GRC Consultant

Overview

As a GRC Consultant, you will support government, defence and commercial clients by assessing security controls, identifying risks and helping them meet compliance requirements. You will work directly with clients to deliver governance, risk and compliance services across sectors. You’ll review evidence, document findings and provide actionable remediation recommendations, contributing to multiple client engagements. This role blends practical auditing and security assessment with advisory delivery in a growing cyber security consultancy.

Responsibilities

• Deliver security risk assessments, compliance reviews and control assessments
• Assess client security controls against recognised standards and frameworks
• Identify gaps, evaluate risks and recommend remediation
• Support clients with governance, risk management and compliance requirements
• Review evidence, document findings and provide actionable recommendations
• Contribute to client engagements and deliverables across sectors

Key requirements

• Experience in cyber security, GRC or information assurance consultancy
• Practical auditing, compliance review or security control assessment experience
• Knowledge of ISO 27001 and/or NIST CSF
• Understanding of risk assessments, evidence gathering and reporting findings
• Confident communicating with clients and working collaboratively
• Government or defence sector experience advantageous
• Active UK SC security clearance desirable

• Confident communication with clients
• Collaborative working style
• ISO 27001
• NIST CSF
• Security control assessment
• Risk assessments

…