Risk & Controls Consulting - Enterprise Security
Join a specialist team delivering risk and controls consulting across enterprise security environments. In this role, you will help organisations understand, manage and improve their information security, technology risk and control frameworks. You will work with stakeholders across business and technology functions to assess current capabilities, identify weaknesses and develop practical, sustainable solutions aligned with regulatory expectations and business objectives.
Your responsibilities will include planning and delivering risk and controls assessments, reviewing security policies and procedures, evaluating the design and operating effectiveness of controls, and documenting findings and recommendations. You will support activities such as access governance, identity and privileged access management, vulnerability and patch management, security monitoring, incident response, third-party risk, data protection and resilience. You will prepare clear reports and presentations for senior stakeholders, track remediation activity and provide advice on improving governance, risk management and control maturity. The role may also involve supporting audits, regulatory reviews, client engagements and the development of methodologies, tools and thought leadership materials.
We are looking for a confident professional with experience in enterprise security, technology risk, internal controls, IT audit or a related consulting environment. You should have a strong understanding of information security principles, risk assessment techniques, control frameworks and relevant standards such as ISO 27001, NIST, COBIT or similar. Experience interpreting regulatory requirements and translating them into practical control improvements is highly valued. Excellent analytical, communication and stakeholder management skills are essential, along with the ability to manage multiple priorities and produce high-quality written work. Professional certifications such as CISA, CISSP, CRISC, CISM or equivalent qualifications would be advantageous. This opportunity suits someone who combines technical curiosity with commercial awareness and enjoys helping organisations strengthen their security and control environments.
Risk & Controls Consulting - Enterprise Security
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Senior Manager, Business Infor...
- Senior Data Protection Manager
- Cyber Security Engineer
- PAM Consultant
- Associate Security Engineer
- GRC Consultant
- Cyber Security Manager
- Risk & Controls Analyst (Cyber...
- Security Analyst – Emerging Te...
- PAM Architect
- Senior GRC Analyst
- OT SIEM Engineer