Security Consultant - Operational Security & GRC

Reference: wb6rs8r5p3qqdtwhwwcs

We are seeking a Security Consultant specialising in Operational Security and Governance, Risk and Compliance (GRC) to help strengthen security capabilities across a complex and evolving technology environment. In this role, you will advise stakeholders on security risks, support the development and implementation of effective controls, and help ensure that operational practices align with relevant policies, standards and regulatory requirements. You will work closely with technology, risk, audit, privacy and business teams to promote practical, proportionate and sustainable security outcomes.

Your responsibilities will include conducting security and risk assessments, identifying control gaps, maintaining risk and compliance documentation, and supporting remediation planning and tracking. You will contribute to the development, review and implementation of security policies, standards, procedures and control frameworks. The role will also involve supporting internal and external audits, preparing management reports, monitoring key risk indicators, and providing guidance on incident management, vulnerability management, access control, third-party risk and business continuity. You may also participate in security assurance activities, control testing, operational reviews and the delivery of security awareness initiatives.

To succeed, you will have experience in information security, operational security, risk management, audit or GRC, ideally within a regulated or complex organisation. You should be familiar with recognised frameworks and standards such as ISO 27001, NIST, COBIT or CIS Controls, as well as common data protection and regulatory principles. Strong analytical, communication and stakeholder management skills are essential, along with the ability to translate technical risks into clear business impacts and actionable recommendations. Relevant professional certifications, such as CISM, CISSP, CRISC, ISO 27001 Lead Implementer or Lead Auditor, are desirable. You will be organised, pragmatic and confident working independently while collaborating effectively across multiple teams and priorities.

COMPETITIVE SALARY
Added 07/10/2026
Reference: wb6rs8r5p3qqdtwhwwcs

Security Consultant - Operational Security & GRC

London, England, United Kingdom Permanent Security Consultant

Other similar jobs

Security Architect Consultant

Added 25/09/2026

We are seeking an experienced Security Architect Consultant to design, develop and oversee secure technology solutions across complex business and technical environments. In this role, you will work closely with stakeholders, engineering teams, project managers and third-party suppliers to understand business objectives, assess security risks and translate requirements into practical, scalable architecture. You will provide expert guidance throughout the solution lifecycle, from early concept and design through implementation, testing and operational handover. Your responsibilities will include defining security architecture principles, patterns and standards; conducting security reviews and threat modelling; identifying vulnerabilities and recommending appropriate controls; and ensuring that solutions align...

Learn more

Security Architect Consultant

Added 25/09/2026

We are seeking an experienced Security Architect Consultant to design, assess and improve secure technology environments across a range of business and technical domains. In this role, you will work closely with stakeholders, delivery teams and technology specialists to understand business needs, identify security risks and develop practical, scalable solutions. You will contribute to security strategy, architecture standards and governance while ensuring that proposed designs align with regulatory, operational and commercial requirements. Your responsibilities will include producing security architecture documentation, reference models, design principles and risk assessments; reviewing solution designs and technical proposals; and providing expert guidance across cloud, infrastructure,...

Learn more

Business Information Security Officer

Added 15/10/2026

We are seeking a Business Information Security Officer to help strengthen information security across a complex and fast-moving organisation. Working closely with business leaders, technology teams and risk specialists, you will translate security requirements into practical, proportionate controls that support operational objectives. This is an influential role for someone who can build trusted relationships, communicate clearly with a wide range of stakeholders and promote a strong, risk-aware culture. Your responsibilities will include advising teams on information security risks, policies and standards; supporting security and privacy impact assessments; monitoring compliance with relevant legislation, regulatory expectations and internal controls; and helping to...

Learn more

Business Information Security Officer

Added 15/10/2026

We are seeking an experienced Business Information Security Officer to support the development, implementation and continuous improvement of information security across a complex business environment. This role will act as a trusted partner to business leaders, technology teams and operational stakeholders, helping to ensure that security risks are understood, managed and aligned with organisational objectives. You will provide practical advice on security controls, risk management and regulatory obligations, while promoting a strong culture of information security across the organisation. Key responsibilities will include maintaining information security policies, standards and procedures; conducting risk assessments and supporting the management of risk treatment...

Learn more

Security Engineer – Microsoft Purview, Endpoint & Data Protection

Added 02/10/2026

We are seeking a Security Engineer specialising in Microsoft Purview, endpoint security and data protection to help strengthen the organisation’s information security capabilities. In this role, you will design, implement and maintain security controls across Microsoft 365, endpoints and cloud environments, ensuring sensitive information is appropriately identified, classified, monitored and protected. You will work closely with infrastructure, identity, compliance and business teams to translate security requirements into practical, scalable solutions. Your responsibilities will include configuring and administering Microsoft Purview capabilities such as sensitivity labels, data loss prevention policies, retention policies, insider risk controls, information protection and audit functionality. You will...

Learn more

Security Engineer – Microsoft Purview, Endpoint & Data Protection

Added 02/10/2026

We are seeking a Security Engineer specialising in Microsoft Purview, endpoint security and data protection to strengthen enterprise-wide information security capabilities. This role will design, implement and maintain controls that protect sensitive data across cloud services, endpoints, applications and collaboration platforms. You will work closely with security, infrastructure, compliance and business teams to translate regulatory and operational requirements into practical technical solutions. Key responsibilities will include configuring and administering Microsoft Purview capabilities such as sensitivity labels, data loss prevention policies, retention and records management, insider risk controls, audit features and information protection workflows. You will help develop and enforce endpoint...

Learn more

Security Architect

Added 23/09/2026

We are seeking an experienced Security Architect to design, develop and maintain secure technology architectures across a complex and evolving IT environment. The successful candidate will define security principles, reference architectures, standards and patterns that support business objectives while protecting systems, applications, data and infrastructure. Working closely with engineering, infrastructure, cloud, software development and risk teams, you will translate business and technical requirements into practical, scalable security solutions. Key responsibilities will include conducting security architecture reviews, threat modelling and risk assessments for new and existing services; identifying vulnerabilities and recommending appropriate controls; and providing guidance on identity and access management,...

Learn more

Lead Security Technical Architect - Telecoms

Added 26/08/2026

We are seeking a Lead Security Technical Architect to define and deliver secure, resilient architecture across complex telecommunications environments. This senior role will provide technical leadership across network, cloud, infrastructure, applications and operational technology, ensuring security is embedded throughout the design, delivery and transformation lifecycle. You will work closely with engineering, product, delivery, risk and operational teams to translate business and regulatory requirements into practical, scalable security solutions. Your responsibilities will include developing and maintaining security architecture principles, standards, reference models and roadmaps; leading the design of secure telecoms networks, 5G and associated platforms; assessing emerging technologies and identifying security...

Learn more

Security Architect

Added 26/08/2026

We are seeking an experienced Security Architect to design, develop and maintain secure technology architectures across a complex, evolving environment. You will provide expert guidance on security strategy, architecture principles and risk management, ensuring that applications, infrastructure, networks, cloud services and data platforms are designed and operated in line with recognised security standards. Working closely with technology, engineering, product and risk teams, you will translate business and technical requirements into practical, resilient security solutions. Your responsibilities will include defining security architecture patterns and reference designs; reviewing proposed solutions and identifying security risks; contributing to threat modelling, vulnerability management and secure-by-design...

Learn more

Business Information Security officer (BISO)

Added 18/08/2026

We are seeking a dedicated Business Information Security Officer (BISO) to join our dynamic team. In this role, you will be responsible for overseeing the organization's information security strategy, ensuring that data protection measures are effectively implemented and maintained. You will serve as a key liaison between the business units and the information security team, facilitating communication on security policies, risks, and compliance requirements. Your expertise will be vital in identifying potential security threats and developing strategies to mitigate risks while supporting the organization’s business objectives. The ideal candidate will have a strong background in information security management, including risk...

Learn more

Chief Information Security Officer

Added 18/08/2026

We are seeking a highly skilled Chief Information Security Officer (CISO) to lead our organization's information security strategy and ensure the protection of our digital assets. The ideal candidate will be responsible for developing and implementing a comprehensive security program that aligns with business objectives while safeguarding sensitive information against internal and external threats. This role requires a deep understanding of cybersecurity frameworks, risk management, and compliance requirements, as well as the ability to communicate security policies effectively across all levels of the organization. The CISO will oversee the design and implementation of security solutions, conduct regular security assessments, and...

Learn more

Lead Technical Security Architect - Telecoms

Added 18/08/2026

We are seeking a highly skilled Lead Technical Security Architect with a strong background in telecoms to join our innovative team. In this role, you will be responsible for defining and implementing security architecture strategies that align with the organization's goals while safeguarding critical telecommunications infrastructure. You will lead security assessments, design security solutions, and ensure compliance with industry regulations and standards. Collaborating with cross-functional teams, you will develop security policies, standards, and guidelines that protect sensitive data and networks against emerging threats. The ideal candidate will possess deep expertise in security frameworks, risk management, and best practices in telecom...

Learn more

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Learn more

Operational Technology Cyber Security Consultant (All Levels)

Added 02/09/2026

We are seeking Operational Technology Cyber Security Consultants at all levels to support the assessment, design and improvement of cyber security across industrial control systems, operational technology (OT) environments and critical infrastructure. You will work with clients and internal stakeholders to understand their operational needs, identify cyber risks and develop practical, risk-based solutions that protect safety, availability and business continuity. The role offers opportunities for professionals ranging from early-career consultants to experienced specialists and technical leads. Responsibilities may include conducting OT cyber security assessments, maturity reviews and gap analyses; developing and implementing security strategies, policies, standards and roadmaps; supporting network...

Learn more

Senior Operational Technology (OT) Security Consultant

Added 02/09/2026

We are seeking a Senior Operational Technology (OT) Security Consultant to provide expert guidance on protecting industrial control systems, critical infrastructure, and connected operational environments. You will work with clients and internal stakeholders to assess OT security maturity, identify vulnerabilities, define improvement roadmaps, and support the implementation of effective security controls. The role requires a strong understanding of the differences between IT and OT environments, including the importance of safety, availability, reliability, and operational continuity. Your responsibilities will include leading OT security assessments, risk and threat analyses, architecture reviews, and site-based evaluations. You will develop and review policies, standards, procedures,...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.