About this role
Salary: £? - ? per year
Requirements: Proven track record of executing security due diligence on target entities during corporate acquisitions.Deep, hands-on experience implementing, auditing, or managing ISO 27001 and SOC 2 compliance programs.Experience designing, updating, and testing Business Continuity frameworks; ISO 22301 alignment is a plus.Outstanding stakeholder management skills, with the ability to communicate complex security risks to business leads and M&A deal teams. Responsibilities: Execute rigorous security due diligence for upcoming M&A activities.Conduct comprehensive cybersecurity risk assessments on target acquisition companies.Review target company security controls, policies, third-party assurance reports, and historical security incident logs.Identify deal-impacting risks, quantify remediation effort, and advise on onboarding security priorities.Identify risk areas and create post-acquisition security integration roadmaps and transition plans.Assess, maintain, and mature our security frameworks aligned with ISO/IEC 27001 and SOC 2 Type II.Develop and maintain information security policies, standards, and procedures aligned to our business objectives.Run security risk assessments, update risk registers, and drive risk treatment and remediation plans.Identify control gaps, support remediation with internal system owners, and collect audit-ready evidence.Prepare our business, staff, and control owners for external surveillance and compliance audits.Review and update our Business Continuity Plans across key business departments.Facilitate Business Impact Analyses to identify critical processes, dependencies, and Recovery Time Objectives.Design and run tabletop exercises and simulation tests to validate recovery strategies.Perform vendor risk assessments and review security clauses to ensure supplier requirements are met.Manage relationships with our outsourced managed IT and information security suppliers.Deliver security awareness initiatives and provide advisory support to projects and teams.Communicate risks and recommendations clearly to leadership and non-technical stakeholders. Technologies: ARMSupportSecurity More:
We are hiring two highly skilled, hands-on contract Information Security & Resilience Consultants to support several critical, high-priority strategic initiatives. This is a 6-month contract inside IR35, offering up to £500 per day, with hybrid working and two days per week onsite in either London or Bradford. In this dual-role, we will rely on you to strengthen our information security, compliance, business continuity, and resilience capabilities while supporting M&A activity. ARM is advertising this vacancy on behalf of the end client.
last updated 29 week of 2026