GRC Consultant

Role & responsibilities

• Conducting cyber and information security risk assessments
• Developing and maintaining security governance frameworks
• Supporting ISO 27001, ISO 22301 and other certification programmes
• Assessing security controls against regulatory and industry requirements
• Maintaining risk registers and supporting risk treatment activities
• Developing information security policies, standards and procedures
• Supporting internal and external security audits
• Conducting third-party and supplier security risk assessments
• Providing guidance on regulatory and compliance requirements
• Supporting operational resilience and business continuity activities
• Producing risk, assurance and compliance reporting for senior stakeholders
• Working with technology and security teams to improve control effectiveness

Preferred candidate profile

• Governance, Risk and Compliance
• Cyber Security Governance
• Information Security
• Cyber Risk Management
• Security Assurance
• Regulatory Compliance
• ISO 27001
• ISO 22301
• ISO 20001
• NIST Cybersecurity Framework
• Cyber Essentials and Cyber Essentials Plus
• PCI DSS
• GDPR
• Risk Assessments
• Security Controls
• Policy Development
• Audit and Assurance
• Third-Party Risk Management
• Operational Resilience
• Business Continuity
• Security Frameworks
• Stakeholder Management