GRC Consultant

About the role

We are seeking an ambitious GRC Consultant to join a specialist cyber security and compliance consultancy. The role is remote‑first, based in the North West of the UK, and involves delivering ISO 27001 and Cyber Essentials projects for a range of clients.

Key responsibilities

• Conduct risk assessments, gap analyses and maturity assessments.
• Deliver client projects focused on ISO 27001 and Cyber Essentials implementation.
• Draft policies, procedures and other compliance documentation.
• Prepare client reports, research papers and industry insight articles.
• Support sales and marketing activities, including proposals, CRM updates and case‑study creation.

Required profile

• 2+ years of experience in compliance, internal audit or a consultancy environment.
• Demonstrated exposure to ISO 27001 and Cyber Essentials.
• Strong attention to detail and excellent written and verbal communication.
• Ability to work independently and remotely.

Required skills

• ISO 27001
• Cyber Essentials
• Risk assessment
• Internal audit

What we offer

• Structured mentorship from senior consultants.
• Clear career progression as the business grows.
• Support for obtaining relevant industry certifications.
• Flexible, remote‑first working environment.