Remote GRC & Information Security Consultant (UK)

Cognisys; Leeds; On-site; GBP 35,000 - 42,000; Full time

Benefits offered by this job

Annual Leave 25 days

£2,000 training budget

Referral bonus up to £2,000

Health & Wellbeing support

Job summary

Cognisys is a UK-based security consultancy offering GRC, penetration testing and managed services. The Information Security Consultant role focuses on delivering governance, risk and compliance engagements for diverse clients while building trusted client relationships.

You will work with senior consultants to design and implement governance frameworks, run risk workshops and support certification efforts across industries, helping clients improve security posture and regulatory compliance.

Qualifications

• 2–5 years of experience in Governance, Risk & Compliance (GRC), Information Security or Risk Management.
• Experience with recognised security frameworks (ISO 27001, SOC 2, NIST CSF).
• Experience supporting compliance, assurance or certification activities.
• Strong written communication to produce client documentation.
• Excellent stakeholder management and organisation for multiple engagements.

Responsibilities

• Deliver GRC consulting engagements across multiple clients and industries.
• Conduct security posture assessments, gap analyses and maturity reviews.
• Support audit preparation, certification activities and external assessments.
• Develop remediation plans and track actions to completion.
• Facilitate client workshops, risk assessments and stakeholder meetings.
• Produce clear client deliverables including policies, risk assessments and governance documentation.
• Collaborate with teams to deliver high standards on time and budget.

Skills

GRC experience

Information Security

Risk Management

Stakeholder management

Written communication

Organisational skills

Problem solving

Tools

GRC platforms (e.g. Vanta)

Job description

Cognisys is a UK-based security consultancy offering GRC, penetration testing and managed services. The Information Security Consultant role focuses on delivering governance, risk and compliance engagements for diverse clients while building trusted client relationships.

You will work with senior consultants to design and implement governance frameworks, run risk workshops and support certification efforts across industries, helping clients improve security posture and regulatory compliance.