SOC Analyst - Hybrid

MastarRec; United Kingdom; On-site; GBP 65,000 - 85,000; Full time

Job summary

A leading cybersecurity consultancy in the United Kingdom is seeking a GRC Consultant to support clients in managing cyber risks and ensuring compliance with industry standards. You will advise on governance frameworks, perform risk assessments, and develop information security policies. The ideal candidate will have a strong background in ISO 27001, NIST, GDPR, and experience with GRC platforms. This role offers a competitive salary and the opportunity to work with diverse clients.

Qualifications

• In-depth knowledge of ISO 27001, NIST CSF, GDPR, and risk management frameworks.
• Experience performing security risk assessments, internal audits, and compliance reviews.
• Strong understanding of cybersecurity controls and regulatory mandates.

Responsibilities

• Advise clients on cybersecurity governance and compliance frameworks.
• Perform risk assessments and control gap analyses.
• Develop and implement information security policies and procedures.

Skills

ISO 27001 knowledge

NIST CSF

GDPR familiarity

Risk management frameworks

Client communication

Stakeholder management

Tools

RSA Archer

ServiceNow GRC

LogicGate

Job description

Salary: GBP65,000 – 85,000 per year

Requirements

• In–depth knowledge of ISO 27001, NIST CSF, GDPR, and risk management frameworks
• Experience performing security risk assessments, internal audits, and compliance reviews
• Strong understanding of cybersecurity controls, regulatory mandates, and business risk alignment
• Excellent client communication, stakeholder management, and reporting skills
• Familiarity with GRC platforms (e.g., RSA Archer, ServiceNow GRC, LogicGate)

Responsibilities

• Advise clients on cybersecurity governance, risk management, and compliance frameworks
• Perform risk assessments, control gap analyses, and audits (ISO 27001, SOC 2, etc.)
• Develop and implement information security policies, procedures, and risk registers
• Lead client engagements related to GDPR, DORA, and other regulatory requirements
• Support third–party vendor risk assessments and due diligence activities
• Prepare reports and recommendations for CISO, board, and audit committee presentations

Technologies

• Support
• Security
• ServiceNow
• API
• AWS
• Azure
• GCP

Job Description

We are seeking an experienced GRC Consultant to support and advise clients in managing cyber risks, ensuring compliance with industry standards, and implementing robust information security governance frameworks. You will work across multiple sectors, helping clients improve their risk posture through audit readiness, control assessments, policy development, and regulatory compliance.
The ideal candidate will have deep knowledge of security frameworks (ISO 27001, NIST, CIS), regulatory mandates (GDPR, DORA, PCI DSS), and a strategic approach to enterprise–level governance and risk programs.

last updated 45 week of 2025