GRC & InfoSec Consultant – ISO 27001 Lead (Hybrid)

DXR Cyber; Doncaster; Hybrid; GBP 50,000 - 70,000; Full time

Benefits offered by this job

Salary Sacrifice pension scheme

Private Medical Insurance

Buy/sell holiday scheme

Birthday leave paid

33 days holiday Inc bank holidays

Cycle-to-work scheme

Employee Assistance Programme

Government Childcare Scheme

Job summary

DXR Cyber is seeking an Information Security Consultant to drive our GRC Team’s service offering. The ideal candidate will have ISO 27001 implementor/auditor experience and familiarity with NIST and CAF standards.

You will support the operation, maintenance and maturity of the Information Security program for DXR Cyber and our external clients, including leading audits and delivering security trainings. Hybrid role based from Doncaster with some travel.

Qualifications

• Extensive Governance, Risk and Compliance (GRC) experience with InfoSec operations
• Experience contributing to a Business Management System (BMS) certified to ISO standards
• Knowledge of Cyber Essentials Plus, GDPR (UK/EU) and Data Protection Act 2018
• Ability to work autonomously and in a team, with strong communication skills
• Eligible for Security Clearance and UK driving licence

Responsibilities

• Protect information assets and technologies across DXR Cyber and client environments
• Contribute to security audits including ISO 27001, ISO 27701, ISO 9001, NIST-CSF, IASME Governance
• Conduct and document internal audits for DXR Cyber and clients
• Hands-on experience implementing and auditing ISO frameworks
• Deliver security awareness training and engage in public speaking
• Build strong relationships with internal and external stakeholders
• Manage Third Party Risk Management (TPRM) and vendor security reviews
• Assist Sales in scoping engagements and delivering value
• Support business continuity and disaster recovery planning

Skills

Time management

Interpersonal skills

Problem solving

Public speaking

UK Driving Licence

Autonomy

Job description

DXR Cyber is seeking an Information Security Consultant to drive our GRC Team’s service offering. The ideal candidate will have ISO 27001 implementor/auditor experience and familiarity with NIST and CAF standards.

You will support the operation, maintenance and maturity of the Information Security program for DXR Cyber and our external clients, including leading audits and delivering security trainings. Hybrid role based from Doncaster with some travel.