The consultant will identify, assess, and monitor information security risks while validating that control objectives are met across people, processes, and technology. They will provide expert advice and independent challenge to business teams to ensure risks are managed in line with organizational appetite.