Senior GRC Advisor: Governance, Risk & Compliance

Mishcon de Reya LLP; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Mishcon de Reya LLP in London seeks an experienced Senior GRC Consultant to deliver governance, risk management, and compliance advisory across a portfolio of clients. You will operate client-facing with autonomy and rigour, maturing client GRC capabilities and embedding sustainable improvements.

You will mentor a Cyber GRC Analyst and drive KPI metrics, governance frameworks, and regulatory alignment across engagements.

Qualifications

• 5+ years' experience in a GRC, risk management, information security, or compliance role, at senior/lead level in consulting.
• Strong working knowledge of governance and risk management frameworks (ISO 27001, ISO 31000, NIST CSF, COBIT).
• Experience conducting risk assessments, compliance audits, and gap analyses.
• Experience with regulators, external auditors, and certification bodies; familiarity with GDPR, NIS2, PCI DSS, FCA regulations.

Responsibilities

• Governance: develop and uplift governance frameworks, policies, procedures; prepare board-level reporting.
• Risk Management: deliver enterprise-wide cyber risk assessments and maintain risk registers; advise on risk mitigation.
• Compliance: monitor posture against GDPR, ISO 27001, SOC 2, PCI DSS; design audits and gap analyses.
• Stakeholder Engagement & Advisory: advise senior leadership; collaborate with IT, Legal, Data Protection; provide training.
• Reporting & Metrics: build GRC dashboards, KRIs, KPIs; report to management, audit committees, board.

Skills

GRC governance

Risk management

Regulatory compliance

Stakeholder engagement

Client facing

Mentoring

Communication

Tools

ServiceNow GRC

OneTrust

Archer

Job description

Mishcon de Reya LLP in London seeks an experienced Senior GRC Consultant to deliver governance, risk management, and compliance advisory across a portfolio of clients. You will operate client-facing with autonomy and rigour, maturing client GRC capabilities and embedding sustainable improvements.

You will mentor a Cyber GRC Analyst and drive KPI metrics, governance frameworks, and regulatory alignment across engagements.