Information Security Consultant Job at European Bank for Reconstruction and Development (London)

Information Security Consultant

European Bank for Reconstruction and Development

Location:
United Kingdom , London

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Not provided

Save Job

Apply Position

Job Description:

We are seeking a highly skilled Information Security Consultant to lead the scoping, planning, and execution of advanced security testing initiatives, including Red Team and Purple Team engagements. We are looking for a specialist experienced in managing and delivering ethical hacking campaigns, Red/ Purple team assessments and technical risk assessments. This role validates defensive capabilities, synthesises complex findings to provide actionable guidance for improvement of cyber posture and resilience. This role bridges technical security and security risk management and requires knowledge risk assessment methodologies, an ability to produce metrics, reporting and dashboards as well translate and present technical language, concepts and impacts into language that facilitates business decision making.

Job Responsibility:

Define objectives, scope, and success criteria for Red Team and Purple Team exercises
Develop detailed test plans aligned with organizational risk priorities and compliance requirements
Coordinate scheduling and resource allocation for internal and external stakeholders
Act as the primary liaison between internal teams and external MSSPs/consultants
Ensure testing activities adhere to agreed timelines, methodologies, and ethical guidelines
Monitor progress and provide status updates to senior leadership
Review and validate attack scenarios, tactics, techniques, and procedures (TTPs) used during engagements
Ensure Purple Team exercises effectively integrate offensive and defensive teams for collaborative improvement to enhance detection and response
Analyse findings from Red and Purple Team engagements
Prepare comprehensive reports detailing vulnerabilities, attack paths, and defensive gaps
Prepare and present results to technical and non-technical stakeholders, including reporting for EBRD senior leadership
Incorporate technical findings and outcomes into information security risk reporting templates
Provide actionable remediation steps and strategic recommendations based on findings
Collaborate with IT security, security engineering, architecture and operations teams to guide implementation improvements
Track remediation progress and validate effectiveness through follow-up testing

Requirements:

Strong understanding of adversarial tactics (MITRE ATT&CK framework) and threat emulation
Experience with penetration testing, exploit development, and detection engineering
Familiarity with SIEM, EDR, and threat-hunting tools
Commitment to staying up to date with emerging threats and remedies
Ability to translate technical concepts, including technical risk, into business language and business impact
Experience in proposing actionable remedial steps to address findings
Experience of reporting meaningful metrics to a variety of internal technical and non-technical audiences
Proven ability to work with external MSSPs and consultants
Experience in overseeing and managing testing campaigns with a variety of internal stakeholders
Excellent communication skills for cross-functional engagement
Extensive background in cybersecurity, covering all major security domains, with solid hands-on experience in Red and Purple Team operations
Hands-on experience in scoping and managing security testing engagements
Solid experience in metrics and reporting
Strategic thinker with strong analytical skills
Ability to translate technical findings into business risk language
Ability to partner with a wide range of technical and non-technical stakeholders

Nice to have:

OSCP, OSCE, CRTO, or similar offensive security certifications
GIAC certifications (e.g., GCTI, GPEN, GCFA) or equivalent

What we offer:

Varied, stimulating and engaging work that gives you an opportunity to interact with a wide range of experts in the financial, political, public and private sectors across the regions we invest in
A working culture that embraces inclusion and celebrates diversity
An environment that places sustainability, equality and digital transformation at the heart of what we do
Flexible working

Additional Information:

Job Posted:
January 15, 2026

Expiration:
January 28, 2026

Employment Type:

Fulltime

Work Type:

Hybrid work

European Bank for Reconstruction and Development - All Job Offers

Job Link Share: