Security Consultant - GRC Governance, Risk, Compliance

Certain Advantage; England; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

A global technology organization is seeking an experienced Security Consultant (GRC) to join its expanding cyber security consulting practice. This role involves delivering Governance, Risk and Compliance projects and advising major enterprise clients. The ideal candidate will engage with stakeholders, assess cyber maturity, and drive improvements across various industries. Remote work available with occasional on-site meetings in Reading.

Qualifications

• Experience in delivering Cyber GRC consulting engagements end-to-end.
• Strong knowledge of compliance frameworks such as ISO27001, NIST CSF, and CIS Top 18.
• Ability to engage with senior stakeholders and assess cyber maturity.

Responsibilities

• Deliver end-to-end Cyber GRC consulting engagements.
• Provide advisory services covering Information Security Governance and Risk Management.
• Translate complex security and compliance requirements into business solutions.

Skills

Cyber security consulting

Risk management

Information Security Governance

Compliance frameworks

Cloud security governance

Job description

Security Consultant – GRC (Governance, Risk & Compliance)
Location: Reading (Remote role with once or twice per month on-site)
Rate: Negotiable (DOE)
Contract: Until May 2026

An excellent opportunity has arisen for an experienced Security Consultant (GRC) to join a global technology organization that’s expanding its EMEA cyber security consulting practice and investing heavily in a new Centre of Excellence. This is a hands‑on consulting position delivering Governance, Risk and Compliance (GRC) projects for major enterprise clients – including risk management, cloud security governance, and compliance frameworks such as ISO27001, NIST CSF, CIS Top 18 and COBIT. You’ll play a key role in engaging with senior stakeholders, assessing cyber maturity, and driving best‑practice improvements across a range of industries.

Key Responsibilities

• Deliver Cyber GRC consulting engagements end-to-end — from scoping and planning through to delivery and close‑out.
• Provide advisory services covering areas such as Information Security Governance, Risk Management, Compliance, Business Continuity, and Cloud Security.
• Translate complex security and compliance requirements into actionable business solutions.

Build trusted relationships with clients at both technical and senior management levels.