Senior GRC Audit & Assurance Lead (Cyber Security)

NTT DATA; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

NTT DATA in the United Kingdom is seeking a Lead GRC Consultant to lead governance, risk, compliance and assurance across a complex cyber security programme. You will combine evidence-led assessment with remediation planning and senior-stakeholder engagement.

The role requires experience with structured gap assessments, CAF/eCAF frameworks and strong ability to produce defensible findings for executive audiences.

Qualifications

• PriCSP certification is mandatory for this role.
• Experience in cyber security governance, risk, compliance, assurance, audit or security maturity assessments.
• Experience delivering structured gap assessments against recognised cyber security frameworks and regulatory requirements.
• Experience with NCSC CAF/eCAF assessments or comparable frameworks.
• Strong evidence-assessment capability with traceability of evidence.
• Experience reviewing security policies, risk registers and control artefacts.
• Experience assessing control design and operating effectiveness.
• Strong stakeholder interviewing, workshop facilitation and challenge skills.
• Ability to write clear, defensible findings for executive, audit and regulatory audiences.
• Experience translating findings into remediation actions and evidence requirements.
• Experience operating in complex environments spanning business, IT and OT.

Responsibilities

• Lead GRC assessment and assurance activities across the programme scope with cross-functional inputs.
• Review policies, standards, procedures, artefacts and records to determine evidence of controls.
• Conduct gap assessments against regulatory, contractual and security-framework requirements.
• Review customer self-assessments and control assertions; identify supported or unsupported positions.
• Assess governance, risk management, policy frameworks, assurance processes and reporting.
• Facilitate interviews, workshops and challenge sessions with stakeholders.
• Maintain traceability between requirements, controls, evidence, findings and remediation actions.
• Develop evidence-based findings with criteria, observed condition and recommendations.
• Contribute to executive reporting, audit readiness and regulatory preparation.
• Coordinate with technical specialists to incorporate IT/OT findings into assessments.

Skills

GRC governance

Risk assessment

Audit & assurance

Stakeholder facilitation

Evidence-based findings

Education

PriCSP Certification

CISSP

CISM

CRISC

Tools

CAF/eCAF framework

Audit tools

Documentation templates

Job description

NTT DATA in the United Kingdom is seeking a Lead GRC Consultant to lead governance, risk, compliance and assurance across a complex cyber security programme. You will combine evidence-led assessment with remediation planning and senior-stakeholder engagement.

The role requires experience with structured gap assessments, CAF/eCAF frameworks and strong ability to produce defensible findings for executive audiences.