GRC Audit & Assurance Consultant
We are seeking a GRC Audit & Assurance Consultant to support the delivery of governance, risk and compliance assessments across a range of business functions and technology environments. This role will help provide objective assurance that policies, controls and risk management practices are appropriately designed, implemented and maintained.
You will plan and perform risk-based audits and assurance reviews, documenting objectives, scope, testing approaches and conclusions. Responsibilities will include reviewing policies and procedures, assessing control design and operating effectiveness, conducting interviews and walkthroughs, analysing evidence, and identifying opportunities to strengthen governance and compliance. You will prepare clear, well-structured reports for stakeholders, outlining findings, root causes, risks and practical recommendations.
The successful candidate will work closely with control owners, risk teams, technology specialists and senior stakeholders to agree remediation plans and monitor progress. You will contribute to maintaining audit and assurance methodologies, risk and control libraries, testing schedules and management information. The role may also involve supporting regulatory, client or third-party assurance activities, responding to information requests and helping to embed a culture of continuous improvement.
Applicants should have experience in internal audit, IT audit, risk, compliance, information security or a related assurance environment. A sound understanding of governance and control frameworks such as ISO 27001, COBIT, NIST, ITIL, SOC 2 or equivalent is desirable. Relevant professional qualifications, or progress towards qualifications such as CISA, CRISC, CIA, CISM or an accountancy designation, would be advantageous.
You will need strong analytical and report-writing skills, excellent attention to detail and the confidence to challenge constructively. The ability to manage multiple assignments, prioritise effectively and communicate complex matters clearly to both technical and non-technical audiences is essential. A proactive, collaborative approach and a commitment to professional integrity are also expected.
GRC Audit & Assurance Consultant
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Cyber Security Engineer
- Interim Cyber Security Interna...
- Lead DevSecOps Engineer
- Data Privacy Specialist UK
- Security and Compliance Engine...
- GCIO Operations Manager - Cybe...
- Information Security Analyst
- Senior Director - DevOps Secur...
- Head of Information Security
- Lead Cloud Security Engineer
- Cyber Policy Lead
- IT Security Auditor