Role: Senior GRC Consultant
Location: United Kingdom
Salary: £60,000+
A reputable consultancy are seeking a Senior GRC Consultant to join a dedicated GRC team. This organisation specialise in providing a range of cyber security services including GRC services, pen testing and managed services.
This organisation are seeking a passionate and enthusiastic GRC professional who enjoys working with multiple clients on GRC projects.
Key Responsibilities:
- Conduct and support assessments and audits to ensure adherence to ISO27001, NIST CSF, and other relevant frameworks, while identifying areas for enhancement and providing clients with an analysis of their compliance status.
- Develop and implement incident response plans tailored to specific client requirements.
- Offer general consulting services, providing expert guidance on governance, risk, and compliance matters.
- Prepare comprehensive reports and recommendations aimed at improving clients' security posture.
- Build and maintain strong client relationships.
- Assist clients in understanding and complying with NCSC CAF, NIS2, and DORA regulations when applicable.
About you:
- 4+ years of experience in a similar GRC role (including policy/documentation reviews & auditing).
- Proven track record in successfully maintaining information security standards (ISO27001, NIST, etc.).
- Excellent written and oral communication skills for liaising with external stakeholders conveying complex compliance information.
- Ability to analyse data, identify key issues, and develop practical solutions.
- Detailed orientated and able to work to tight deadlines.
Locke & McCloud are the UK’s leading cyber security & information security staffing company – through having a sole focus on the cyber & information security space we have been able to foster solid relationships with some of the UK’s most exciting cyber security consultancies & end users. Our focus on the information security space allows us to be able to help you find the most exciting opportunities in the cyber security market. If you are on the lookout for your next cyber security or information security role, please get in touch!