Interim Cybersecurity Auditor

About the role

Grant Thornton is seeking an experienced Interim Cybersecurity Auditor to join its Business Risk Services team on short‑ to medium‑term contracts. You will work with a variety of client organisations, helping them meet UK cybersecurity legislation and industry standards while delivering clear, actionable audit outcomes.

Key responsibilities

• Deliver comprehensive cybersecurity audits aligned with UK regulations and standards.
• Assess client compliance with UK GDPR, Data Protection Act 2018, NIS Regulations, ISO/IEC 27001, Cyber Essentials/Plus and the Telecommunications (Security) Act 2021.
• Identify risks, provide actionable recommendations, and support remediation planning.
• Produce clear audit reports and present findings to senior client stakeholders.
• Stay up‑to‑date with evolving UK cybersecurity legislation and best practices.

Required profile

• Proven experience in cybersecurity auditing, preferably within a consultancy or client‑facing environment.
• Strong knowledge of UK legal frameworks and compliance standards.
• Relevant certifications such as CISA, CISSP or ISO 27001 Lead Auditor.
• Excellent written and verbal communication skills for stakeholder engagement.

Required skills

• UK GDPR
• Data Protection Act 2018
• NIS Regulations
• ISO/IEC 27001
• Cyber Essentials
• Cyber Essentials Plus
• Telecommunications (Security) Act 2021
• CISA certification
• CISSP certification
• ISO 27001 Lead Auditor certification

What we offer

• Flexible contract arrangements (limited company or inside IR35).
• Opportunity to work on diverse projects across multiple industries.
• Access to Grant Thornton’s global network and resources.