / Secure‑by‑Design methodologies
• Application vulnerability assessment and web/API security
• Code scanning and security‑analysis tooling
• Penetration‑testing methodology and scoping
• CI/CD security controls and DevSecOps
• Security and compliance automation