Security Information Assurance Consultant

Job Description

Security Information Assurance Consultant – 5 Days Onsite Central London

At DXC Technology we deliver mission‑critical services in a secure environment while promoting our people‑first agenda, a sense of community, and a healthy work‑life balance. We are one of the world’s leading IT solutions enterprises and continually grow by delivering services in challenging and exciting situations.

We believe hiring a diverse team is crucial to our success. Our recruiting decisions are based on your skills and experience, and we actively encourage consistent growth on our journey to a culture of inclusion.

• Working closely with Security Architects and the design teams, provide a bridge between the technical teams and the security risk owner from the business, helping translate technical security risks into a form understandable to non‑technical business people.
• Advise risk owners on risk severity and potential mitigation strategies, advising on impacts to enable informed risk‑management decisions.
• Monitor implementation and ongoing maintenance of agreed risk‑management actions.
• Create, maintain, and utilise risk assessment and related artefacts such as the risk register and security‑specific documentation.
• Assist the Account Security Lead with creating and maintaining security‑related processes, policies and guidance.
• Proactively identify areas for improvement in security across the account.

• Experience in a similar or related role with desirable additional qualifications such as CISM or CISSP / IISP or other professional body membership.
• Experience working to HMG best practices (e.g., NCSC guidance, DSIT Secure by Design, GovS 007).
• Desire to improve processes, looking for the root cause of a problem.
• Willingness to share knowledge and learn from others.
• Proactive approach towards looking for risks and problems.
• Strong team‑working ethic, a “customer first” focus and a thirst for knowledge.

• Deep knowledge of information and cyber security risk management.
• Experience in threat modelling using STRIDE or Attack Trees, NIST Cyber Security Framework.
• Knowledge of technology stacks including Cloud (AWS, Azure), M365, VMWare, Redhat Openshift, Windows and Linux.
• Knowledge of industry security guidance from OWASP and CIS.
• Awareness of security champions programmes.

• Competitive compensation.
• Pension scheme.
• DXC Select – comprehensive benefits package (private health/medical insurance, childcare vouchers, gym membership and more).
• Perks at Work (discounts on technology, groceries, travel and more).
• DXC incentives (recognition tools, employee lunches, regular social events).

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in‑person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf.

More information on employment scams is available here.