Security Consultant

Sapphire; Glasgow; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading cybersecurity consultancy in the United Kingdom is looking for a GRC Consultant to design and improve governance frameworks. The ideal candidate should have strong knowledge of information security principles and experience with ISO 27001 implementation. You will be responsible for conducting risk assessments, guiding compliance programs, and delivering consultancy across industries. Excellent communication skills are required as you will collaborate with technical teams. This role offers a chance to make a significant impact in the field of cybersecurity.

Qualifications

• Strong knowledge of cybersecurity governance frameworks.
• Hands-on experience with audits related to ISO 27001.
• Ability to communicate effectively with stakeholders.

Responsibilities

• Develop and enhance governance frameworks and policies.
• Conduct gap analyses and maturity assessments.
• Support risk treatment plans and maintain risk registers.
• Prepare clients for certification audits.
• Monitor regulatory changes to ensure compliance.

Skills

Knowledge of information security principles

ISO 27001 implementation

Familiarity with GDPR

Stakeholder management skills

Job description

Job Description

🚀 Ready to Shape the Future of Cybersecurity? Join Us as a GRC Consultant! 🔐

Are you passionate about governance, risk, and compliance? Want to help organisations stay secure and resilient? This is your chance to make an impact! 🌍

✨ The Role

• ✅ Design and improve cybersecurity governance frameworks
• ✅ Conduct risk assessments (ISO 27005, NIST)
• ✅ Guide compliance programmes (ISO 27001, GDPR, PCI DSS)
• ✅ Deliver expert consultancy across multiple industries
• ✅ Collaborate with technical teams for holistic security advice

🔍 Key Responsibilities

• Develop and enhance governance frameworks, policies, and procedures
• Conduct gap analyses, audits, and maturity assessments
• Support risk treatment plans and maintain risk registers
• Prepare clients for certification audits
• Monitor regulatory changes and ensure compliance

💡 Skills & Experience

• Strong knowledge of information security principles and governance frameworks
• Hands-on experience with ISO 27001 implementation and audits
• Familiarity with GDPR and DPA 2018
• Excellent communication and stakeholder management sk...