Compliance & Information Security Consultant

DXR Cyber; Doncaster; Hybrid; GBP 50,000 - 70,000; Full time

Benefits offered by this job

Salary Sacrifice pension scheme

Private Medical Insurance

Buy/sell holiday scheme

Birthday leave paid

33 days holiday Inc bank holidays

Cycle-to-work scheme

Employee Assistance Programme

Government Childcare Scheme

Job summary

DXR Cyber is seeking an Information Security Consultant to drive our GRC Team’s service offering. The ideal candidate will have ISO 27001 implementor/auditor experience and familiarity with NIST and CAF standards.

You will support the operation, maintenance and maturity of the Information Security program for DXR Cyber and our external clients, including leading audits and delivering security trainings. Hybrid role based from Doncaster with some travel.

Qualifications

• Extensive Governance, Risk and Compliance (GRC) experience with InfoSec operations
• Experience contributing to a Business Management System (BMS) certified to ISO standards
• Knowledge of Cyber Essentials Plus, GDPR (UK/EU) and Data Protection Act 2018
• Ability to work autonomously and in a team, with strong communication skills
• Eligible for Security Clearance and UK driving licence

Responsibilities

• Protect information assets and technologies across DXR Cyber and client environments
• Contribute to security audits including ISO 27001, ISO 27701, ISO 9001, NIST-CSF, IASME Governance
• Conduct and document internal audits for DXR Cyber and clients
• Hands-on experience implementing and auditing ISO frameworks
• Deliver security awareness training and engage in public speaking
• Build strong relationships with internal and external stakeholders
• Manage Third Party Risk Management (TPRM) and vendor security reviews
• Assist Sales in scoping engagements and delivering value
• Support business continuity and disaster recovery planning

Skills

Time management

Interpersonal skills

Problem solving

Public speaking

UK Driving Licence

Autonomy

Job description

Primary Responsibilities:

We are seeking an Information Security Consultant to help drive our GRC Team’s service offering. The ideal candidate will have experience working as a ISO 27001 implementor and/or auditor and familiarity with other industry standards such as NIST and HMG standards such as CAF

Role Overview

Primary Responsibilities:

We are seeking an Information Security Consultant to help drive our GRC Team’s service offering. The ideal candidate will have experience working as a ISO 27001 implementor and/or auditor and familiarity with other industry standards such as NIST and HMG standards such as CAF

The candidate will be assisting in supporting the operation, maintenance and maturity of the Information Security program for both DXR Cyber and our external clients.

Duties And Responsibilities Will Include

• Ensuring the protection of information assets and technologies
• Contribution to completion of security related audits such as ISO 27001, ISO 27701, ISO 9001, NIST-CSF, IASME Governance
• Conduct and document internal audits for both DXR Cyber and our clients
• Hands‑on experience in implementing and auditing ISO frameworks is required
• Experience delivering security awareness training or and be comfortable with public speaking
• The ability to develop and leverage strong relationships with internal and external stakeholders.
• Manage Third Party Risk Management (TPRM) including vendor security programme reviews,
• Help the Sales Team with scoping engagements and delivering a valued service to our customers
• An understanding of the requirements of business continuity and disaster recovery solutions

You Will Need

• Extensive Information Security Governance, Risk and Compliance (GRC) experience as well as InfoSec Operations experience
• Experience contributing to a Business Management System (BMS) certified to ISO standards
• Good knowledge of the Cyber Essentials Plus Scheme as well as UK & EU General Data Protection Regulation (GDPR) and the Data Protection Act (2018)
• The ability to work autonomously and as part of a team, excellent communication skills

Certifications Preferred

• ISO 27001 Lead Implementer
• ISO 27001 Internal Auditor
• ISO 9001 Implementor
• ISO 9001 Lead Auditor
• CISM/CISSP:

Skills Required

• Skilled in time, priority and task management
• Interpersonal skills to interact with customers and team members
• Ability to anticipate problems, resolve ambiguity and take decisive action
• Eligibility for Security Clearance
• UK Driving Licence
• Hybrid working with a requirement to work from our Head Office (Doncaster once or twice a month, dependent on location)

This is an excellent opportunity within a stable organisation dedicated to Cyber Security.

Benefits

• Salary Sacrifice pension scheme
• Private Medical Insurance
• Buy/sell holiday scheme
• Birthday leave paid
• 33 days holiday Inc bank holidays
• Cycle-to-work scheme
• Employee Assistance Programme
• Government Childcare Scheme