Security Consultant (GRC)

NTT; London; On-site; GBP 55,000 - 75,000; Full time

Job summary

A leading company in global security services seeks a passionate individual for a Governance, Risk & Compliance role in London. You'll oversee cybersecurity policies and risk management for diverse clients, ensuring compliance with standards like GDPR and ISO 27001. The position demands strong leadership and communication skills, with opportunities for professional growth in a diverse and inclusive environment.

Benefits

Ongoing learning and development opportunities

Flexible work options

Qualifications

• At least 3 years in information security, data protection, risk management, or compliance roles.
• Strong understanding of frameworks like ISO 27001, NIST 800-53 / CSF.
• Legal right to work in the UK and eligibility for UK SC clearance.

Responsibilities

• Direct and implement policies to manage cyber and information security.
• Develop risk management strategies and controls.
• Oversee implementation of policies to protect personal data.

Skills

Leadership

Attention to detail

Excellent communication

Education

Certifications such as CISA, CRISC, CISM, or CISSP

Job description

NTT DATA is one of the world’s largest global security service providers, partnering with some of the most recognized security technology brands. We’re looking for passionate, curious, and motivated individuals to join our team.

What you'll be doing:

Using your background in Governance, Risk & Compliance, you will help our clients:

• Governance: Direct, oversee, design, implement, or operate within multi-disciplinary structures, policies, procedures, processes, and controls to manage cyber and information security at an enterprise level. Support organizational regulatory, legal, risk, environmental, and operational requirements, ensuring compliance.
• Policy and Procedure Management: Develop or maintain organizational cyber and information security policies, standards, and processes, using recognized standards like ISO/IEC 27000 family, NIST CSF. Apply relevant security classifications.
• Risk Management: Develop cybersecurity risk management strategies and controls, assessing assets, threats, impacts, and vulnerabilities to identify risks.
• Data Privacy: Oversee and implement policies to protect personal data, privacy, and human rights, ensuring compliance with GDPR, Data Protection, etc.
• Internal Controls Oversight: Establish and monitor controls to safeguard data and assets, conducting reviews and audits.
• Stakeholder Engagement: Serve as a liaison, providing guidance, support, and reporting to internal teams, partners, and regulators.
• Continuous Improvement: Identify process enhancements, test security controls, and document compliance to identify risks and gaps.

What experience you'll bring:

We value broad experience in security risk management and evidence of expertise in areas such as:

• At least 3 years in information security, data protection, risk management, or compliance roles.
• Strong understanding of frameworks like ISO 27001, NIST 800-53 / CSF, NIS/NIS2, DORA, UK CNI / OT / IIOT.
• Experience working with external stakeholders, including clients, vendors, auditors, and regulators.
• Leadership skills to guide and mentor teams and influence stakeholders.
• Ability to balance strategic oversight with hands-on security tasks.
• Excellent communication skills for technical and non-technical audiences.
• Attention to detail and high-quality work delivery.
• Legal right to work in the UK and eligibility for UK SC clearance.
• Certifications such as CISA, CRISC, CISM, or CISSP are advantageous.

Who we are:

We’re a global business empowering local teams, undertaking impactful work that changes the world. Our services span consulting, applications, cloud, and infrastructure, enabling you to achieve great things with talented colleagues and clients.

Our inclusive environment promotes mutual respect, accountability, and continuous learning, fostering collaboration, well-being, growth, and diversity. We have various Inclusion Networks, including Women’s Business Network, Cultural and Ethnicity Network, LGBTQ+ & Allies Network, Neurodiversity Network, and Parent Network.

What we'll offer you:

We provide benefits supporting your physical, emotional, and financial well-being, along with ongoing learning and development opportunities and flexible work options.

More about us: NTT DATA UK & Ireland

We are committed to diversity and inclusion, guaranteeing interviews for applicants with disabilities who meet minimum role requirements and offering reasonable adjustments during recruitment. Join us in building a diverse, empowered team.