Information Security & Cyber Resilience Consultant

Permanent consulting role for financial-sector clients who have to prove their resilience, not just claim it. You review policies and controls, judge what a proposed change does to operational and cyber risk, and help stand up the controls and tooling that make a recovery story credible. AI drafts the assessments; you own the verdict.

• Review information security policies, controls and change requests, and say plainly which ones do not hold


• Assess what a proposed change does to operational and cyber risk before it ships, not after


• Support the implementation and day-to-day running of security and resilience controls and tooling


• Plan and risk‑manage threat‑led penetration testing, including engagements run under the TIBER‑EU framework


• Develop cyber resilience strategy and translate it into controls someone can actually operate


• Prepare the evidence and reporting that supervisors, auditors and boards ask for


• Advise client security, risk and audit stakeholders up to CISO and CRO level