Information Security Consultant

About the role

Digital Waffle is looking for an experienced Information Assurance Consultant to support critical Ministry of Defence (MOD) programmes. You will embed security and information‑assurance requirements throughout the system lifecycle, ensuring secure delivery in a highly regulated defence environment.

Key responsibilities

• Develop, maintain and manage RMADs in line with MOD security policies.
• Produce and review Security Operating Procedures (SyOPs) and related documentation.
• Conduct information‑assurance and security risk assessments across defence projects.
• Support security accreditation and assurance activities throughout project lifecycles.
• Provide expert guidance on security controls, governance and risk management.
• Liaise with project teams, security architects, accrediting authorities and customer stakeholders.
• Ensure compliance with MOD, government and industry security standards.
• Identify, assess and mitigate information‑security risks and support audits.

Required profile

• Proven experience as an Information Assurance or Security Consultant within MOD or government environments.
• Strong practical experience producing and maintaining RMADs and SyOPs.
• Deep understanding of MOD security policies, assurance frameworks and accreditation processes.
• Experience conducting security risk assessments and managing information risk.
• Excellent stakeholder management and communication skills.
• Eligibility for SC clearance (DV eligibility desirable).

Required skills

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)

What we offer

• Salary up to £80,000 per annum plus bonus.
• Hybrid working model with a Bristol‑based office.
• Opportunity to work on high‑impact defence projects.