Cyber GRC Controls SME

Allscreens Nationwide Ltd; London; Hybrid; NOK 1,522,000 - 2,107,000; Part time

Benefits offered by this job

Hybrid working

Job summary

London / Hybrid: 8-10 Week Contract for a Cyber GRC Controls SME to support a strategic cyber security controls and governance initiative.

This role requires expertise in enterprise control framework design, control libraries, taxonomy, measurement, and framework mapping.

You will assess and enhance security controls, support governance activities, map controls to NIST CSF 2.0 and related standards, and engage with stakeholders.

Qualifications

• Strong background in cyber security, governance, risk and controls.
• Experience designing and enhancing enterprise security control frameworks.
• Experience developing and maintaining control libraries.
• Knowledge of control taxonomy and effectiveness measures.
• Experience mapping controls to NIST CSF 2.0.
• Experience supporting audits, assurance reviews and regulatory requirements.

Responsibilities

• Assess and enhance security controls across the enterprise.
• Support governance activities and regulatory requirements.
• Map controls to NIST CSF 2.0 and related standards.
• Identify control gaps, assess effectiveness and drive improvements.

Skills

Cyber security governance

Controls framework design

NIST CSF 2.0 mapping

Control libraries

Stakeholder management

Audit support

Regulatory requirements

Education

CISSP, CISM or CRISC

Job description

Cyber GRC Controls SME - NIST CSF 2.0, Controls Frameworks, Assurance

London / Hybrid

8-10 Week Contract

My client is an instantly recognisable organisation seeking a Cyber GRC Controls SME to support a strategic cyber security controls and governance initiative.This role requires expertise in enterprise cyber control framework design, control libraries, control taxonomy, control measurement, and framework mapping. You'll be responsible for assessing and enhancing security controls, supporting governance activities, and ensuring alignment to industry best practice.

Key Requirements

• Strong background in cyber security, governance, risk and controls
• Experience designing and enhancing enterprise security control frameworks
• Proven experience developing and maintaining control libraries
• Strong understanding of control taxonomy, control objectives and control effectiveness measures
• Experience mapping controls to NIST CSF 2.0
• Knowledge of NIST 800-53 and/or ISF Standards of Good Practice
• Experience supporting audits, assurance reviews and regulatory requirements
• Ability to identify control gaps, assess effectiveness and drive improvements
• Excellent stakeholder management and communication skills

Nice to Have

• CISSP, CISM or CRISC certification
• Experience within large enterprise or regulated environments
• Insurance sector experience