We're currently looking for a passionate and knowledgeable Information Security Consultant to join our fast‑paced and growing Information Security function. In this role, you'll work closely with technology teams, business stakeholders and third‑party partners, providing security‑by‑design guidance and helping embed strong security practices across the organisation.
This is a full‑time, permanent role based at our Support Centre in Speke, Liverpool.
Key responsibilities for this role
* Provide security‑by‑design consultancy to projects, programmes and business initiatives from inception through delivery
* Translate security policies, standards and risk requirements into clear, actionable guidance for technical and non‑technical stakeholders
* Act as the primary security point of contact for assigned business areas and change initiatives
* Conduct and support information security risk assessments, threat modelling and control gap analysis
* Advise on proportionate, risk‑based treatments and support risk acceptance and governance processes
* Embed security into technology change across cloud, infrastructure, identity, applications and third‑party services
* Support security testing activities and remediation planning with engineering and delivery teams
* Build strong relationships with IT, Architecture, Engineering, SOC and business stakeholders
* Contribute to security reporting, KPIs and governance forums to support
To be successful in this role you will be
* An experienced Information Security Consultant, Advisor or similar
* Confident in information security risk management, security controls and secure design principles
* Experienced in supporting projects, programmes or product teams with security assurance
* Knowledgeable of frameworks and standards such as ISO 27001, NIST or CIS
* Able to communicate clearly with technical and non‑technical stakeholders
* Pragmatic, commercially aware and able to balance security with business pace
* Experienced in retail or e‑commerce environments, including customer‑facing platforms or payment risk
* A professional security qualification such as CISSP (desirable but not essential)
Why Join B&M?
We offer you a range of great benefits including discount in our stores, a colleague portal offering discounts for numerous retailers, hospitality & more! Check out our full benefits here: https://careers.bmstores.co.uk/our-bm-benefits/
B&M are proud to be an equal opportunities employer. We're committed to fostering a diverse and inclusive workplace for all our colleagues.
#J-18808-Ljbffr