Hybrid Information Security & GRC Consultant (ISO 27001)

DXR Cyber; Doncaster; Hybrid; GBP 50,000 - 85,000; Full time

Benefits offered by this job

Salary Sacrifice pension scheme

Private Medical Insurance

Buy/sell holiday scheme

Birthday leave paid

33 days holiday Inc bank holidays

Cycle-to-work scheme

Employee Assistance Programme

Government Childcare Scheme

Job summary

DXR Cyber is seeking an Information Security Consultant to strengthen the GRC Team’s offerings. You will help mature information security programs for our clients, focusing on ISO 27001 implementations and audits, with familiarity of NIST and UK HMG standards.

The role involves hands-on governance, risk and compliance work, security awareness, and stakeholder engagement while supporting sales in scoping engagements and ensuring robust third-party risk management.

Qualifications

• Extensive GRC experience and InfoSec Operations
• Experience contributing to a Business Management System (BMS) certified to ISO standards
• Knowledge of GDPR, Data Protection Act 2018
• Ability to work autonomously and as part of a team

Responsibilities

• Protect information assets and technologies
• Contribute to audits ISO 27001, ISO 27701, ISO 9001, NIST-CSF, IASME Governance
• Conduct and document internal audits for DXR Cyber and clients
• Hands-on experience in implementing and auditing ISO frameworks
• Experience delivering security awareness training or public speaking
• Develop and leverage relationships with stakeholders
• Manage Third Party Risk Management (TPRM) including vendor security reviews
• Assist Sales in scoping engagements and delivering value
• Understand business continuity and disaster recovery requirements

Skills

Time management

Interpersonal skills

Problem solving

Security clearance

UK Driving Licence

Job description

DXR Cyber is seeking an Information Security Consultant to strengthen the GRC Team’s offerings. You will help mature information security programs for our clients, focusing on ISO 27001 implementations and audits, with familiarity of NIST and UK HMG standards.

The role involves hands-on governance, risk and compliance work, security awareness, and stakeholder engagement while supporting sales in scoping engagements and ensuring robust third-party risk management.