InfoSec GRC & Awareness Leader

TRIA; England; On-site; GBP 165,000 - 344,000; Part time

Job summary

A consultancy firm in the United Kingdom is looking for a Head of Information Security GRC & Awareness. This pivotal role involves leading governance, risk, compliance, and security awareness within the organization. Responsibilities include policy development, risk management, and enhancing the security posture. Ideal candidates will have relevant certifications and extensive experience in complex environments. This role offers a six-month contract inside IR35 with a competitive rate, presenting an opportunity to influence security practices significantly.

Qualifications

• Extensive experience in information security or IT governance.
• Strong knowledge of security frameworks.
• Proven track record in risk management and policy development.

Responsibilities

• Lead the development and enforcement of information security policies.
• Drive security governance and cyber maturity.
• Oversee Information Security Risk Management process.
• Conduct supplier due diligence and audit readiness.
• Own and deliver the security awareness programme.

Skills

CISSP

CISM

ISO27001 Lead Auditor

Risk management

Policy development

Communication skills

Leadership

Third-party due diligence

Tools

ISO/IEC 27001

NIST CSF

CIS Controls

Cyber Essentials

Job description

A consultancy firm in the United Kingdom is looking for a Head of Information Security GRC & Awareness. This pivotal role involves leading governance, risk, compliance, and security awareness within the organization. Responsibilities include policy development, risk management, and enhancing the security posture. Ideal candidates will have relevant certifications and extensive experience in complex environments. This role offers a six-month contract inside IR35 with a competitive rate, presenting an opportunity to influence security practices significantly.