We are seeking a knowledgeable, client-focused Information Governance Consultant to join our core technical delivery team. In this client-facing role, you will act as a trusted strategic advisor to our external customers while serving as an internal Subject Matter Expert to support internal information governance and security matters as needed.
From guiding SMEs and corporate clients through ISO 27001 implementations to conducting formal IASME Cyber Assurance and Defence Cyber Certification (DCC) assessments, you will combine technical authority with exceptional stakeholder management to make security simple, actionable, and robust.
Success Metrics
- Client Delivery Excellence: Consistent delivery of high-quality consultancy, ISO 27001 implementations, and external audit projects within agreed client timelines and Scope of Work SLAs.
- Audit & Assessment Integrity: Flawless execution of external client assessments and audits, maintaining rigorous compliance with IASME, DCC, and ISO standard requirements.
- Subject Matter Support: Providing effective, high-level subject matter expertise to support the business with internal compliance standards when required.
- Quality Thresholds & Client Satisfaction: Contribution to maintaining our 5.0* Trustpilot rating through clear, accurate report writing and actionable, client-first advice.
- Professional Standards: Successful achievement and maintenance of required assessor accreditations (IASME Cyber Assurance and Defence Cyber Certification).
Key Responsibilities
1. Client Consulting & Audit Delivery
- Framework Implementation: Guide clients on best practices for designing, building, and embedding Information Security Management Systems (ISMS) tailored to their business needs.
- Auditing & Assessment: Conduct independent internal audits for clients against ISO 27001 standards and act as an official Assessor for IASME Cyber Assurance and Defence Cyber Certification (DCC).
- Data Protection & Governance: Provide expert advice and practical guidance on data protection compliance, risk assessments, and information governance controls.
- Technical Security Alignment: Bridge the gap between technical security controls and strategic governance to ensure holistic security postures for client organisations.
2. Expert Advisory & Knowledge Leadership
- Internal Subject Matter Expertise: Provide expert advice, guidance, and technical analysis in-house, supporting the Office Manager and wider business with subject matter expertise on internal compliance standards as required.
- Framework Expertise: Maintain deep, up-to-date knowledge of evolving standards, including ISO 27001, IASME Cyber Assurance, Defence Cyber Certification (DCC), and NCSC Cyber Assessment Framework (CAF).
- Team Awareness: Aid in increasing internal awareness of information governance, providing guidance and advice to team members across other business functions.
- Continuous Improvement: Keep abreast of emerging cyber threats, regulatory changes, and industry trends, continually improving skills in line with company objectives.
Qualifications, Skills & Attributes
Required Qualifications, Experience & Attributes
- Experience: Minimum 3 years’ hands-on experience in a compliance, audit, or information governance-focused role (consultancy or in-house).
- Key Accreditation: Certified ISO 27001 Lead Auditor (substantial, verifiable auditing experience will be considered in lieu of certification).
- Framework Knowledge: Solid understanding of ISO 27001, IASME Cyber Assurance, Cyber Assessment Framework (CAF), and UK GDPR.
- Auditing & Reporting: Strong, accurate report writing skills with high attention to detail and the ability to articulate complex security concepts clearly.
- Stakeholder Management: Proven track record of managing internal and external stakeholders, building trust with C-suite executives and technical teams alike.
- Personal Traits: Self-motivated, capable of working independently or collaboratively, with a flexible mindset and an alignment with our core values.
Desirable Qualifications, Skills & Attributes
- Qualified IASME Cyber Assurance Assessor and/or Defence Cyber Certification (DCC) Assessor (full training will be offered to achieve these qualifications if not already held).
- ISO 9001 Lead Auditor / Internal Auditor certification.
- Experience working within an NCSC-aligned or defence-sector accredited cyber security consultancy environment.
- Full UK Driving Licence and willingness to travel to customer sites across the UK and internationally as required.
- UK Cyber Security Council (UKCSC) professional title at Principal / Chartered level.
About Assure Technical
Assure Technical is an award-winning, family-run cybersecurity company based in the Malvern Hills, Worcestershire. We are technical security experts who pride ourselves on making security simple for our expanding B2B client base, ranging from progressive SMEs to corporates.
With over 350 genuine 5-star Trustpilot customer reviews and an overall rating of 5.0*, we are the most trusted cyber partner in the UK. We pride ourselves on offering market-leading solutions and are guided by our core values: We Deliver Excellence, We Do the Right Thing, We Work as One.
You can find out more about what we do at assuretechnical.com
Why Join Assure Technical?
- Competitive Salary: Market-aligned salary package reflecting your consulting experience and technical accreditations.
- Flexible Working: Office-based in Malvern with periodic remote/WFH options and structured client travel.
- Bonus & Pension: Annual performance-related bonus and enhanced employer pension contributions.
- Professional Development: Fully funded training pathways (including IASME Cyber Assurance and Defence Cyber Certification Assessor qualifications).
- Workplace Perks: Healthcare cover, tailored personal development plan, 25 days holiday plus Bank Holidays, and a day off for your birthday.
- Incredible Location & Facilities: Air-conditioned offices in the Malvern Hills featuring an on-site restaurant, free parking, kitchen, and shower facilities.
- Relocation Package: Available for outstanding candidates relocating to the region.
Application Deadline: 4th September 2026
Assure Technical is an equal opportunity employer. All applicants must have the right to work in the UK and be eligible for UK Security Clearance (SC) if required. No agencies, please.
Job Types: Full-time, Permanent
Pay: £42,000.00-£55,000.00 per year
Benefits:
- Canteen
- Company pension
- Health & wellbeing programme
- On-site parking
Experience:
- Compliance management: 3 years (required)
Work authorisation:
- United Kingdom (required)
Location:
- Malvern, Worcestershire (preferred)
Work Location: Hybrid remote in Malvern
