Cyber Security Governance, Risk and Compliance Consultant Job at Accenture (Dublin)

Senior Cyber Risk & Compliance Consultant

Location

United Kingdom , Glasgow or Reading

Salary:

Not provided

FSP

Expiration Date

Until further notice

Requirements

Extensive experience of designing, leading and delivering cyber governance, risk and assurance outcomes, with a proven track record of successfully leading GRC and security assurance initiatives
Strong knowledge of recognised cyber security frameworks and standards, including ISO/IEC 27001, NIS Directives, NIST, and UK Government Functional Standards, with demonstrable experience aligning security controls to MOD requirements such as DEFSTAN 05-138, JSP 440, JSP 604 and Defence Cyber Resilience policies
Experienced in applying UK Government security and assurance frameworks, including GovAssure, the Cyber Assessment Framework (CAF), Defence Cyber Certification (DCC) and Government Standard (GovS) 007
Confident communicator, able to clearly articulate cyber risk and the value of security investment to senior leaders, while mentoring and guiding teams to deliver high-quality outcomes
Hold a recognised ISO/IEC 27001 Lead Implementer or Lead Auditor certification, alongside other relevant academic or professional qualifications (e.g. MSc in Cyber Security or related specialism, CISM, CISSP, PCIRM)
Hold, or be working towards, Principal or Chartered Cyber Security Professional (ChCSP) status
Eligible to work in the UK and able to obtain and maintain UK security clearances

Job Responsibility

Lead cyber governance, risk and compliance engagements, with primary focus on achieving certification or standards alignment to ISO27001, including gap assessments, strategy and planning, implementation support, audit preparation and pre and post certification support
Engage with clients to understand their wider threat landscape and business context, conducting risk and compliance assessments against other recognised frameworks and standards (e.g. NIST, SOC 2, DefStan)
Design, review and advise on the implementation and adoption of information security policies, standards, procedures and frameworks
Lead cyber and third-party risk assessments, evaluate supplier security posture, and provide risk-based recommendations for supplier selection and oversight
Identify control gaps, document findings, and track remediation activities to support assurance and audit outcomes
Produce clear, concise risk and compliance reports for executive and C-suite stakeholders, including prioritised mitigation strategies and improvement roadmaps
Contribute to thought leadership and continuous improvement by staying current with industry developments and sharing knowledge across the cyber security community
Demonstrate strong communication, stakeholder management and mentoring skills, upholding the highest standards of integrity and professionalism

What we offer

Collaborative and supportive environment
Tools and opportunity to do work you can be proud of
Chance to work alongside some of the best people in the industry
Hybrid working
Industry leading coaching and mentoring

Fulltime

Security Compliance Consultant - VOIS

We are seeking a Security Compliance Consultant (CHARM) to act as a senior autho...

Location

India , Pune

Salary:

Not provided

Vodafone

Expiration Date

Until further notice

Requirements

An experienced professional with 12+ years in Information Security Governance, Risk and Compliance (GRC), ideally within complex, multi-market environments
Highly knowledgeable in security governance models, control frameworks, and end-to-end compliance lifecycle management
Experienced in leading audit and assurance engagements, including regulatory and internal reviews
Skilled in stakeholder collaboration across diverse technical and business functions
Knowledgeable in IT service management principles (ITIL) and their integration with security controls
Technically informed across infrastructure, operating systems, middleware, and cloud environments from a governance perspective
Able to translate high-level security requirements into actionable compliance outcomes
Detail-oriented, organised, and capable of managing multiple priorities simultaneously
A confident communicator, able to engage effectively with senior stakeholders
Fluent in spoken and written English

Job Responsibility

Ensure compliance with Vodafone Cyber Security Baseline requirements and the CHARM control framework, providing clear interpretation of policy intent and applicability
Drive lifecycle management of security controls, including hardening, patching, and vulnerability management across IT, cloud, and network domains
Oversee and enhance control assurance practices, including assessment methodologies, effectiveness reviews, and evidence validation
Contribute to internal and external audits (e.g. Internal Audit, Group Cyber Assurance), supporting evidence preparation, remediation tracking, and clarifications
Provide governance input for systems in development or undergoing change, ensuring alignment with baseline security requirements
Develop, maintain, and present compliance dashboards, metrics, and trend analysis to support risk-based decision-making
Participate in cyber risk assessments, identifying risks, defining mitigation actions, and tracking progress
Collaborate with stakeholders across Technology, Architecture, and Service Ownership to address control gaps and prioritise remediation
Improve compliance maturity through standardisation, automation, and continuous process optimisation

What we offer

Opportunity to influence enterprise-wide cyber security strategy and compliance maturity
Exposure to global audit, assurance, and regulatory environments
Collaboration with senior stakeholders across technology and security domains
Involvement in large-scale transformation, automation, and standardisation initiatives
A role that blends strategic thinking with practical execution in cyber risk and compliance

Cyber Security Consultant - Third Party Auditor

Cyber Security Consultant - Third-Party Auditor - £500-£550 per day - Inside IR3...

Location

United Kingdom , Gloucester

Salary:

Not provided

Morson Talent

Expiration Date

Until further notice

Requirements

Practical working knowledge of international standards and information security frameworks (ISO27001, ISO27017, GDPR, Cyber Essentials Plus), including auditing control design and operating effectiveness against these frameworks
Proven experience conducting end-to-end audits or formal assurance reviews within a regulated environment (planning, walkthroughs, control testing, evidence validation, reporting and follow-up)
Experience assessing third-party or supplier environments
Understanding of HMG Security Policy Framework and NCSC/CPNI guidance and how to test compliance through audit evidence
Awareness of information security threats, risks and common control failures
Experience applying risk assessment methodologies (ISO27005, NIST, IRAM2) to support audit scoping and risk-rating of findings
Strong documentation and report writing skills - able to produce structured audit reports containing observations, root cause analysis and defensible conclusions
Ability to challenge stakeholders constructively and obtain sufficient appropriate audit evidence
Excellent written and verbal communication skills
Strong analytical mindset, professional scepticism, attention to detail and persistence

Job Responsibility

Plan and scope third-party audits based on risk, regulatory requirements and contractual obligations
Conduct audit walkthroughs and structured control interviews
Test design and operating effectiveness of security controls
Perform sampling and traceability testing across processes and systems
Obtain, validate and challenge audit evidence (e.g. logs, system extracts, configurations, tickets, approvals)
Assess compliance against ISO27001, ISO27017, GDPR, Cyber Essentials Plus and relevant sector frameworks
Identify control weaknesses and determine root causes
Form clear, risk-rated findings with practical recommendations
Produce structured audit reports suitable for senior governance review and regulatory scrutiny
Track and verify remediation actions through to closure

Fulltime

Cyber Security Governance Specialist

Are you looking for a new challenge? Fancy helping us shape the future of motor ...

Location

Spain , Madrid

Salary:

Not provided

Prima

Expiration Date

Until further notice

Requirements

2+ years of experience in cybersecurity governance, risk, compliance, or security assurance roles, either in-house or within a consulting environment, preferably in regulated or complex organisational contexts
Proven knowledge of major cybersecurity frameworks (e.g., ISO/IEC 27001, NIST CSF) and regulatory landscapes (GDPR, DORA)
Proven experience in developing policies, conducting gap analyses, audit activities and defining remediation plans
Familiarity with Business Continuity Management (BCM) and IT Disaster Recovery (DR) concepts, including participation in Business Impact Analyses (BIA), critical asset dependency mapping, definition of RTOs and RPOs and Disaster Recovery tests or exercises
Strong English communication skills, with the ability to collaborate effectively with multidisciplinary teams

Job Responsibility

Contribute to the definition, implementation, and continuous improvement of the cybersecurity governance framework, including policies, procedures, and controls aligned with international standards and regulatory requirements (e.g. ISO/IEC 27001, NIST CSF, COBIT, GDPR, DORA)
Perform security audits, gap analyses, and cyber risk assessments, identifying remediation actions and supporting their execution with relevant stakeholders
Participate in third-party security and resilience assessments
Support Business Continuity Management (BCM) and IT Disaster Recovery (DR) activities, contributing to Business Impact Analyses (BIA) activities, critical asset dependency mapping, the definition and maintenance of Recovery Time and Recovery Point Objectives (RTOs/RPOs) and participation in business continuity and IT Disaster Recovery tests and exercises (e.g. tabletop simulations)
Support cybersecurity awareness initiatives, training programs, and onboarding activities related to security topics

What we offer

Work from home, the office or a mix of both
work from anywhere for up to 30 days a year
access to learning resources, mentorship and a growth plan tailored to you
private healthcare, gym discounts, wellbeing programs and mental health support

Fulltime

Cyber Security Governance Specialist

Are you looking for a new challenge? Fancy helping us shape the future of motor ...

Location

Italy , Milan

Salary:

Not provided

Prima

Expiration Date

Until further notice

Requirements

2+ years of experience in cybersecurity governance, risk, compliance, or security assurance roles, either in-house or within a consulting environment, preferably in regulated or complex organisational contexts
Proven knowledge of major cybersecurity frameworks (e.g., ISO/IEC 27001, NIST CSF) and regulatory landscapes (GDPR, DORA)
Proven experience in developing policies, conducting gap analyses, audit activities and defining remediation plans
Familiarity with Business Continuity Management (BCM) and IT Disaster Recovery (DR) concepts, including participation in Business Impact Analyses (BIA), critical asset dependency mapping, definition of RTOs and RPOs and Disaster Recovery tests or exercises
Strong English communication skills, with the ability to collaborate effectively with multidisciplinary teams

Job Responsibility

Contribute to the definition, implementation, and continuous improvement of the cybersecurity governance framework, including policies, procedures, and controls aligned with international standards and regulatory requirements (e.g. ISO/IEC 27001, NIST CSF, COBIT, GDPR, DORA)
Perform security audits, gap analyses, and cyber risk assessments, identifying remediation actions and supporting their execution with relevant stakeholders
Participate in third-party security and resilience assessments
Support Business Continuity Management (BCM) and IT Disaster Recovery (DR) activities, contributing to Business Impact Analyses (BIA) activities, critical asset dependency mapping, the definition and maintenance of Recovery Time and Recovery Point Objectives (RTOs/RPOs) and participation in business continuity and IT Disaster Recovery tests and exercises (e.g. tabletop simulations)
Support cybersecurity awareness initiatives, training programs, and onboarding activities related to security topics

What we offer

Work Your Way: Enjoy full flexibility – work from home, the office or a mix of both
Grow with us: We may move fast at Prima, but we move together. Get access to learning resources, mentorship and a growth plan tailored to you
Thrive and perform: Your best work begins when you feel your best. Enjoy private healthcare, gym discounts, wellbeing programs and mental health support

Fulltime

L2 Cyber Security Advisor

As an Associate Cyber Security Advisor in Bengaluru you will report to the Team ...

Location

India , Bengaluru

Salary:

Not provided

Randstad

Expiration Date

August 14, 2026

Requirements

Relevant Cyber Security or Computer Science tertiary degree (or equivalent qualification)
Desirable: Industry recognised certifications relevant to cyber security, architecture, governance risk and compliance, audit, etc. (SABSA, TOGAF, CISSP, CCSP, CISM, CISA, Microsoft/AWS cloud certifications).
4-6 years+ combined experience in cyber security, solution architecture, systems engineering, or related cyber security roles.
Strong written and verbal communication skills, with the ability to explain technical concepts in a clear and structured way.
Ability to collaborate effectively with engineers, project teams, business stakeholders, and senior architects.
Strong requirements-gathering skills (supported by more senior team members).
Ability to participate in discussions, document design decisions, and communicate risks or issues when identified.
Foundational understanding of industry cyber security frameworks such as ISO 27001 and NIST CSF.
Foundational understanding of key security concepts such as Zero Trust, RBAC, least privilege, network segmentation, and secure egress principles.
Exposure to security architecture activities such as requirements analysis, design reviews, threat modelling, and participating in secure-by-design processes, IT change management, and design governance processes.

Job Responsibility

Engage early with projects to ensure secure-by-design principles are embedded and risks are managed in accordance with Woodside's risk management processes.
Provide guidance to new technology initiatives, ensuring threats and risks are understood, security patterns are applied, and gaps are identified and transparently managed.
Champion cyber security to inform and influence service line managers and stakeholders to understand, own and manage cyber threats applicable to their platforms.
Support delivery and continuous improvement of global Cyber Risk and Compliance capabilities (People, Process, and Technology) - e.g. Governance forums, processes, and reporting linked to relevant activities
Cyber security risk and compliance assessment processes
Ongoing cyber assurance planning, scoping and coordination
Advisory and internal consulting relating to implementing standards and requirements
Security architecture patterns and technical guidance supporting standards
Supplier cyber risk management and assurance
Cyber security control design and operating standards

What we offer

Commitment to your ongoing development, including on the job opportunities and formal programs
Inclusive parental leave entitlements for both parents
Values led culture
Flexible work options
Generous annual leave, sick leave and casual leave
Cultural and religious leave with flexible public holiday opportunities
A competitive remuneration package featuring performance based incentives with uncapped Employer Provident Fund

Sr. Manager, Cyber Risk & Analysis | Retail Bank Premium Products & Experiences

As a Sr. Manager, Cyber Risk & Analysis | Retail Bank Premium Products & Experie...

Location

United States , McLean, Virginia | Richmond, Virginia

Salary:

182500.00 - 229100.00 USD / Year

Capital One

Expiration Date

Until further notice

Requirements

At least 5 years of experience in Cybersecurity, Technology, Consulting, Audit, or Risk Management
At least 3 years of People Management experience
Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), or Certified Information Security Manager (CISM) certification
Certified AI Governance Professional (AIGP) certification or other relevant AI risk management certifications
Experience in a Large Financial Services or consulting organization

Job Responsibility

Act as the end-to-end tech and cyber risk partner for senior technology executives
Design and implement AI applications, agents, and automation workflows to enhance risk monitoring efficiency
Rationalize tech and cyber controls to align with technology processes
Execute large-scale architecture transformation programs and technology integrations
Collaborate with Cyber, Audit, and Risk functions to ensure coverage of shared controls
Serve as the primary point of contact for audit and compliance engagements

What we offer

Performance based incentive compensation
Cash bonus(es)
Long term incentives (LTI)
Health, financial and other benefits

Fulltime

Cyber Security Scrum Master/Project Manager

NTT DATA strives to hire exceptional, innovative and passionate individuals who ...

Location

Canada , Toronto

Salary:

Not provided

NTT DATA

Expiration Date

Until further notice

Requirements

Minimum 7+ years of experience as a Project Manager or Scrum Master
Minimum 3+ years of experience in cybersecurity program delivery
Proven experience managing large-scale cybersecurity initiatives (IAM, Zero Trust, SOC modernization, Cloud Security)
Strong experience with Agile frameworks (Scrum, SAFe, Kanban)
Hands-on experience with Jira and Jira Align for program tracking and reporting
Solid understanding of cybersecurity frameworks (NIST CSF, CIS Controls, ISO 27001)
Experience with value stream management and delivering outcomes in scaled Agile environments
Strong communication, leadership, and stakeholder management skills
Bachelor’s degree in Computer Science, Information Security, or equivalent work experience
Certifications such as PMP, SAFe SPC, CSM, CISSP, or CISM

Job Responsibility

Lead and manage cybersecurity programs using Agile methodologies (Scrum, SAFe, Kanban)
Oversee cross-functional teams to deliver security initiatives aligned with enterprise goals and frameworks (e.g., NIST, ISO 27001)
Utilize Jira and Jira Align to plan, track, and report progress across multiple agile teams and release trains
Drive value stream identification, mapping, and continuous improvement across cybersecurity initiatives
Collaborate with stakeholders, product owners, and technical leads to prioritize backlogs and ensure risk-based delivery outcomes
Ensure compliance with internal security policies and external regulatory requirements (e.g., HIPAA, PCI-DSS, SOX)
Report program status, KPIs, and risk posture to executive leadership and steering committees
Implement Agile best practices and Lean Portfolio Management (LPM) principles within cybersecurity programs
Manage vendor relationships and coordinate third-party risk management activities
Develop and maintain a forward-looking information security roadmap aligned with business strategy

Fulltime

Select Country

Cyber Security Governance, Risk and Compliance Consultant

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?