Security Consultant GRC

• Governance: directs, oversee, designs, implements or operates within the set of multi-disciplinary structures, policies, procedures, processes and controls implemented to manage cyber and information security at an enterprise level
• Policy and Procedure Management: directs, develops or maintains organisational cyber and information security policies, standards and processes, using recognised standards (e.g. the ISO/ IEC 27000 family, NIST CSF) where appropriate
• Risk Management: develops cyber and information security risk management strategies and controls, considering business needs, balancing technical, physical, procedural and personnel controls
• Data Privacy: directs, oversee, designs, implements, contributes to, or operates within the set of multi-disciplinary structures, policies, procedures, processes and controls to manage the protection of personal data, privacy and human rights
• Internal Controls Oversight: Establish and monitor internal controls to safeguard data and assets, conducting regular reviews and audits
• Stakeholder Engagement: Serve as a liaison, offering guidance and support to internal teams, external partners, and regulatory authorities
• Continuous Improvement: Identify opportunities for process enhancements, driving initiatives to bolster governance framework and security posture

• 5+ years' varied experience in information security, data protection, risk management, enterprise IT, legal or (relevant) compliance roles
• Strong understanding of security governance, risk, and compliance frameworks such as ISO 27001, NIST 800-53 / CSF, NIS/NIS2, DORA, UK CNI / OT / IIOT compliance
• Hands-on experience building credibility with external stakeholders, including enterprise clients, critical system vendors, certification auditors and regulatory bodies
• Proven leadership skills with the ability to guide and mentor teams, as well as influence and collaborate with senior stakeholders in a similar GRC, security, or risk management role
• A hands-on approach with the ability to balance strategic oversight with direct involvement in security tasks
• Excellent communication skills, with the ability to present complex information clearly and effectively to non-technical stakeholders
• The ability to explain complex topics to a diverse range of audiences
• Strong attention to detail and the ability to deliver high quality work
• A valid right to work in the UK
• Eligible to obtain UK SC clearance

CISA, CRISC, CISM or CISSP certification are advantageous

• Tailored benefits that support your physical, emotional, and financial wellbeing
• Continuous growth and development opportunities
• Flexible work options