Compliance & Risk Consultant

ProtekCyber Consultants Ltd; United Kingdom; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid flexibility

Performance bonuses

Private medical cover

Team retreats

Certification paths

Job summary

ProtekCyber Consultants Ltd. is seeking a Compliance & Risk Consultant to guide UK clients in building regulation-ready cyber security frameworks. The role involves virtual CISO work, governance design, and regulatory alignment across ISO 27001, NIST, GDPR, and PCI DSS.

You will conduct risk assessments, work with C-level stakeholders, draft policies, and support audits and certifications. Hybrid work model with opportunities for certification and development.

Qualifications

• 5+ years’ experience in cyber risk, compliance, governance, or data privacy consulting.

Responsibilities

• Serve as a virtual CISO to clients, advising leadership on security governance, strategy, and risk posture.
• Lead the design, review, and implementation of security governance frameworks aligned to ISO 27001, NIST, Cyber Essentials Plus, and GDPR.
• Conduct risk assessments, gap analyses, and privacy impact assessments across a wide range of environments.
• Work directly with client stakeholders — including C-level and board members — to advise on cyber security risks, compliance obligations, and security programme development.
• Draft, refine, and implement security policies, standards, and procedures to meet business and regulatory needs.
• Support clients through audits and certification processes, including ISO 27001, Cyber Essentials Plus, and PCI DSS.
• Identify control weaknesses, advise on remediation strategies, and help define improvement roadmaps for both SME and enterprise clients.
• Collaborate with our sales and technical teams to scope services, respond to RFPs, and support business development activities.

Skills

CISO liaison

Risk assessments

Privacy impact assessments

Policy drafting

Tools

Microsoft 365

Azure

AWS

Job description

At ProtekCyber, compliance isn’t just about ticking boxes — it’s about empowering businesses with clarity and confidence in their security posture. As a Compliance & Risk Consultant, you’ll guide clients across the UK in building resilient, regulation-ready cyber security frameworks. Whether it’s acting as a virtual CISO or supporting ISO 27001 accreditation, you’ll be instrumental in helping our clients meet legal, regulatory, and business-driven security goals.

24/7

Security Operations

1-5+

Years Experience

Hybrid

Work Model

What You’ll Be Doing

• Serve as a virtual CISO to clients, advising leadership on security governance, strategy, and risk posture.
• Lead the design, review, and implementation of security governance frameworks aligned to ISO 27001, NIST, Cyber Essentials Plus, and GDPR.
• Conduct risk assessments, gap analyses, and privacy impact assessments across a wide range of environments.
• Work directly with client stakeholders — including C-level and board members — to advise on cyber security risks, compliance obligations, and security programme development.
• Draft, refine, and implement security policies, standards, and procedures to meet business and regulatory needs.
• Support clients through audits and certification processes, including ISO 27001, Cyber Essentials Plus, and PCI DSS.
• Identify control weaknesses, advise on remediation strategies, and help define improvement roadmaps for both SME and enterprise clients.
• Collaborate with our sales and technical teams to scope services, respond to RFPs, and support business development activities.

Bonus Skills

• ISO 27001 Lead Auditor or Lead Implementer certification.
• Experience supporting tender responses and writing proposals.
• Familiarity with ISO 27701, PCI DSS, ISO 27018, and UK Data Protection Act.

What You’ll Bring

• 5+ years’ experience in cyber risk, compliance, governance, or data privacy consulting.
• Strong understanding of privacy and security frameworks such as ISO 27001, GDPR, NIST, SOC 2, and COBIT.
• Experience advising on data protection, PII, and security controls in cloud and hybrid environments.
• Proven ability to communicate complex compliance requirements in simple, business-aligned language.
• Confidence to work with C-level executives, present findings, and influence strategic decisions.
• Solid knowledge of modern IT infrastructure and cloud services (e.g. Microsoft 365, Azure, AWS).

Why ProtekCyber?

• Work with clients that span finance, healthcare, legal, government, and fast-growing tech sectors.
• Be part of a consultancy-first culture where your insight shapes our delivery and methodology.
• Access paid certification paths, mentorship, and tailored professional development.
• Hybrid flexibility, performance bonuses, private medical cover, and regularteamretreats.