Cyber GRC Controls SME: NIST CSF 2.0 & Framework Design

Cyber UK; Greater London; Hybrid; GBP 111,000 - 148,000; Part time

Job summary

Cyber UK is seeking a Cyber GRC Controls SME for an 8-10 week contract in London. The role focuses on designing and refining enterprise cyber security control frameworks, control libraries, taxonomy, and measurement, ensuring alignment to best practices and regulatory expectations.

The ideal candidate will map controls to NIST CSF 2.0, work across governance activities, and drive improvements while coordinating with stakeholders in a hybrid London setting.

Qualifications

• Strong background in cyber security, governance, risk and controls.
• Experience designing and enhancing enterprise security control frameworks.
• Proven experience developing and maintaining control libraries.
• Strong understanding of control taxonomy, control objectives and control effectiveness measures.
• Experience mapping controls to NIST CSF 2.0.
• Knowledge of NIST 800-53 and/or ISF Standards of Good Practice.
• Experience supporting audits, assurance reviews and regulatory requirements.
• Ability to identify control gaps, assess effectiveness and drive improvements.
• Excellent stakeholder management and communication skills.

Responsibilities

• Assess and enhance cyber security controls and governance initiatives.
• Support governance activities and ensure alignment to industry best practice.
• Map controls to NIST CSF 2.0 and maintain control libraries.

Job description

Cyber UK is seeking a Cyber GRC Controls SME for an 8-10 week contract in London. The role focuses on designing and refining enterprise cyber security control frameworks, control libraries, taxonomy, and measurement, ensuring alignment to best practices and regulatory expectations.

The ideal candidate will map controls to NIST CSF 2.0, work across governance activities, and drive improvements while coordinating with stakeholders in a hybrid London setting.