IT Security Technical, Governance, Risk and Compliance Consultant

Trades Workforce Solutions; South Yorkshire; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading consultancy in the UK is seeking a Governance, Risk & Compliance (GRC) Consultant to deliver a range of customer engagements mainly in the public and corporate sectors. The right candidate will have a strong track record in GRC consultancy and the ability to communicate complex requirements effectively. This role can be largely remote with a monthly visit to headquarters in Pocklington. Applicants must pass a BPSS check as a condition of employment, assuring a high level of trust and security.

Qualifications

• A track record in delivering GRC consultancy to a varied customer base.
• Ability to explain complex requirements of standards like ISO27001.
• Experience in creating CSIRPs and delivering tabletop exercises.

Responsibilities

• Scoping customer requirements with GRC leads.
• Providing internal support for GRC.
• Delivering GRC consultancy projects to various customers.

Skills

GRC consultancy experience

ISO27001/22301 understanding

Incident response documentation

High quality report creation

Effective communication with stakeholders

Job description

Overview of the role

Phoenix enables digital transformation in the workplace, empowering UK organisations to innovate and transform with cloud and hybrid infrastructures, data, AI, security, and collaboration tools.

We are now looking for a Governance, Risk & Compliance (GRC) Consultant to join the team and help deliver a range of customer engagements.

What will you be doing?

• Scoping of customer requirements, working with the GRC Practice Lead and Business Development Manager to identify GRC opportunities
• Providing internal support to key business functions within the organisation around GRC
• Delivery of GRC consultancy projects to a range of customers across the public sector and corporate sector, this includes:
  • Security/maturity assessments
  • Cyber security strategy development
  • ISO services – from gap analysis, external auditing and implementation support around ISO27001, ISO22301 & ISO42001
  • AI governance workshops
  • Third party risk management
  • Incident response planning, including but not limited to Cyber Security Incident Response Plans (CSIRPs) and Tabletop Exercises, Business Impact Assessments, Disaster Recovery and Business Continuity Plans and support

Why you should apply?

At Phoenix, our philosophy is simple – we aim to be the UK’s leading IT solution and managed service provider and that means we recognise that it’s our people who are the heart of everything we do.

We do this by providing the encouragement, support and skill development that you need to be the very best you can be at work. We are proud of our culture, so much so that we have developed our Culture Blueprint which you can read.

What are we looking for?

The right person for this role will already have a track record and pedigree in delivering GRC consultant to a varied customer base. You will be comfortable in the consultant role with the commercial awareness to be excellent in customer-facing role such as this.

Those who have only an experience in an internal role or as an engineer will not be suitable for this position.

Key skills/experience:

• A consistent track record and pedigree in delivering GRC consultancy to a varied customer base
• Ability to understand and succinctly explain the complex requirements of frameworks, standards and best practice including such as ISO27001/22301, CIS and Cyber Essentials
• Experience of creating CSIRP's or similar incident response documentation, and delivery of tabletop exercises
• Ability to create high quality reports and documentation, meeting deadlines
• Ability to translate technical content into simple and straightforward language, and deal with a range of technical and non-technical stakeholders
• Ability to form rapport and trust with customers quickly, and dedication to delivering outstanding work

Practical stuff

Where is the role based?

Our HQ is in Pocklington (YO42) however this role can be largely remote with a visit once a month.

How many interviews?

Following a screen with the Recruitment Team you can expect a two-stage interview process.

What are the benefits?

You can read about the benefits on offer 😊

Important

BPSS Check: As part of our recruitment process due to the nature of the work we do, all employees are required to undertake a check. While some employees require further security clearance, the BPSS check is a must-have requirement and all offers of employment are conditional pending the passing of this check.