GRC Consultant

You will work across multiple client engagements supporting organisations with governance, risk and compliance activities. This will involve advising on security frameworks, delivering maturity assessments and supporting organisations as they align to recognised cyber security standards., * Supporting client engagements focused on governance, risk and compliance

• Advising organisations on cyber security frameworks and standards
• Supporting and delivering ISO 27001 aligned engagements
• Conducting cyber security maturity assessments
• Supporting clients with security governance, resilience and business continuity initiatives
• Working closely with senior consultants and principals across multiple projects

• Experience working in cyber security governance, risk and compliance
• Experience working with frameworks such as ISO 27001 and/or NIST CSF
• Experience working in a cyber security consultancy or advisory environment is highly desirable
• Experience supporting security maturity assessments or compliance programmes
• Strong stakeholder engagement and client-facing communication skills

Desirable Certifications

• ISO 27001 Lead Auditor or Lead Implementer
• CISSP
• CISM, * Governance, Risk & Compliance
• Health and Safety Principles
• Information Security Management
• International Standards
• ISO Standards (Various)
• Key Management (System)
• Operating System Security
• Risk Analysis
• Risk Management (Process)
• Vulnerability Assessment

What This Role Offers

• Exposure to a wide range of industries including commercial, defence, government and critical infrastructure
• The opportunity to develop consulting skills across multiple cyber security frameworks
• A collaborative consulting environment with experienced security professionals
• Clear opportunities for professional development and progression within the GRC consulting space

This role is well suited to someone looking to take the next step in their cyber security consulting career and gain exposure to a broad range of governance, risk and compliance engagements.