Cyber Governance Consultant

LHH; England; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading governance consultancy in the United Kingdom is seeking a Cyber Governance Consultant with 2 – 4 years of experience to enhance clients' cyber guidelines and governance frameworks. The role involves conducting gap analyses, performing risk assessments, and managing policies. The ideal candidate will have experience with regulatory frameworks, strong communication skills, and the ability to work collaboratively with clients. This position offers a hybrid working model, balancing client-site engagements with office and home work.

Qualifications

• 2 – 4 years experience as a Cyber Governance Consultant.
• Experience with regulatory frameworks like ISO, NIS, NIST, etc.
• Proven ability to work with clients and teams effectively.

Responsibilities

• Conduct gap analysis and rationalization of controls.
• Perform threat modelling and risk assessments.
• Manage policy and procedure lifecycle.

Skills

Experience designing or implementing secure solutions

Background in GRC consulting or cybersecurity governance

Ability to balance security and usability

Strong communication skills

Job description

Job Title: Cyber Governance Consultant – Permanent

Location: Hybrid (Client sites, Company offices, and Home – note: cannot be fully remote)

About the Role

We are looking for a Cyber Governance Consultant (2 – 4 years experience) to help clients design and implement cyber guidelines and governance frameworks tailored to their specific needs. The role involves working across pre‑and post‑sales consulting activities, helping clients align their cyber strategy with regulatory frameworks and industry best practices.

Key Responsibilities

• Conduct gap analysis and rationalisation of controls against regulatory frameworks.
• Perform threat modelling, risk identification, assessment, and mitigation planning.
• Analyse, protect, and manage data outputs, including Data Loss Prevention (DLP) and Rights Management.
• Conduct 3rd party risk analysis, controls, audit, and cyber resilience and recovery assessments.
• Review cloud and network security posture, including mobile data and device protection.
• Manage policy and procedure lifecycle, including development, testing, review, and compliance audit participation (internal and external).
• Support business development and advisory activities in cybersecurity governance.

Skills and Experience

• Experience designing or implementing secure solutions based on regulatory frameworks such as ISO, NIS, NIST, TISAX, DORA, NCSC CAF, or IEC62443.
• Background in GRC consulting or cybersecurity governance.
• Ability to balance security, compliance, usability, agility, and cost considerations.
• Experience creating business cases, roadmaps, or strategic recommendations for regulatory compliance.
• Strong communication skills and the ability to work effectively with clients and cross‑functional teams.

Pre‑Employment Checks

• Identity verification, nationality or immigration status.
• Employment history (3 continuous years).
• Disclosure and Barring Service (DBS) check for unspent criminal records.

Why This Role

You will join a supportive, inclusive environment that values diversity and innovation, helping clients improve their cyber posture and governance practices while working with a variety of sectors and secure industries.