Security & GRC Consultant - Governance, Risk, Ops

NTT DATA, Inc.; Greater London; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

NTT DATA is seeking a Security Consultant in London or Birmingham to join our client-facing consultancy practice. You will provide operational security management, GRC advisory services, and translate business and regulatory requirements into risk-based decisions.

You will oversee governance, vulnerabilities, threats, incidents and control remediation, interfacing with security operations, technology teams, and auditors while delivering pragmatic recommendations.

Qualifications

• Five or more years in information security management, governance or GRC roles.
• Professional certifications such as CISM, CISSP, CRISC, CISA or ISO/IEC 27001 Lead Auditor/Lead Implementer are desirable.
• UK Cyber Security Council title advantageous (Practitioner).
• Strong understanding of ISO/IEC 27001, NIST CSF and NIST 800-53 frameworks and related requirements.
• Experience overseeing vulnerabilities, threats, incidents and remediation across enterprise environments.
• Ability to define meaningful security measures and risk-based reporting using reliable data sources.
• Consulting experience with discovery, stakeholder interviews and reporting.

Responsibilities

• Provide security governance, oversight and reporting for client environments.
• Oversee day-to-day operational security risks, vulnerabilities and remediation progress.
• Review vulnerability outputs and prioritise remediation based on asset criticality and impact.
• Interpret threat intelligence and manage alert response with security teams.
• Facilitate risk identification, treatment plans and traceability from threats to controls.
• Assess design and operation of controls against regulatory and contractual obligations.
• Plan and support security audits, collect evidence and report findings.
• Communicate risk in clear terms to senior stakeholders and clients.
• Lead or contribute to security assessments and governance reviews.
• Identify opportunities to simplify governance and strengthen controls.

Skills

Information security management

GRC

Security governance

Vulnerability management

Threat intelligence

Audits & compliance

Stakeholder engagement

Client-facing

Leadership

Education

CISM

CISSP

CRISC

CISA

ISO/IEC 27001 Lead Auditor

ISO/IEC 27001 Lead Implementer

Job description

NTT DATA is seeking a Security Consultant in London or Birmingham to join our client-facing consultancy practice. You will provide operational security management, GRC advisory services, and translate business and regulatory requirements into risk-based decisions.

You will oversee governance, vulnerabilities, threats, incidents and control remediation, interfacing with security operations, technology teams, and auditors while delivering pragmatic recommendations.