Information Risk Management Reviews

Immature consultancy approach, heavily relient on the individual. Professional training is available but limited to QSA and CHECK, and be prepred to pay a tapering proportion if you exit early. The business is transforming from simple vulnerability/penetration/technical security testing boutique to small mid player PCI DSS niche consultancy, so collateral and back end process/support sytems are still in infancy or non existent. Sales is king, and hand to mouth selling is unavoidable, including services outside of core competency - placing the professional under significant pressure to perform.

Horrifically negative culture which is encouraged and driven by Senior Management You cannot have a good work/life balance if you work here - you’re expected to check your emails on holiday No training opportunities at all and no equal standards for training either - unless you threaten to leave and you’ll be given a token trip to Vegas, but asked not to tell anyone else The CEO is a misogynistic bully The Software team are totally isolated from the rest of the business The Sales team have some of the worst ethics I have ever encountered - when they’re not being handed deals on a plate and pretending they scoped and won the work themselves, they are busy causing rows with every other department and throwing people’s belongings out the window The scoping process is a total joke from start to finish, the lead scoper knows next to nothing and as a result jobs are underscoped and consultants are overworked