GRC Security Consultant - Operational Security

Reference: spg9a4sg01zht7ihownx

We are seeking a GRC Security Consultant – Operational Security to support the development, implementation and continual improvement of security governance, risk and compliance activities. This role will work closely with technical and business stakeholders to ensure that operational security practices are effective, proportionate and aligned with relevant policies, standards and regulatory obligations.

You will assess security risks across operational processes, systems and services, documenting findings and working with control owners to agree practical remediation plans. Responsibilities will include supporting risk assessments, maintaining security registers, reviewing policies and procedures, monitoring control performance and preparing clear reports for management and governance forums.

The role will also involve coordinating security assurance activities, including internal reviews, third-party assessments and audit preparation. You will help track actions through to completion, provide guidance on control requirements and contribute to the ongoing improvement of security incident, vulnerability, access management, business continuity and change management processes.

The successful candidate will have experience in information security governance, risk management, compliance or operational assurance. You should be confident interpreting security requirements and translating them into clear, achievable actions for both technical and non-technical audiences. Experience of frameworks or standards such as ISO 27001, NIST, CIS Controls, COBIT or equivalent regulatory requirements would be advantageous.

Strong analytical, organisational and communication skills are essential, along with the ability to manage competing priorities and build effective relationships across an organisation. You will be comfortable challenging established practices constructively, working independently and contributing as part of a collaborative team. Relevant professional qualifications, such as CISM, CISSP, CRISC, ISO 27001 Lead Implementer or Lead Auditor, are desirable, although equivalent practical experience will be considered.

This is an excellent opportunity for a security professional who enjoys combining structured governance with practical operational improvement and wants to make a measurable contribution to the organisation’s security and resilience.

COMPETITIVE SALARY
Added 23/10/2026
Reference: spg9a4sg01zht7ihownx

GRC Security Consultant - Operational Security

Birmingham, England, United Kingdom Permanent Security Consultant

Other similar jobs

Security Consultant - Operational Security & GRC

Added 07/10/2026

We are seeking a Security Consultant specialising in Operational Security and Governance, Risk and Compliance (GRC) to help strengthen security capabilities across a complex and evolving technology environment. In this role, you will advise stakeholders on security risks, support the development and implementation of effective controls, and help ensure that operational practices align with relevant policies, standards and regulatory requirements. You will work closely with technology, risk, audit, privacy and business teams to promote practical, proportionate and sustainable security outcomes. Your responsibilities will include conducting security and risk assessments, identifying control gaps, maintaining risk and compliance documentation, and supporting remediation...

Learn more

Security Architect Consultant

Added 25/09/2026

We are seeking an experienced Security Architect Consultant to design, develop and oversee secure technology solutions across complex business and technical environments. In this role, you will work closely with stakeholders, engineering teams, project managers and third-party suppliers to understand business objectives, assess security risks and translate requirements into practical, scalable architecture. You will provide expert guidance throughout the solution lifecycle, from early concept and design through implementation, testing and operational handover. Your responsibilities will include defining security architecture principles, patterns and standards; conducting security reviews and threat modelling; identifying vulnerabilities and recommending appropriate controls; and ensuring that solutions align...

Learn more

Security Architect Consultant

Added 25/09/2026

We are seeking an experienced Security Architect Consultant to design, assess and improve secure technology environments across a range of business and technical domains. In this role, you will work closely with stakeholders, delivery teams and technology specialists to understand business needs, identify security risks and develop practical, scalable solutions. You will contribute to security strategy, architecture standards and governance while ensuring that proposed designs align with regulatory, operational and commercial requirements. Your responsibilities will include producing security architecture documentation, reference models, design principles and risk assessments; reviewing solution designs and technical proposals; and providing expert guidance across cloud, infrastructure,...

Learn more

Governance and Assurance Security Consulting Director/Lead

Added 23/10/2026

We are seeking an experienced Governance and Assurance Security Consulting Director/Lead to shape and deliver high-quality cyber security governance, risk and assurance services. This is a senior role requiring strong commercial awareness, technical credibility and the ability to build trusted relationships with executive stakeholders, clients and delivery teams. You will lead the development and delivery of security governance and assurance engagements, helping organisations understand their cyber risk and strengthen their control environments. Responsibilities will include defining security strategies, policies and operating models; overseeing risk assessments and control reviews; leading compliance and regulatory assurance activities; and providing practical recommendations aligned to...

Learn more

Business Information Security Officer

Added 15/10/2026

We are seeking a Business Information Security Officer to help strengthen information security across a complex and fast-moving organisation. Working closely with business leaders, technology teams and risk specialists, you will translate security requirements into practical, proportionate controls that support operational objectives. This is an influential role for someone who can build trusted relationships, communicate clearly with a wide range of stakeholders and promote a strong, risk-aware culture. Your responsibilities will include advising teams on information security risks, policies and standards; supporting security and privacy impact assessments; monitoring compliance with relevant legislation, regulatory expectations and internal controls; and helping to...

Learn more

Business Information Security Officer

Added 15/10/2026

We are seeking an experienced Business Information Security Officer to support the development, implementation and continuous improvement of information security across a complex business environment. This role will act as a trusted partner to business leaders, technology teams and operational stakeholders, helping to ensure that security risks are understood, managed and aligned with organisational objectives. You will provide practical advice on security controls, risk management and regulatory obligations, while promoting a strong culture of information security across the organisation. Key responsibilities will include maintaining information security policies, standards and procedures; conducting risk assessments and supporting the management of risk treatment...

Learn more

Security Engineer – Microsoft Purview, Endpoint & Data Protection

Added 02/10/2026

We are seeking a Security Engineer specialising in Microsoft Purview, endpoint security and data protection to help strengthen the organisation’s information security capabilities. In this role, you will design, implement and maintain security controls across Microsoft 365, endpoints and cloud environments, ensuring sensitive information is appropriately identified, classified, monitored and protected. You will work closely with infrastructure, identity, compliance and business teams to translate security requirements into practical, scalable solutions. Your responsibilities will include configuring and administering Microsoft Purview capabilities such as sensitivity labels, data loss prevention policies, retention policies, insider risk controls, information protection and audit functionality. You will...

Learn more

Security Engineer – Microsoft Purview, Endpoint & Data Protection

Added 02/10/2026

We are seeking a Security Engineer specialising in Microsoft Purview, endpoint security and data protection to strengthen enterprise-wide information security capabilities. This role will design, implement and maintain controls that protect sensitive data across cloud services, endpoints, applications and collaboration platforms. You will work closely with security, infrastructure, compliance and business teams to translate regulatory and operational requirements into practical technical solutions. Key responsibilities will include configuring and administering Microsoft Purview capabilities such as sensitivity labels, data loss prevention policies, retention and records management, insider risk controls, audit features and information protection workflows. You will help develop and enforce endpoint...

Learn more

Security Architect

Added 23/09/2026

We are seeking an experienced Security Architect to design, develop and maintain secure technology architectures across a complex and evolving IT environment. The successful candidate will define security principles, reference architectures, standards and patterns that support business objectives while protecting systems, applications, data and infrastructure. Working closely with engineering, infrastructure, cloud, software development and risk teams, you will translate business and technical requirements into practical, scalable security solutions. Key responsibilities will include conducting security architecture reviews, threat modelling and risk assessments for new and existing services; identifying vulnerabilities and recommending appropriate controls; and providing guidance on identity and access management,...

Learn more

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Learn more

GRC Cyber Security Consultant

Added 29/09/2026

We are seeking a GRC Cyber Security Consultant to support the development, implementation and continuous improvement of governance, risk and compliance practices across a complex technology environment. You will work closely with stakeholders across information security, technology, audit, legal, privacy and business operations to strengthen cyber resilience and ensure that security risks are identified, assessed and managed effectively. Key responsibilities will include conducting cyber and information security risk assessments; maintaining risk registers, policies, standards and control frameworks; supporting compliance with applicable laws, regulations and industry standards; and coordinating internal and external audit activities. You will help assess the effectiveness of...

Learn more

GRC Cyber Security Consultant

Added 25/09/2026

We are seeking a GRC Cyber Security Consultant to help organisations strengthen their governance, risk and compliance capabilities and improve their overall security posture. In this role, you will work with stakeholders across technology, risk, audit and business functions to assess cyber security maturity, identify areas for improvement and support the implementation of practical, risk-based solutions. You will contribute to consulting engagements from initial discovery through to delivery, ensuring that recommendations are clearly documented, achievable and aligned with business objectives. Key responsibilities will include conducting cyber security and information risk assessments; reviewing policies, standards, procedures and control frameworks; supporting compliance...

Learn more

GRC Cyber Security Consultant

Added 24/09/2026

We are seeking a GRC Cyber Security Consultant to support the development, implementation and continuous improvement of governance, risk and compliance practices across a complex technology environment. This role will work closely with business leaders, technology teams, risk functions and control owners to strengthen security governance, improve risk visibility and ensure that information security controls remain aligned with applicable standards, regulations and business objectives. Key responsibilities include conducting cyber security and technology risk assessments; maintaining risk registers, treatment plans, policies, standards and control frameworks; coordinating internal and external audits; and supporting compliance activities against frameworks such as ISO 27001, NIST,...

Learn more

GRC Audit & Assurance Consultant

Added 27/10/2026

We are seeking a GRC Audit & Assurance Consultant to support the delivery of governance, risk and compliance assessments across a range of business functions and technology environments. This role will help provide objective assurance that policies, controls and risk management practices are appropriately designed, implemented and maintained. You will plan and perform risk-based audits and assurance reviews, documenting objectives, scope, testing approaches and conclusions. Responsibilities will include reviewing policies and procedures, assessing control design and operating effectiveness, conducting interviews and walkthroughs, analysing evidence, and identifying opportunities to strengthen governance and compliance. You will prepare clear, well-structured reports for stakeholders,...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.