GRC Consultant

Oscar Technology; United Kingdom; Remote; GBP 45,000 - 50,000; Full time

Job summary

Oscar Technology is seeking a GRC Consultant to join a growing cyber security consultancy supporting clients across government, defence and the commercial sector. You will deliver security risk assessments, compliance reviews and control assessments, and assess client controls against recognised standards.

The role requires practical auditing experience, knowledge of ISO 27001/NIST CSF, and the ability to gather evidence and report findings.

Qualifications

• Previous experience within a cyber security, GRC or information assurance consultancy.
• Practical auditing, compliance review or security control assessment experience.
• Knowledge of ISO 27001 and/or NIST CSF
• Understanding of risk assessments, evidence gathering and reporting findings.
• Confident communicating with clients and working collaboratively.
• Government or defence sector experience is advantageous.
• Active UK SC security clearance is desireable

Responsibilities

• Deliver security risk assessments, compliance reviews and control assessments.
• Assess client security controls against recognised standards and frameworks.
• Identify gaps, evaluate risks and recommend appropriate remediation.
• Support clients with governance, risk management and compliance requirements.
• Review evidence, document findings and provide actionable recommendations.
• Contribute to client engagements and deliverables across a range of sectors

Skills

GRC

Cyber security

Auditing

Risk assessment

Compliance review

ISO 27001

NIST CSF

Stakeholder communication

Job description

GRC Consultant GBP45,000 - GBP50,000 Remote UK

We're looking for a GRC Consultant to join a growing cyber security consultancy supporting clients across government, defence and the commercial sector.

This is an opportunity for a cyber security professional with experience in governance, risk and compliance to work directly with clients, helping them assess security controls, identify risks and meet compliance requirements.

The ideal candidate will have previous consultancy experience and a practical understanding of auditing, security assessments and recognised compliance frameworks.

The Role

• Deliver security risk assessments, compliance reviews and control assessments.

• Assess client security controls against recognised standards and frameworks.

• Identify gaps, evaluate risks and recommend appropriate remediation.

• Support clients with governance, risk management and compliance requirements.

• Review evidence, document findings and provide actionable recommendations.

• Contribute to client engagements and deliverables across a range of sectors.

About You

• Previous experience within a cyber security, GRC or information assurance consultancy.

• Practical auditing, compliance review or security control assessment experience.

• Knowledge of ISO 27001 and/or NIST CSF

• Understanding of risk assessments, evidence gathering and reporting findings.

• Confident communicating with clients and working collaboratively.

• Government or defence sector experience is advantageous.

• Active UK SC security clearance is desireable