Cyber Strategy and Risk Consultant (Governance, Risk and Compliance), London

Lorien; Greater London; Hybride; GBP 65 000 - 90 000; Plein temps

Résumé du poste

Lorien is seeking a Cyber Strategy and Risk Consultant to join its London team on a hybrid basis. You will help organisations shape security strategy, manage risk and meet regulatory obligations, often taking a leadership role on workstreams and mentoring peers.

You will work with clients on governance, risk and compliance, translating complex security concepts into actionable plans while engaging with senior stakeholders and defence-related opportunities where relevant.

Qualifications

• Experience in cyber security governance, risk and compliance.
• Understanding how security frameworks and regulation work in practice.
• Ability to communicate with senior stakeholders and translate technical detail into clear advice.
• Track record of managing workstreams or supporting others to deliver.
• Professional qualifications such as CISM, CISSP or ISO 27001 Lead Implementer are helpful but not essential.

Responsabilités

• Advising clients on cyber strategy, security programmes and target operating models.
• Running cyber risk assessments and maturity reviews, and helping clients prioritise what to fix first.
• Supporting clients with regulation and standards such as NIS2, ISO 27001 and NIST.
• Presenting clearly to senior stakeholders and building lasting client relationships.
• Managing delivery and coaching more junior colleagues

Connaissances

Cybersecurity governance

Risk management

Regulatory compliance

Stakeholder communication

People coaching

Formation

CISM

CISSP

ISO 27001 Lead Implementer

Description du poste

Cyber Strategy and Risk Consultant (Governance, Risk and Compliance), London - Hybrid

A leading Big Four professional services firm is hiring cyber strategy and risk professionals in London as its cyber advisory team grows. If you enjoy helping organisations make sense of their cyber risk and turn regulation into plans that actually work, this could be a great fit.

The roles sit within a growing cyber advisory team that helps clients shape their security strategy, manage risk and meet their regulatory obligations, and some of the work is likely to be defence related. The focus is mainly Manager level, with some Assistant Manager opportunities, so you could be leading workstreams, advising senior stakeholders and developing the people around you.

What you could be doing

• Advising clients on cyber strategy, security programmes and target operating models
• Running cyber risk assessments and maturity reviews, and helping clients prioritise what to fix first
• Supporting clients with regulation and standards such as NIS2, ISO 27001 and NIST
• Presenting clearly to senior stakeholders and building lasting client relationships
• Managing delivery and coaching more junior colleagues

What you will bring

• Experience in cyber security governance, risk and compliance, security strategy or consulting
• A good understanding of how security frameworks and regulation work in practice, beyond simply ticking boxes
• Confidence communicating with senior people and turning technical detail into clear advice
• A track record of managing workstreams, or of supporting others to deliver
• Professional qualifications such as CISM, CISSP or ISO 27001 Lead Implementer are helpful but not essential
• Current security clearance, or eligibility to obtain it, is helpful as some work may be defence related

What to expect

The working pattern is hybrid, generally two to three days a week in the London office, with some defence work needing more time on site. We will talk through the specific role, team and timings with you on an initial call, so you know exactly what you are applying for.