Secure-by-Design GRC Consultant for Defence Programs

identifi Global Resources; Reading; Hybrid; GBP 94,000 - 127,000; Part time

Job summary

identifi Global Resources is seeking experienced GRC and Risk & Assurance consultants to support a major Defence programme in Reading. You will embed Secure by Design, conduct risk assessments, and provide ongoing assurance across the delivery lifecycle.

Ideal candidates will have strong cyber security risk and governance experience, familiarity with NIST/ISO 27001/CAF, and the ability to engage with technical teams and senior stakeholders. Hybrid working with UK sites is offered.

Qualifications

• Extensive experience in Cyber Security Risk, Assurance, GRC or Information Assurance.
• Practical knowledge of Secure by Design.
• Strong risk assessment and risk management experience.
• Familiarity with security frameworks such as NIST, ISO 27001, CAF.
• Ability to review technical solutions from a security risk perspective.
• Excellent stakeholder management with senior stakeholders.
• Active security clearance.

Responsibilities

• Embed Secure by Design throughout the programme and delivery lifecycle.
• Conduct security risk assessments and assurance reviews.
• Identify, assess, document and manage information security risks.
• Maintain risk registers, treatment plans and assurance documentation.
• Develop security policies, standards and governance docs.
• Assess security controls and identify gaps and remediation.
• Collaborate with security architects and project teams.
• Support security governance forums and risk reviews.
• Gather evidence to demonstrate controls are implemented.

Skills

Cyber security risk

GRC

Information assurance

Secure by Design

Risk management

Stakeholder management

Security governance

Security controls

Security clearance

Job description

identifi Global Resources is seeking experienced GRC and Risk & Assurance consultants to support a major Defence programme in Reading. You will embed Secure by Design, conduct risk assessments, and provide ongoing assurance across the delivery lifecycle.

Ideal candidates will have strong cyber security risk and governance experience, familiarity with NIST/ISO 27001/CAF, and the ability to engage with technical teams and senior stakeholders. Hybrid working with UK sites is offered.