GRC Consultant - Remote UK (Security & Compliance)

Oscar Technology; United Kingdom; Remote; GBP 45.000 - 50.000; Vollzeit

Zusammenfassung

Oscar Technology is seeking a GRC Consultant to join a growing cyber security consultancy supporting clients across government, defence and the commercial sector. You will deliver security risk assessments, compliance reviews and control assessments, and assess client controls against recognised standards.

The role requires practical auditing experience, knowledge of ISO 27001/NIST CSF, and the ability to gather evidence and report findings.

Qualifikationen

• Previous experience within a cyber security, GRC or information assurance consultancy.
• Practical auditing, compliance review or security control assessment experience.
• Knowledge of ISO 27001 and/or NIST CSF
• Understanding of risk assessments, evidence gathering and reporting findings.
• Confident communicating with clients and working collaboratively.
• Government or defence sector experience is advantageous.
• Active UK SC security clearance is desireable

Aufgaben

• Deliver security risk assessments, compliance reviews and control assessments.
• Assess client security controls against recognised standards and frameworks.
• Identify gaps, evaluate risks and recommend appropriate remediation.
• Support clients with governance, risk management and compliance requirements.
• Review evidence, document findings and provide actionable recommendations.
• Contribute to client engagements and deliverables across a range of sectors

Kenntnisse

GRC

Cyber security

Auditing

Risk assessment

Compliance review

ISO 27001

NIST CSF

Stakeholder communication

Jobbeschreibung

Oscar Technology is seeking a GRC Consultant to join a growing cyber security consultancy supporting clients across government, defence and the commercial sector. You will deliver security risk assessments, compliance reviews and control assessments, and assess client controls against recognised standards.

The role requires practical auditing experience, knowledge of ISO 27001/NIST CSF, and the ability to gather evidence and report findings.