Security Governance Consultant

Albany Beck; London; Hybrid; GBP 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a dedicated Security Governance Consultant to enhance its cybersecurity governance framework. This role is pivotal in transitioning from project-based security to a sustainable, operational model aligned with regulatory standards. You will collaborate closely with the Security Director to maintain security policies, assess compliance with regulations, and support the enterprise risk management strategy. If you have a passion for operational excellence and a deep understanding of cybersecurity governance, this is an exciting opportunity to make a significant impact.

Qualifications

• Hands-on experience in cybersecurity governance and risk management.
• Strong knowledge of NIST SP 800-53 and GDPR compliance.

Responsibilities

• Maintain and update security policies and procedures.
• Assess compliance against regulatory standards like GDPR and PRA.

Skills

Cybersecurity Governance

Risk Management

GDPR Compliance

NIST SP 800-53

Data Privacy

Job description

Job Description

Security Governance Consultant

Location: London (Hybrid)

Overview

Albany Beck is partnering with an investment bank currently enhancing its Security Risk Management capabilities. As part of this transformation, we are seeking an experienced Security Governance Consultant to support the build-out of a mature, regulatory-aligned BAU security function.

This is a hands-on, delivery-focused role ideal for a seasoned Security Practitioner with deep regulatory understanding and a passion for operational excellence in cybersecurity governance.

About the Role

You will play a key role in formalising and managing the client’s security governance framework, working closely with the Security Director. Your work will underpin risk management, regulatory compliance, and enterprise control maturity—helping the organisation evolve from project-based security to embedded BAU operations.

Key Responsibilities

• Maintain and regularly update security policies, standards, and procedures.
• Assess compliance against a broad regulatory landscape, including GDPR, FRB/OCC, and PRA (BoE).
• Oversee governance of control changes and support accountability mapping across services.
• Support the development and rollout of the enterprise risk management strategy.
• Contribute to security awareness and training initiatives across the organisation.

Skills & Experience Required

• Hands-on experience in cybersecurity governance, risk, or assurance.
• Strong knowledge of NIST SP 800-53 and deep familiarity with GDPR and financial regulations.
• Experience managing service catalogues and aligning BAU controls with regulatory expectations.
• Proficiency in cyber legislation, data privacy, and IT change governance.
• Ability to operate effectively in a fast-paced, maturing environment with minimal oversight.