Governance, Risk & Compliance Consultant

Jobtailor; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Jobtailor in London is seeking a senior consultancy expert to apply the NIST CSF 2.0 framework, assess maturity, and deliver governance, risk and compliance improvements for client programmes.

You will produce artefacts, guide evidence collection, and provide recommendations while working within project milestones and contractual obligations.

Qualifications

• Demonstrable experience applying the NIST Cybersecurity Framework, ideally NIST CSF 2.0.
• Strong governance, risk and compliance experience within technology and cyber security environments.
• Experience conducting maturity assessments, control assessments or compliance reviews.
• Ability to produce high quality governance, assurance and compliance documentation.
• Experience delivering specialist consultancy services within defined project environments.

Responsibilities

• Develop NIST CSF 2.0 profile documentation.
• Assess current capabilities against the NIST CSF 2.0 framework.
• Conduct gap analysis and identify areas for improvement.
• Collect, review and organise supporting evidence.
• Produce assessment outputs, reports and associated documentation.
• Provide recommendations to improve governance, risk and compliance practices.
• Deliver agreed project artefacts in line with programme milestones.
• Deliver NIST CSF 2.0 outputs and maturity artefacts.
• Determine the approach to delivering outputs subject to milestones and contractual obligations.

Skills

NIST CSF 2.0

Gap Analysis

Assessment Outputs

Documentation Production

Evidence Collection

Improvement Recommendations

Maturity Assessment

Project Delivery

Job description

• Develop NIST CSF 2.0 profile documentation
• Assess current capabilities against the NIST CSF 2.0 framework
• Conduct gap analysis and identify areas for improvement
• Collect, review and organise supporting evidence
• Produce assessment outputs, reports and associated documentation
• Provide recommendations to improve governance, risk and compliance practices
• Deliver agreed project artefacts in line with programme milestones
• Deliver NIST CSF 2.0 profile documentation, assessment and gap analysis outputs, evidence repositories, supporting documentation, improvement recommendations and maturity assessment artefacts
• Determine the approach to delivering agreed outputs, subject to programme milestones, governance requirements and contractual obligations
• No line management responsibilities

Requirements

• Demonstrable experience applying the NIST Cybersecurity Framework, ideally NIST CSF 2.0
• Strong governance, risk and compliance experience within technology and cyber security environments
• Experience conducting maturity assessments, control assessments or compliance reviews
• Ability to produce high quality governance, assurance and compliance documentation
• Experience delivering specialist consultancy services within defined project environments

Core Competencies

Demonstrates expertise in applying the NIST Cybersecurity Framework, particularly NIST CSF 2.0, to assess and improve governance, risk, and compliance practices. Proficient in producing high-quality documentation and delivering consultancy services within project environments.

Highest-signal resume keywords

• NIST Cybersecurity Framework
• Governance, Risk And Compliance
• Maturity Assessments
• Control Assessments
• Compliance Reviews

Hard Skills

• NIST CSF 2.0
• Gap Analysis
• Assessment Outputs
• Documentation Production
• Evidence Collection
• Improvement Recommendations
• Maturity Assessment
• Project Delivery

Industry Keywords

• Cybersecurity
• Governance Requirements
• Contractual Obligations
• Consultancy Services