IT Security Technical, Governance, Risk and Compliance Consultant

Candour Solutions; Hull and East Yorkshire; Remote; GBP 55,000 - 75,000; Full time

Job summary

A leading IT solution provider is looking for a Governance, Risk & Compliance (GRC) Consultant to deliver consultancy projects. You will scope customer requirements and provide support while ensuring compliance with standards like ISO27001. The role offers remote working with one visit per month. Ideal candidates will have robust GRC experience and strong communication skills with clients.

Qualifications

• Track record in GRC consultancy to diverse audiences.
• Understanding of frameworks and standards like ISO27001, CIS, Cyber Essentials.
• Experience documentation for incident responses.

Responsibilities

• Scope customer requirements and identify GRC opportunities.
• Deliver GRC consultancy projects to various customers.
• Provide internal support regarding GRC.

Skills

GRC consultancy experience

Understanding of ISO27001/22301

CSIRP documentation experience

Ability to create reports

Communication with stakeholders

Trust-building with customers

Job description

Overview of the role

Phoenix enables digital transformation in the workplace, empowering UK organisations to innovate and transform with cloud and hybrid infrastructures, data, AI, security, and collaboration tools.

We are now looking for a Governance, Risk & Compliance (GRC) Consultant to join the team and help deliver a range of customer engagements.

What will you be doing?

• Scoping of customer requirements, working with the GRC Practice Lead and Business Development Manager to identify GRC opportunities
• Providing internal support to key business functions within the organisation around GRC
• Delivery of GRC consultancy projects to a range of customers across the public sector and corporate sector, including:
• Security/maturity assessments
• Cyber security strategy development
• ISO services – from gap analysis, external auditing and implementation support around ISO27001, ISO22301 & ISO42001
• AI governance workshops
• Third party risk management
• Incident response planning, including CSIRPs, Tabletop Exercises, Business Impact Assessments, Disaster Recovery and Business Continuity Plans and support

Why you should apply?

At Phoenix, our philosophy is simple – we aim to be the UK’s leading IT solution and managed service provider and that means we recognise that it’s our people who are the heart of everything we do. We do this by providing the encouragement, support and skill development that you need to be the very best you can be at work. We are proud of our culture, and we have developed our Culture Blueprint which you can read.

What are we looking for?

The right person for this role will already have a track record and pedigree in delivering GRC consultancy to a varied customer base. You will be comfortable in the consultant role with the commercial awareness to be excellent in a customer-facing role such as this. Those who have only experience in an internal role or as an engineer will not be suitable for this position.

Key skills/experience

• A consistent track record and pedigree in delivering GRC consultancy to a varied customer base
• Ability to understand and succinctly explain the complex requirements of frameworks, standards and best practice including ISO27001/22301, CIS and Cyber Essentials
• Experience of creating CSIRPs or similar incident response documentation, and delivery of tabletop exercises
• Ability to create high quality reports and documentation, meeting deadlines
• Ability to translate technical content into simple and straightforward language, and deal with a range of technical and non-technical stakeholders
• Ability to form rapport and trust with customers quickly, and dedication to delivering outstanding work

Practical stuff

Where is the role based?

Our HQ is in Pocklington (YO42) however this role can be largely remote with a visit once a month.

How many interviews?

Following a screen with the Recruitment Team you can expect a two-stage interview process.

What are the benefits?

You can read about the benefits on offer.

Important BPSS Check

As part of our recruitment process due to the nature of the work we do, all employees are required to undertake a BPSS check. While some employees require further security clearance, the BPSS check is a must-have requirement and all offers of employment are conditional pending the passing of this check.