> Markdown version of [/jobs/ext/2871370-lead-cybersecurity-grc-consultant](https://www.wearedevelopers.com/jobs/ext/2871370-lead-cybersecurity-grc-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Cybersecurity GRC Consultant - **Company:** Jacobs - **Location:** Bristol, UK - **Experience:** Expert - **Salary:** £53,756.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Microsoft Azure, Cyber Security, Operational Systems - **Published:** September 13, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5881103440 ## About the Role This is a hands-on consultancy role requiring a practical approach, strong stakeholder engagement skills and the ability to drive outcomes through influence rather than direct authority. We're looking for an experienced Cyber GRC professional who can operate independently and confidently within a complex environment. You'll bring: * Proven experience delivering end-to-end cyber security or IT security governance, risk and compliance activities. * Strong experience conducting and managing cyber risk assessments, remediation activities and senior-level risk reporting. * Experience creating and implementing cyber policies, standards, frameworks and governance processes. * Knowledge of recognised security and risk frameworks such as ISO 27001, NIST, NCSC CAF, Government Security Standards, or equivalent. * The ability to communicate complex cyber risks clearly to both technical and non-technical audiences. * A proactive, delivery-focused mindset with the confidence to challenge constructively, remove barriers and work autonomously. Experience with Microsoft Azure, Microsoft 365, operational technology (OT) environments, government projects, or critical national infrastructure would be beneficial. ## Description Lead Cybersecurity GRC Consultant Join us at a pivotal moment as we strengthen cyber governance, risk and compliance across one of the UK's most significant infrastructure programmes. This is an opportunity to shape and lead a modern Cyber GRC capability from the ground up. You'll play a critical role in ensuring cyber risks are effectively understood, managed and communicated, helping senior leaders make informed decisions that support successful project delivery. As the dedicated Cyber GRC professional supporting this team and programme, you'll have the autonomy to create meaningful change, influence stakeholders across multiple disciplines, and establish scalable approaches that could be adopted more broadly across Jacobs. For the right person, this role offers the chance to make a visible impact today while helping shape the future direction of Cyber GRC across major programmes. What you'll do As Lead Cyber Security GRC Consultant, you'll be responsible for developing and embedding effective governance, risk and compliance practices across a complex project environment. Working closely with cyber, IT, digital, delivery and project teams, you'll ensure cyber risks are identified, assessed and managed effectively while building stronger links between cyber risk and wider programme risk management processes. You'll lead the development and implementation of policies, standards, controls and assurance activities, helping to transform existing manual processes into streamlined, digitally enabled ways of working. You'll also provide clear, evidence-based reporting that translates technical and cyber risks into meaningful insights for senior stakeholders and decision-makers. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Fake or News: Translating Dog Barks, Notepad Gets an Upgrade and Michelin-Star Robots - Paul Tregoing](https://www.wearedevelopers.com/videos/1802-fake-or-news-translating-dog-barks-notepad-gets-an-upgrade-and-michelin-star-robots-paul-tregoing) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)