Principal Security Consultant (CHECK Team Leader - Infrastructure), LRQA, Birmingham, UK

Join our research-led, globally trusted cybersecurity team.

Who are we?

As the world’s leading  global risk management partner, we’re a force for good with sustainability at our core. We operate in over 150 countries and are recognised by over 30 accreditation bodies worldwide. Our world-class experts in cybersecurity, assessment, advisory, and inspection services work hand in hand with our clients to solve their biggest business challenges.

We’re here to shape a better future together; helping our clients strengthen their cybersecurity maturity, source responsibly, achieve product integrity, navigate the energy transition and assure their assets and management systems. And while we’re proud of our history of delivering game-changing market firsts, we’re quick to embrace change and new ideas from diverse perspectives. Our people are ambitious, future focused and share our passion about driving positive change.

Your daily responsibilities

As a Principal Security Consultant at LRQA, you will be integral to delivering a wide range of security assessments. This includes penetration testing against a variety of environments and technologies, in addition to delivering Cyber Essentials, PCI DSS, and leading engagements under the NCSC's CHECK scheme. This position is remote, however your time is expected to be split between home working (50%) and on customer sites (50%), with visits to our Birmingham office when needed.

Your day-to-day responsibilities will include:

• Client Interaction: Managing the entire lifecycle of security engagements, from kick-off calls through testing, reporting, and debriefing.
• Quality Delivery: Producing high-quality, thorough reports that demonstrate continuous improvement.
• Consultancy: Developing and maintaining professional, consultative client relationships and supporting scoping efforts where required.
• Project Leadership: Leading medium to large projects and taking responsibility for one or more strategic clients.
• Team Development: Providing ongoing mentorship to junior consultants and contributing to team and process improvement.
• Thought Leadership: Providing technical analysis of current IT security events, particularly for media coverage when requested.

Your experience and qualifications

You should have strong technical skills in information security, with hands-on professional experience in penetration testing across applications, infrastructure, cloud platforms (Azure, AWS, Oracle), mobile environments (Android and iOS), and social engineering.

Essential requirements:

• Excellent written and spoken English skills with the ability to explain complex technical concepts to non-technical audiences.
• Ability to work both independently and as part of a high-performing team, with the capability to lead, teach, present, and inspire colleagues.
• At least 36 months of relevant cybersecurity industry experience within the past 5 years.
• CREST Certified Tester (CCT) or Cyber Scheme Team Leader (CSTL).
• UK Cyber Security Council professional title (Principal or Chartered)
• Current UK security clearance (SC).

Experience in additional technical domains such as container security, code review, or threat modelling would be advantageous.

The ideal candidate

We are looking for someone who truly cares about cybersecurity and the impact their work has on client organisations. You should be a self-starter, naturally curious about emerging threats and comfortable working at the cutting edge where solutions aren't always obvious or well-documented.

We need someone who can be great at what they do while leaving their ego at the door, understanding that true excellence comes from teamwork, humility, and continuous growth. You'll thrive in our team if you're the type of person who actively shares knowledge, asks for help when needed, and believes that lifting up your teammates strengthens the entire team.

Most importantly, you should be driven by a genuine desire to help clients, not just identifying vulnerabilities but working with them to improve their security posture.

Your benefits

At LRQA, you will be part of an exciting work environment, working alongside a highly-experienced and skilled team to help high-profile organisations solve complex challenges. We’ll support your growth through certifications, skills development, and the chance to work on cutting-edge research and innovation that keeps you at the forefront of the industry.

Additional benefits include:

• Competitive remuneration package
• 8% employer matched pension scheme
• Private healthcare through AXA Health
• Clear career advancement paths with opportunities for progression within LRQA

We maintain a strong commitment to diversity, equity, and inclusion.