5x GRC & Security Assurance Consultants

iO Associates; England; Remote; GBP 50,000 - 70,000; Full time

Job summary

A specialist cyber security consultancy in the UK is seeking up to 5 GRC & Security Assurance Consultants to provide consultancy services across various sectors. Candidates should have a strong experience in cyber security and would ideally possess SC clearance (DV preferred). The role involves remote working with necessary travel, focusing on governance, risk management, and compliance frameworks.

Qualifications

• Proven experience in GRC and/or Security Assurance roles.
• Strong understanding of cyber security principles, risk management, and compliance frameworks.
• SC clearance (minimum) - DV clearance preferred.
• Experience in secure environments such as defence or government.

Responsibilities

• Deliver GRC and Security Assurance consultancy services.
• Support risk assessments, assurance reviews, and compliance activities.
• Advise clients on security controls and policies.
• Work collaboratively with technical teams and stakeholders.
• Ensure documentation and risk treatments are clear and actionable.

Skills

GRC and Security Assurance Experience

Cyber Security Principles Knowledge

Risk Management

Compliance Frameworks Understanding

Consulting Experience

Education

CISSP

CISM

CRISC

ISO 27001 Lead Implementer/Auditor

Job description

5x GRC & Security Assurance Consultants - £50,000 - £70,000
(Remote with UK-Wide Travel as Required)

Our client, a specialist cyber security consultancy, is seeking up to 5 GRC & Security Assurance Consultants to support a range of client engagements across government and critical infrastructure sectors. These roles involve a blend of Governance, Risk & Compliance and hands-on Security Assurance, ideal for individuals with flexible working styles and strong cyber credentials.

Key Responsibilities:
* Deliver GRC and Security Assurance consultancy services to public and private sector clients
* Support risk assessments, assurance reviews, and compliance activities aligned to ISO 27001, NIST, and/or CAF frameworks
* Advise clients on security controls, policies, and accreditation processes
* Work collaboratively with architects, technical teams, and senior stakeholders
* Ensure documentation and risk treatments are clear, actionable, and aligned to business needs
* Contribute to the development of internal consulting capability and knowledge sharing

Requirements:
* Proven experience in GRC and/or Security Assurance roles
* Strong understanding of cyber security principles, risk management, and compliance frameworks
* SC clearance (minimum) - DV clearance preferred
* Relevant qualifications would be beneficial (e.g. CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor)
* Experience in secure environments such as defence, government, or regulated sectors
* Consulting experience and the ability to work independently across multiple client sites
* Willingness to travel to client sites as required (hybrid/remote working when possible)

If you're a flexible and experienced cyber security professional looking to work across diverse, impactful engagements, we'd love to hear from you.