Technology Consultant (Resilience, PAM & IAM)
The full posting
Job Description
Talan is supporting a key client in delivering a critical remediation programme focused on strengthening underperforming technology controls. We are seeking an experienced Technology Consultant to drive improvements across control design and operating effectiveness.
Contract with strong chance of extensions
Location - London
On-Prem 4 days per week
This role will play a central part in enhancing controls related to
- Operational Resilience
- Privileged Access Management (PAM)
- Identity & Access Management (IAM)
You will work closely with technology, risk, and audit stakeholders to ensure remediation activities are clearly defined, executed effectively, and evidenced to a high standard.
Control Assessment & Diagnosis
- Review underperforming controls to identify: Root causes
- Design deficiencies
- Operating effectiveness gaps
- Assess whether current control designs are fit for purpose and aligned with regulatory expectations
Remediation Planning & Execution
- Define structured remediation plans, including: Actions
- Ownership
- Milestones
- Evidence requirements
- Drive delivery of remediation activities in collaboration with control owners and SMEs
Stakeholder Engagement
- Partner with: Technology and engineering teams
- Risk & compliance functions
- Internal audit and assurance stakeholders
- Provide constructive challenge to ensure robust and sustainable control improvements
Control Framework Enhancement
- Support optimisation of control operating models, including: Control frequency
- Evidence standards
- Accountability models
- Governance processes
- Embed consistent control discipline across resilience, PAM, and IAM domains
Governance & Reporting
- Track remediation progress and proactively escalate: Risks
- Blockers
- Overdue actions
- Produce clear, concise reporting for: Senior stakeholders
- Governance forums
- Review remediation evidence to confirm completeness and sustainability
Audit & Assurance Readiness
- Support preparation for: Control testing
- Internal/external audit
- Regulatory reviews
- Ensure remediation outcomes are defensible and audit-ready
Essential Experience
- Proven experience in one or more of the following: Technology Risk / IT Controls
- Cyber Risk
- IT Audit
- Operational Resilience
- Strong track record delivering control remediation in: Financial services
- Banking
- Regulated environments
- Experience assessing: Control design effectiveness
- Operating effectiveness
- Familiarity with: Risk & Control Self-Assessments (RCSA)
- Audit findings and issue management
- Assurance and regulatory reviews
- Demonstrated ability to manage remediation lifecycle from identification through to closure
Operational Resilience
- Understanding of: Critical business services
- Disaster recovery & business continuity
- Technology recovery controls
- Experience with: Resilience testing evidence
- Impact tolerances
- Recovery plans & continuity procedures
Privileged Access Management (PAM)
- Knowledge of: Privileged account governance
- Joiner-Mover-Leaver processes
- Access recertification and reviews
- Exposure to: PAM tooling (e.g. vaulting solutions)
- Break-glass access
- Session monitoring
- Privileged account ownership models
Identity & Access Management (IAM)
- Experience with: Access provisioning & de-provisioning
- Role-based access controls (RBAC)
- Segregation of duties (SoD)
- Strong understanding of: Access reviews and governance
- IAM control testing
- Leaver controls
Key Skills & Attributes
- Strong analytical capability in control assessment and remediation design
- Ability to translate complex control issues into practical, actionable solutions
- Excellent stakeholder management across technical and non-technical audiences
- High-quality written communication, including senior-level reporting
- Confident in constructively challenging control owners
- Comfortable operating in ambiguous, fast-paced environments
- Strong attention to detail, particularly in reviewing remediation evidence
Additional Information
#TalanUK
Text as Talan published it; last compared with the original on 13 Nov 2026.
The employer: Talan
Talan advises companies on data, AI and technology change; most of its 17 security openings are security operations analyst posts, largely remote within one country.
Pay and benefits: A mix of permanent employment and contractor or freelance engagements, often on client projects.
Other security roles worth a look

Cybersecurity Consultant (shows the role here)
Thales · Architecture & Consulting · Singapore· 2w agoDetails

Cybersecurity Solutions Engineer (shows the role here)
Thales · Architecture & Consulting · Madrid Emilio Vargas· 1d agoDetails

Security Engineer (shows the role here)
Capco · Security Engineering · India - Bengaluru· 1w agoDetails

Junior Cyber Engineer (shows the role here)
Thales · Architecture & Consulting · Amsterdam, Hullenbergweg 81-135 (Office)· 1w agoDetails

Designed security for a whole company before?
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when Talan posts a security role
We read Talan's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.