Overview
The Cyber/GRC Consultant will provide immediate support to a leading technology organization in enhancing its Governance, Risk, and Compliance (GRC) frameworks. This predominantly remote role requires the consultant to assess the existing cyber security position, identify risks, and contribute to the development of the UK's cyber governance strategy. Working closely with various stakeholders, the consultant will help translate regulatory requirements into practical actions to strengthen the organization's cyber security posture.
Responsibilities
- Review the organization's existing cyber security position.
- Identify key risks and gaps in current governance frameworks.
- Drive the UK cyber governance and security strategy forward.
- Conduct cyber risk assessments and gap analyses.
- Translate regulatory requirements into actionable governance improvements.
- Provide recommendations for enhancing the cyber security framework.
- Engage confidently with stakeholders to facilitate improvements.
- Support the implementation of cyber security regulations and standards.
Requirements
- Strong background in Cyber Security GRC.
- Experience with recognized cyber security standards and frameworks.
- In-depth knowledge of ISO security standards and NCSC guidance.
- Understanding of cyber regulation and compliance frameworks.
- Ability to analyze security information and deliver clear recommendations.
- Experience in stakeholder engagement and management.
- Capacity to deliver quickly and effectively in a fast-paced environment.
- Proven track record of driving cyber governance improvements.