GRC Security Consultant - Operational Security
We are seeking a GRC Security Consultant – Operational Security to support the development, implementation and continual improvement of security governance, risk and compliance activities. This role will work closely with technical and business stakeholders to ensure that operational security practices are effective, proportionate and aligned with relevant policies, standards and regulatory obligations.
You will assess security risks across operational processes, systems and services, documenting findings and working with control owners to agree practical remediation plans. Responsibilities will include supporting risk assessments, maintaining security registers, reviewing policies and procedures, monitoring control performance and preparing clear reports for management and governance forums.
The role will also involve coordinating security assurance activities, including internal reviews, third-party assessments and audit preparation. You will help track actions through to completion, provide guidance on control requirements and contribute to the ongoing improvement of security incident, vulnerability, access management, business continuity and change management processes.
The successful candidate will have experience in information security governance, risk management, compliance or operational assurance. You should be confident interpreting security requirements and translating them into clear, achievable actions for both technical and non-technical audiences. Experience of frameworks or standards such as ISO 27001, NIST, CIS Controls, COBIT or equivalent regulatory requirements would be advantageous.
Strong analytical, organisational and communication skills are essential, along with the ability to manage competing priorities and build effective relationships across an organisation. You will be comfortable challenging established practices constructively, working independently and contributing as part of a collaborative team. Relevant professional qualifications, such as CISM, CISSP, CRISC, ISO 27001 Lead Implementer or Lead Auditor, are desirable, although equivalent practical experience will be considered.
This is an excellent opportunity for a security professional who enjoys combining structured governance with practical operational improvement and wants to make a measurable contribution to the organisation’s security and resilience.
GRC Security Consultant - Operational Security
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Cyber Security Engineer
- Interim Cyber Security Interna...
- Lead DevSecOps Engineer
- Data Privacy Specialist UK
- Security and Compliance Engine...
- GCIO Operations Manager - Cybe...
- Information Security Analyst
- Senior Director - DevOps Secur...
- Head of Information Security
- Lead Cloud Security Engineer
- Cyber Policy Lead
- IT Security Auditor