GRC Specialist

Oliver Bernard; United Kingdom; On-site; GBP 85,000 - 130,000; Full time

Job summary

A consultancy firm is seeking a Senior IT GRC Contractor specializing in NIST standards to enhance their security governance. The role involves assessing security setups, creating policies, and driving the implementation of NIST controls. The ideal candidate should have over 10 years of GRC experience, strong documentation skills, and the ability to operate independently. This full-time position is based in Harrow, England, and requires a confident communicator who can manage the entire GRC remit.

Qualifications

• 10+ years of experience in GRC (not audit).
• Proven track record of implementing and remediating NIST controls.
• Strong documentation and policy writing skills.
• Confident communicator who can push work forward.
• Able to operate independently and own the entire GRC remit.

Responsibilities

• Assess the current security setup and map it against NIST.
• Identify gaps and design practical fixes.
• Write and implement policies, standards, and procedures.
• Drive remediation work with engineering and operational teams.
• Build KPIs, dashboards, and reporting for leadership.
• Ensure controls are operating effectively and are audit ready.

Skills

GRC expertise

NIST controls implementation

Strong documentation skills

Confident communication

Independent operation

Job description

Senior IT GRC Contractor (NIST Specialist)

I’m supporting a client who needs a highly experienced GRC contractor to take ownership of their security governance and bring the organisation up to a strong, measurable NIST standard.

What you’ll be doing

• Assess the current security setup and map it against NIST
• Identify gaps and design practical fixes
• Write and implement policies, standards, and procedures
• Drive remediation work with engineering and operational teams
• Build KPIs, dashboards, and reporting for leadership
• Ensure controls are operating effectively and are audit ready

What they’re looking for

• 10+ years in GRC (not audit)
• Proven track record implementing and remediating NIST controls
• Strong documentation and policy writing skills
• Confident communicator with the ability to push work forward
• Someone who can operate independently and own the entire GRC remit

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology

Industries

Computer and Network Security; IT Services; IT Consulting

Location

Harrow, England, United Kingdom