Security & GRC Consultant — Client-Facing, Flexible Work

NTT America, Inc.; Greater London; Hybrid; GBP 75,000 - 115,000; Full time

Job summary

NTT DATA UK & Ireland is seeking a Security Consultant to join our operational security & GRC teams in a client‑facing consultancy role. You will translate business and regulatory requirements into practical risk decisions, oversee governance, and drive security improvements across client environments.

You will lead security assessments, manage control testing, and coordinate with auditors while engaging stakeholders to ensure timely remediation and risk reduction.

Qualifications

• Five or more years’ experience in information security management, governance, risk or compliance roles.
• Certifications such as CISM, CISSP, CRISC, CISA or ISO/IEC 27001 Lead Auditor/Implementer preferred.
• Strong knowledge of ISO/IEC 27001, NIST CSF and NIST 800-53.
• Experience overseeing vulnerabilities, threats, incidents and remediation at enterprise scale.
• Ability to translate regulatory requirements into actionable improvements.

Responsibilities

• Provide security governance and oversight across client environments.
• Oversee day‑to‑day operational security, risk, and remediation tracking.
• Review vulnerability outputs and guide prioritisation based on impact.
• Interpret threat intelligence and manage incident response planning and actions.
• Facilitate risk assessments, control testing and audit readiness.
• Produce regular security risk reporting for stakeholders.
• Engage with clients and senior leaders to explain risks and actions.
• Lead or contribute to security assessments and control improvement programmes.

Skills

Governance

GRC Advisory

Security Operations

Vulnerability Mgmt

Audit & Assurance

Stakeholder Engage

Communication

ISO 27001

NIST CSF

Security Clearance

Job description

NTT DATA UK & Ireland is seeking a Security Consultant to join our operational security & GRC teams in a client‑facing consultancy role. You will translate business and regulatory requirements into practical risk decisions, oversee governance, and drive security improvements across client environments.

You will lead security assessments, manage control testing, and coordinate with auditors while engaging stakeholders to ensure timely remediation and risk reduction.