Security Risk and Controls Consultant

Information Security Risk Manager – Controls (NIST CSF 2) | London (Hybrid) | £120,000 pro rata | 12-month FTC

La Fosse has partnered with a leading financial services firm that is seeking a Security Risk and Controls Consultant to lead a key programme aligning internal security controls with the NIST CSF 2.0 framework. The organisation operates a modern, cloud-native infrastructure and is looking for someone to design, implement, and measure scalable controls across a dynamic technology environment.

This 12-month fixed-term role is ideal for a senior consultant or risk professional with strong framework expertise and the ability to work across technical and non-technical stakeholders.

What they’re looking for

• Strong experience with NIST CSF 2.0 and related frameworks (ISO 27001, COBIT, NIST 800-53)

• Understanding of cloud-native environments and infrastructure-as-code principles

• Ability to design, map, and embed controls that are practical and measurable

• Experience developing Key Control Indicators (KCIs) and implementing control monitoring tools

• Track record of conducting thematic control reviews and presenting findings at senior level

• Collaborative, delivery-oriented mindset with strong communication skills

• Familiarity with Continuous Controls Monitoring and related automation platforms (advantageous)

This is a 12-month fixed-term contract, based in London with hybrid working. Salary is up to £120,000 pro rata, depending on experience.

If you would like to find out more, please apply.