Cyber Security Consultant

Cyber security is fundamental to protecting our customers, colleagues and business. As a Senior Information Security Consultant, you'll play a key role in ensuring security is embedded into technology change from the very beginning. Working across cloud technologies, digital platforms, enterprise applications and major business transformation programmes, you'll provide expert guidance that enables innovation while effectively managing cyber risk. Reporting to the CISO, you'll partner with teams across Technology, Engineering and the wider business to influence solution design, strengthen security governance and ensure our technology estate continues to meet regulatory and industry standards. Whether you're supporting the delivery of new digital products, advising on cloud adoption, securing third party integrations or enabling major change initiatives, you'll have the opportunity to make a tangible impact across one of the UK's most recognised brands.,

• Act as the cyber security subject matter expert across technology and business change, providing pragmatic security advice throughout the project lifecycle.
• Lead security risk assessments, control assurance activities and penetration testing to identify and mitigate cyber risks before solutions go live.
• Help maintain and evolve our Information Security Management System, ensuring alignment with frameworks including ISO 27001, NIST and PCI DSS.
• Partner with Architecture, Engineering, Technology and third-party suppliers to embed effective security controls into new and existing technology solutions.
• Produce clear security documentation, risk reporting and recommendations that support informed business decisions and regulatory compliance.
• Contribute to security awareness initiatives and continuously improve our cyber governance, policies and assurance processes.
  
  Proven experience in an Information Security Consultant, Cyber Security Consultant, Security Architect or Cyber GRC role within a complex technology environment.
• Strong knowledge of information security frameworks and standards, including ISO 27001, PCI DSS, NIST or equivalent industry best practice.
• Experience conducting security risk assessments, security assurance activities and advising on secure technology design across a range of technology projects.
• Good understanding of cloud security, enterprise infrastructure, networks, SaaS platforms and modern applications, with the ability to apply security principles pragmatically.
• Excellent stakeholder management and communication skills, with the ability to influence both technical and non-technical audiences.
• Professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor or PCI DSS would be advantageous.
  
  We're always looking to recognise and reward our employees for the work they do. As a valued member of The AA team, you'll have access to a range of benefits including:
• 25 days annual leave plus bank holidays + holiday buying scheme
• Worksave pension scheme with up to 7% employer contribution
• Free AA breakdown membership from Day 1 plus 50% discount for family and friends
• Discounts on AA products including car and home insurance
• Employee discount scheme that gives you access to a car salary sacrifice scheme plus great discounts on healthcare, shopping, holidays and more
• Company funded life assurance
• Diverse learning and development opportunities to support you to progress in your career
• Dedicated Employee Assistance Programme and a 24/7 remote GP service for you and your family
Plus, so much more! We're an equal opportunities employer and welcome applications from everyone. The AA values diversity and the difference this brings to our culture and our customers. We actively seek people from diverse backgrounds to join us and become part of an inclusive company where you can be yourself, be empowered to be your best and feel like you truly belong. We have five communities to bring together people with shared characteristics and backgrounds and drive positive change.