TPRM Principal Security Consultant
- Team
- Digital & Tech
- Store
- London Support Office
- Location
- London, Greater London
- Contract type
- Permanent
- Position type
- Full Time
- Salary
- Competitive + Benefits
- Closing date: 19th May 2026
How We Hire
Everyone is welcome at M&S. No exceptions. It’s your background, abilities and differences that make you, uniquely you. And when you’re part of M&S, that individuality has the potential to make waves.
About the role
This section tells you all you need to know about the position and its responsibilities, outlining everything we hope to see in a successful candidate.
To stay close to our customers and colleagues, our support teams are in the office for at least three days a week as we believe that skills are developed through collaboration, and that spending time together makes us more creative and connected.
All the details
TPRM Security Consultant to act as a trusted advisor to senior stakeholders responsible for ensuring the security of a broad range of technical integrations between M&S and its suppliers, providing risk based assessments and supporting third party options to mitigate security risks related to complex TPRM engagements. Additionally, to ensure Secure-by-Design thinking is embedded into everything we do and that the risks are understood and managed.
You will be responsible for establishing and maintaining an effective relationship with assigned portfolio(s) of change from the Third-Party scope at both engineering and management levels
This is a global role that requires cross organisational influence over all areas of the business and technology including traditional retail, online, international, delivery centres, partners etc to support our mission in the management and reduction of Cyber Risk
What you'll do
- Own the InfoSec relationship with identified Third Party portfolio(s) of change to drive risk‑aware business decisions
- Become a trusted advisor to the technical and management teams in your assigned portfolio(s)
- Identify when your TPRM portfolio(s) require additional InfoSec support from areas such as Security Architecture, Security Design or Security Engineering and broker a successful engagement
- Lead technical security risk assessments and provide requirements and guidance into change activities, founded in CIS and secured by design principles.
- Oversee supplier onboarding risk assessments and ongoing monitoring programs
Who you are
- Detailed knowledge of 2 or more security domains and good understanding of others e.g Application Security, Network Security, Infrastructure Security, Cloud Security, End-User Compute Security, IoT and ICU Security.
- Demonstrable understanding and experience of risk assessment and compliance frameworks
- 6 years in technology with at least 2 years’ experience delivering advanced level security engineering or similar role
- Supporting qualifications in technology or security e.g Microsoft/Azure Architecture, OR CISSP, CISM, CRISK, CGEIT. CCAK, CCSK, CCSP.
What’s in it for you
Being a part of M&S is exactly that – playing your part to bring the magic of M&S to our customers every day. We’re an inclusive, dynamic, exciting, and ever evolving business built on doing the right thing and bringing exceptional quality, value, service to every customer, whenever, wherever and however they want to shop with us.
Here are some of the benefits we offer that make working for M&S just that little bit more special…
- After completing your probationary period, you’ll receive 20% colleague discount across all M&S products and many of our third-party brands for you and a member of your household.
- Competitive holiday entitlement with the potential to buy extra holiday days!
- Discretionary bonus schemes awarded based on how you achieve your personal objectives and our performance as a business.
- A generous Defined Contribution Pension Scheme and Life Assurance.
- A dedicated welcome to our teams with a tailored induction and a wide range of training programmes to develop your skills.
- Amazing perks and discounts via our M&S Choices portal to maximise your financial and personal wellbeing.
- Industry-leading parental, adoption and neonatal policies, providing support and flexibility for your family.
- Access to a fantastic range of wellbeing support for all colleagues including access to our 24/7 Virtual GP and PAM Assist to support you and your family.
- A charity volunteer day to support a charity or cause you're passionate about through a dedicated day away from work.
Everyone’s welcome
We’re ambitious about the future of retail. We’re innovating, disrupting, and leading the way into a more inspiring, digital era. It’s an exciting time to be part of M&S.
To support us on our journey, we’re building inclusive, diverse teams where everyone can be themselves, do their best work, and make change happen. We support each other and succeed together.
Don’t worry if you don’t meet every single requirement of the job description. It’s more of a guide to what’s possible within the role. If you’re passionate, ready to work hard, and think the role feels right for you, we’d love to hear from you. #hybridrole #LI-Hybrid #LI-OT1
Meet the Team
Being an in-person business
We're at our best when we're close to customers, and for many of us at M&S, that means working in store every day.
To stay close to customers, our support teams are in the office three days a week as we believe that skills are developed through collaboration, and that spending time together makes us more creative and connected. It also means we can solve problems as soon as they arise, learn and grow as a team, build trust, and get closer to our colleagues.
End of quote slider carousel
Make Your Mark
Upcoming projects
Take part in our M&S Digital & Tech team days. Grow your digital and data skills through our BEAM Academy. Or challenge yourself at one of our business-wide hackathons. We also partner with Women in Data, Databricks and Cajigo to increase opportunities for women in digital and data.
Opportunities to be heard
Your voice and your ideas matter here. Our 8 colleague networks are places to find support, listen to each other and encourage debate. You can pitch ideas ‘Straight to Stuart’, our CEO, or get involved in our BIG (Business involvement Group).
End of slider Colleague Networks carousel
Benefits
How to Apply
Here’s what to expect at each stage of the application process. This can change depending on the role you’ve applied to. If you need any reasonable adjustments made at any stage, let us know and we can help.
Send us your application
Fill in our short application form and hit submit.
Online assessment
Depending on the role you are applying for, you may be invited to do an assessment. Your Talent Acquisition Partner will guide and inform you along the way.
Interview
We'll invite you to join us for an interview. This could be remote or in person. Here, we'll ask you some role based technical questions and examine the behaviours we're looking for.
Decision
After we’ve made our decision, we’ll be in touch. If you’ve been successful, we’ll officially invite you to join the team and let you know the next steps.
TPRM Principal Security Consultant
- Team
- Digital & Tech
- Store
- London Support Office
- Location
- London, Greater London
- Contract type
- Permanent
- Position type
- Full Time
- Salary
- Competitive + Benefits
- Closing date: 19th May 2026
- Reference: 117791