Lead Cyber GRC Consultant — Hybrid, High-Impact Governance

Jacobs; Reading; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Health Cover

Life Assurance

Income Protection

Holiday Buy/Sell scheme

Enhanced Pension Scheme

Job summary

Jacobs is seeking a Lead Cyber Security GRC Consultant to establish a modern GRC capability for a major UK infrastructure programme. You will collaborate with cyber, IT, digital and project teams to identify and manage cyber risks, translating technical risk into clear reports for senior leaders.

The role requires hands-on governance, risk and compliance delivery with strong stakeholder engagement and autonomous working style in a hybrid UK-based environment.

Qualifications

• Proven end-to-end cyber security or IT security governance, risk and compliance experience.
• Strong in cyber risk assessments and remediation activities with executive risk reporting.
• Experience creating and implementing cyber policies, standards and governance processes.
• Knowledge of ISO 27001, NIST, NCSC CAF or equivalent security frameworks.
• Able to communicate complex cyber risks clearly to technical and non-technical audiences.
• Proactive, delivery-focused with the ability to work autonomously.

Responsibilities

• Develop and embed governance, risk and compliance practices across a complex project environment.
• Identify, assess and manage cyber risks, linking cyber risk to programme risk management.
• Develop and implement policies, standards, controls and assurance activities; transform manual processes to digital workflows.
• Provide evidence-based reporting translating cyber risk for senior stakeholders and decision-makers.
• Drive outcomes through influence in a hands-on consultancy role.

Skills

Cyber GRC experience

Risk reporting

Policy & standards development

Governance & compliance

Clear stakeholder communication

Autonomous delivery mindset

Tools

Azure

Microsoft 365

Job description

Jacobs is seeking a Lead Cyber Security GRC Consultant to establish a modern GRC capability for a major UK infrastructure programme. You will collaborate with cyber, IT, digital and project teams to identify and manage cyber risks, translating technical risk into clear reports for senior leaders.

The role requires hands-on governance, risk and compliance delivery with strong stakeholder engagement and autonomous working style in a hybrid UK-based environment.