GRC Audit & Assurance Lead (Cyber Security)

Dimension Data Solutions Limited (Kenya); United Kingdom; Remote; GBP 70,000 - 100,000; Full time

Job summary

NTT DATA is seeking a Lead GRC Consultant to drive governance, risk and compliance activities across a complex cyber security programme. You will perform evidence-led assurance, gap assessment and remediation planning, coordinating with IT and OT stakeholders to ensure control effectiveness and traceability.

The role requires solid experience in structured GRC assessments, control design evaluation and reporting to senior management, with a focus on maintaining compliance and security maturity

Qualifications

• Current PriCSP (Audit) certification is mandatory.
• Strong practical experience in cyber security governance, risk and compliance, assurance, and maturity assessment.
• Experience delivering structured gap assessments against cyber security frameworks or regulatory requirements.
• Experience with NCSC CAF/eCAF assessments or similar control-based assurance frameworks.
• Strong evidence-assessment capability and traceability of evidence.

Responsibilities

• Lead GRC assessment and assurance across programme scope with multiple stakeholders.
• Review policies, standards, procedures, artefacts and risk information to verify controls.
• Consolidate findings into maturity, gap and readiness views for governance bodies.
• Develop remediation recommendations and support remediation planning.

Skills

PriCSP certification

Cyber security governance

Risk management

Compliance

Audit

Job description

NTT DATA is seeking a Lead GRC Consultant to drive governance, risk and compliance activities across a complex cyber security programme. You will perform evidence-led assurance, gap assessment and remediation planning, coordinating with IT and OT stakeholders to ensure control effectiveness and traceability.

The role requires solid experience in structured GRC assessments, control design evaluation and reporting to senior management, with a focus on maintaining compliance and security maturity