Senior Cyber Risk Advisory Consultant | Cyber GRC & Transformation

55 Exec Search, incorporated; England; A distancia; GBP 70.000 - 77.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

CISSP training

CISM training

ISO27001 LI/LA training

Descripción de la vacante

55 Exec Search, incorporated is seeking a Senior Cyber Risk Advisory Consultant to lead large GRC and transformation programmes in a remote-first UK role with occasional travel. You will own client relationships, drive governance improvements and implement recommendations across ISO 27001, CISM and CISSP-aligned workstreams.

The role focuses on long-term cyber risk programmes, not a string of audits, with funded professional certifications and ongoing client impact.

Formación

• Proven experience leading large GRC or cyber risk consulting engagements for enterprise organisations.
• Strong ability to manage senior stakeholders and deliver tangible improvements.
• Experience embedding risk, governance and assurance into programmes.

Responsabilidades

• Lead substantial GRC programmes for enterprise clients with multi-workstream delivery.
• Build trusted relationships with senior security, technology and business stakeholders as the main client contact.
• Deliver risk assessments, maturity reviews and improvement programmes drawing on ISO 27001, NIST and related frameworks.

Conocimientos

GRC governance

Cyber risk consulting

Stakeholder management

Leadership

ISO 27001 knowledge

Herramientas

ISO27001

Descripción del empleo

Senior Cyber Risk Advisory Consultant | Cyber GRC & Transformation

Up to £70,000 base + up to 10% bonus

Remote-first UK | Occasional client and office travel

Funded certifications: CISSP, CISM and ISO 27001 LI/LA

Lead large programmes. Own client relationships. See your recommendations become lasting improvements.

The focus is on larger, longer-term GRC and cyber transformation programmes, not simply a succession of short-term audits.

You’ll work across a broad range of private-sector clients, including organisations operating critical national infrastructure (CNI) and those with operational technology (OT) environments, bringing variety and exposure to complex business and security challenges.

The opportunity

You’ll become a trusted extension of your clients’ teams, helping them strengthen governance, manage cyber risk and navigate frameworks, audits and compliance within a wider improvement programme.

You’ll have the autonomy to work independently

owning delivery and stakeholder relationships, with experienced specialists and other consultants available to support you.

This is an opportunity to take clients beyond identifying gaps: helping them implement recommendations, embed sustainable processes and demonstrate progress over time.

What you’ll do

• Lead substantial GRC programmes for enterprise clients, taking responsibility for scope, planning, delivery and outcomes across multiple workstreams.
• Build trusted relationships with senior security, technology and business stakeholders, acting as the main contact for your engagements.
• Deliver risk assessments, maturity reviews and improvement programmes, drawing on ISO 27001, NCSC CAF, NIST and other relevant frameworks.
• Support ISMS development, audit readiness and ongoing compliance, guiding implementation and coordinating contributions from other consultants where required.

What you’ll bring

• Proven experience personally leading large GRC or cyber risk consulting engagements for enterprise organisations, with accountability for delivery and client outcomes.
• The judgement and confidence to work independently, manage competing priorities and navigate complex stakeholder environments.
• Strong practical ISO 27001 knowledge and broader experience across governance, risk and assurance, including taking recommendations through to implementation.
• Strong client-facing consulting skills, with the ability to challenge constructively and communicate clearly with senior stakeholders.

Experience with CNI, OT environments, third-party risk or wider resilience programmes would be valuable. UK right to work and eligibility for UK Security Check (SC) clearance are required.

Invest in your development

The consultancy is working towards NCSC Assured Cyber Security Consultancy (ACSC) status, making this an attractive time to join a business developing its risk and assurance capability.

For someone looking to deepen their risk management expertise or work towards Chartered Cyber Security Professional status, the role offers opportunities to build relevant experience through substantial client programmes and contribute to the development of the practice.

The business will fund relevant qualifications, including CISSP, CISM and ISO 27001 Lead Implementer or Lead Auditor, supporting your professional development alongside your client work.