GRC Consultant

JR United Kingdom; Swindon; On-site; GBP 45,000 - 65,000; Full time

Job summary

Une entreprise dynamique recherche un consultant GRC pour renforcer son équipe interne. Vous serez responsable de la mise en œuvre de politiques de gouvernance, de la gestion des risques et de la formation des employés. Ce rôle offre une opportunité unique d'évoluer dans un environnement axé sur le bien-être des employés, garantissant que chacun se sente valorisé et en mesure de performer au mieux.

Qualifications

• Connaissance des concepts de gouvernance, gestion des risques et de conformité.
• Bonne compréhension des normes industrielles et des exigences réglementaires.
• Capacité à mener des évaluations des risques.

Responsibilities

• Effectuer des missions de conseil GRC selon les besoins.
• Développer et maintenir des politiques de gouvernance et de conformité.
• Former les employés sur GRC via LMS.

Skills

Governance

Risk Management

Compliance

Communication

Attention to Detail

Education

Experience in GRC consultancy

Tools

LMS

Job description

Social network you want to login/join with:

Reporting to: Information Security Officer (ISO)

Hours: 37.5 hours per week

Security clearance: Advantageous, not essential

This is a brilliant opportunity to join our growing team at CND. We are looking to bolster our internal team with a GRC Consultant. At CND, we pride ourselves on our unique culture focused on employee wellbeing. We ensure that our staff feel valued and are able to bring their best selves to work every day.

Key Responsibilities:

• Undertake GRC consultancy engagements as required
• Develop, implement, and maintain governance policies and procedures
• Identify, assess, and mitigate risks across the organisation
• Develop, implement, and maintain compliance policies and procedures
• Develop and deliver GRC training for employees via our LMS and verbal briefs
• Prepare and submit reports to senior management and framework bodies
• Undertake additional, relevant tasks, projects, and training as required in your role in support of the wider business
• Strong knowledge of governance, risk management, and compliance concepts
• Good understanding of industry standards, regulatory requirements, and frameworks (ISO, CSF, NIST, SOC2, Cyber Essentials etc)
• Ability to conduct risk assessments and develop risk mitigation strategies
• High standards of written and verbal communication, with excellent attention to detail
• Presentable and comfortable with client-facing interaction
• Currently, or capable of gaining and maintaining IASME assessor status