GRC Consultant

Sanderson Government & Defence; Remote; GBP 80,000 - 100,000; Full time

Job summary

A leading consulting firm in the UK is seeking a Cyber Security Consultant to design and implement effective risk management solutions for clients. In this role, you will support various stakeholders and collaborate with teams to ensure security alignment with business needs. Ideal candidates will possess robust knowledge of risk management frameworks and relevant certifications. Join a diverse team committed to fostering an inclusive work environment and enjoy a significant level of responsibility in client engagements.

Qualifications

• Experience as a Security Assurance Coordinator or Delivery Team Security Lead.
• Familiarity with MOD and government standards.
• Knowledge of ISO 27001, NIST CSF, CIS Controls v8.

Responsibilities

• Support clients in implementing cyber security risk management solutions.
• Provide Secure by Design risk and security assurance services.
• Collaborate with multi-disciplinary teams for risk appetite alignment.

Skills

Risk management frameworks

Cyber security knowledge

Teamwork and communication skills

Stakeholder engagement

Secure system design

Education

Full Membership of CIISEC

UK Cyber Security Council registration

Job description

The Role

As part of the Consulting team, you will support both new and existing clients to design, assess, and implement effective cyber security risk management solutions tailored to their needs. Working closely with client stakeholders, you will complement in-house Information and Cyber Security teams by providing expert guidance across information security, solution architecture, and business risk.

The Impact You'll Make

In this role, you will:

• Provide Secure by Design risk and security assurance services
• Apply strong knowledge of risk management frameworks
• Collaborate with multi-disciplinary teams to ensure solutions align with business risk appetite
• Produce clear, concise reports detailing vulnerabilities, risks, controls, and treatment plans
• Facilitate security and risk workshops with Authority stakeholders
• Deliver practical, business-aligned remediation and risk management advice
• Support security risk assessment within agile delivery environments
• Demonstrate strong teamwork, communication, and stakeholder engagement skills
• Apply broad knowledge of cyber security across public and private sectors
• Understand modern IT and security technologies

Core Expertise

• Security Assurance Coordinator or Delivery Team Security Lead experience
• MOD and government standards
• Secure system design
• MOD/GDS Secure by Design principles
• Supplier assurance and supply-chain risk
• Security legislation
• Security frameworks: ISO 27001, NIST CSF, CIS Controls v8
• HMG, NPSA, and NCSC policies and guidance
• Secure by Design within the SDLC
• Threat modelling techniques
• HLD/LLD review and assurance

Technical Knowledge

• Cloud security
• Network and infrastructure security
• AI security and governance
• ITHC scoping and remediation
• Cryptography, PKI, Zero Trust, PAM, RBAC, Cross Domain Solutions
• Cloud security posture management and endpoint security tooling

Qualifications & Certifications

• Achieved or working toward Full Membership of CIISEC
• UK Cyber Security Council registration

This role will require you to be willing and eligible to undergo a high level of UK security clearance.

If you're interested in the above, apply or reach out to [e-mail].

Reasonable Adjustments

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.

If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.