GRC Security Consultant — Remote, Enterprise-Scale

Certain Advantage; England; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

A global technology organization is seeking an experienced Security Consultant (GRC) for their evolving EMEA cyber security practice. This hands-on role involves delivering Governance, Risk, and Compliance projects for enterprise clients, including risk management and compliance frameworks like ISO27001. The ideal candidate will have at least 4 years of consulting experience, proven delivery using recognized frameworks, and strong client-facing skills. This is an exciting chance to engage with senior stakeholders and significantly improve cyber maturity across industries.

Qualifications

• 4+ years' experience in GRC consulting role, ideally in IT security or risk management.
• Proven delivery experience with frameworks like ISO27001, NIST CSF, or COBIT.
• Strong communication skills with ability to engage non-technical clients.

Responsibilities

• Deliver Cyber GRC consulting engagements from planning to delivery.
• Provide advisory services in areas including Information Security and Compliance.
• Translate complex security requirements into actionable business solutions.

Skills

Cyber GRC consulting

Information Security Governance

Risk Management

Compliance

Business Continuity

Cloud Security

Client engagement

Communicating technical concepts

Education

Degree in a related discipline

Relevant industry certifications (CISSP, CISA, etc.)

Job description

A global technology organization is seeking an experienced Security Consultant (GRC) for their evolving EMEA cyber security practice. This hands-on role involves delivering Governance, Risk, and Compliance projects for enterprise clients, including risk management and compliance frameworks like ISO27001. The ideal candidate will have at least 4 years of consulting experience, proven delivery using recognized frameworks, and strong client-facing skills. This is an exciting chance to engage with senior stakeholders and significantly improve cyber maturity across industries.