GRC Cyber Security Consultant

About the role

We are looking for a full‑time GRC / Information Security Consultant to join a rapidly expanding business. The role is primarily remote but requires own transport for on‑site consultancy visits, working Monday‑Friday 8:30 am‑5:30 pm.

Key responsibilities

• Help clients strengthen information security governance and manage cyber and information risks.
• Support the achievement and maintenance of compliance with standards such as ISO/IEC 27001, Cyber Assessment Framework (CAF), Cyber Essentials, SOC‑2, PCI‑DSS, GDPR and other regulatory requirements.
• Engage senior stakeholders, communicate risk and control findings, and translate technical requirements into practical business actions.
• Produce consultancy reports, risk summaries and management recommendations.

Required profile

• Minimum three years’ experience in information security, GRC, IT risk, audit, compliance or cyber security.
• Strong working knowledge of ISO/IEC 27001 and experience delivering gap analyses, internal audits, readiness reviews or certification support.
• Proven ability to identify, assess and communicate information security risks and remediation actions.
• Excellent written and verbal communication, stakeholder management and organisational skills.
• Relevant professional certification (ISO/IEC 27001 Lead Auditor/Implementer, CISM, CISSP, CRISC or equivalent) and a full UK driving licence.

Required skills

• ISO/IEC 27001
• ISO/IEC 27001 Lead Auditor / Lead Implementer
• CISM
• CISSP
• CRISC
• Cyber Essentials / Cyber Essentials Plus
• Cyber Assessment Framework (CAF)
• SOC‑2
• PCI‑DSS
• GDPR

What we offer

• Competitive salary £45,000‑£55,000 per year, dependent on experience.
• Remote working with occasional on‑site visits.
• Opportunity to work with a fast‑growing, dynamic team.