Senior Information Governance Security Consultant at Civica

London, England, United Kingdom -

Full Time

Start Date

Immediate

Expiry Date

11 Aug, 26

Salary

0.0

Posted On

13 May, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

IT Governance, Risk Management, Compliance, ISO 27001, Cyber Essentials Plus, GDPR, NCSC CAF, Gap Analysis, Security Auditing, Stakeholder Management, Security Strategy, Technical Controls, Client-Facing Consultancy, Security Awareness Training, Risk Treatment Planning, Information Security Principles

Industry

Software Development

Description

Description We’re Civica and we make software that helps deliver critical services for citizens all around the world. From local to state government, to education, to health and care, over 5,000 public bodies across the globe use our software to help provide critical services to over 100 million citizens. Our aspiration is to be a GovTech champion everywhere we work around the globe, supporting the needs of citizens and those that serve them every day. Building on 21 years of continuous growth and success, we're at a pivotal point on our journey to realise that aspiration. Why you’ll love this role of Senior Information Governance Security Consultant This is a high-impact, client-facing role where you will help organisations strengthen their information governance and cyber security posture. You’ll work across a variety of public and private sector clients, delivering consultancy that directly improves resilience, compliance, and risk management. You’ll have the opportunity to lead meaningful security engagements, from gap analysis and risk assessments to certification support and security improvement programmes. This role offers a strong mix of autonomy, variety, and influence—ideal for someone who enjoys solving complex security challenges and driving best practice. If you are passionate about governance, risk, and compliance, and enjoy working closely with clients to deliver real-world impact, this role gives you the platform to do exactly that. This role can be performed predominantly from home, with occasional travel to offices. Deliver Information Governance (IG) and Information Security (IS) consultancy services to clients Conduct gap analysis, risk assessments, and risk treatment planning Assess organisations against standards such as Cyber Essentials, Cyber Essentials Plus, and ISO 27001 Support clients through certification processes and security improvement programmes Perform audits to ensure effectiveness of security controls Produce high-quality security reports and present findings to stakeholders Provide continuous assessment of client security practices and recommend improvements Contribute to the development and enhancement of IG and cyber security service offerings Deliver consultancy across recognised frameworks such as the NCSC Cyber Assessment Framework (CAF) Develop and review security policies, procedures, and controls Deliver security awareness training, workshops, and exercises Collaborate with internal teams and support pre/post sales activities Mentor colleagues and contribute to team knowledge sharing Maintain strong client relationships and stakeholder communication Experience & Skills Strong experience in IT Governance, Risk & Compliance (GRC) across cloud and on-premise environments Knowledge of security and data protection frameworks including ISO 27001, Cyber Essentials Plus, and GDPR Experience applying risk management principles and methodologies In-depth understanding of Cyber Essentials and NCSC CAF Ability to advise on security strategy and risk mitigation Strong knowledge of information security principles and technical controls Proven experience in client-facing roles Excellent communication skills, with the ability to engage stakeholders at all levels Strong organisational skills with attention to detail Ability to work independently with minimal supervision Nice to have: Experience implementing and auditing ISMS aligned to ISO 27001 Relevant certifications such as CISSP, CISM, CISA, or CEH Experience working with frameworks such as DTAC, DSPT, CAF, or PSN Experience delivering security awareness programmes Experience in third-party assurance activities Ability to communicate complex security risks to both technical and non-technical audiences, including C-level stakeholders Strong presentation and reporting skills Experience working with Local Government We Want You to Bring Your Whole Self to Work There is no such thing as the perfect candidate, so if you think you have what it takes but don't necessarily meet every single point on the list above, please still get in touch. We'd love to have a chat and see if you could be a great fit. Why You'll Love Working with Us As a company, we're passionate about what we do and the citizens we serve. If you, too, want to champion the use of technology in public services to improve outcomes for citizens and public sector organizations, then Civica is the right place for you. We will help you unlock the best version of yourself, achieve career growth, and make a real difference to people and communities. We know that when our people are happy, they work better and have greater job satisfaction. Here's what you can expect: Time Off & Work-Life Balance ✔ 25 Days Annual Leave + bank holidays – plus the option to buy up to 10 extra days! ✔ Days of Difference – Up to 3 extra days off for volunteering. Financial Well-being & Security ✔ Pension Contributions – 5% employer match to support your future. ✔ Income Protection – Up to 75% salary cover for long-term illness. ✔ Life Assurance – 4x salary tax-free lump sum. ✔ Critical Illness Cover – £25,000 lump sum (extendable to dependents). Health & Perks ✔ Private Medical Insurance – Fast access to private healthcare. ✔ Health Cash Plan – Claim back physio, therapies & more. ✔ Dental Insurance – Cover for routine & emergency care. ✔ Electric Vehicle (EV) Scheme – A wide range of electric & hybrid vehicles. ✔ Affinity Groups – Join employee-led communities. ✔ Bounty Bonus – Refer a friend & get rewarded. At Civica, we are committed to building an inclusive and diverse workplace where everyone feels valued and supported. We believe that a variety of perspectives drives innovation and excellence, and we welcome applicants from all backgrounds, cultures, and experiences. We are an equal opportunity employer. We do not discriminate based on race, ethnicity, religion, gender, sexual orientation, disability, age, or any other legally protected characteristic. Our recruitment process is designed to ensure fairness and transparency, so every candidate has an equal chance to contribute to our mission. If you need any adjustments or accommodations to participate in our recruitment process, please let us know. We are here to support you.

Responsibilities

Deliver information governance and security consultancy to public and private sector clients through risk assessments and gap analyses. Lead security improvement programs and support clients in achieving certifications like ISO 27001 and Cyber Essentials.