Job Search

We are seeking an experienced GRC Consultant to support the development, implementation and continuous improvement of governance, risk and compliance frameworks. Working with stakeholders across the organisation, you will provide pragmatic advice that strengthens control environments, supports informed decision-making and helps ensure compliance with relevant legislation, regulations, standards and internal policies.

Your responsibilities will include conducting risk assessments, control reviews and compliance gap analyses; maintaining risk registers, policies, procedures and control documentation; and supporting the design and delivery of governance frameworks. You will coordinate audit and assurance activities, track remediation plans and prepare clear reports for senior stakeholders. The role will also involve monitoring regulatory developments, assessing their potential impact, contributing to third-party risk management and supporting the delivery of awareness and training initiatives. You will be expected to challenge effectively, identify opportunities for improvement and help embed a culture of accountability and continuous improvement.

The successful candidate will have demonstrable experience in governance, risk and compliance, ideally within a regulated, technology-led or complex environment. You will have a strong understanding of risk management principles, internal controls, audit methodologies and relevant frameworks such as ISO 27001, ISO 31000, COBIT, NIST or equivalent. Experience of working with data protection, information security, business continuity or third-party assurance would be advantageous. Strong analytical, organisational and communication skills are essential, along with the ability to translate complex requirements into practical actions for a range of audiences. Professional qualifications such as CISA, CRISC, CISM, CISSP, ISO 27001 Lead Implementer or Auditor, or a relevant risk and compliance qualification, would be welcomed. You must be confident working independently, managing competing priorities and building constructive relationships at all levels.

We are seeking a Security Consultant specialising in Operational Security and Governance, Risk and Compliance (GRC) to help strengthen security capabilities across a complex and evolving technology environment. In this role, you will advise stakeholders on security risks, support the development and implementation of effective controls, and help ensure that operational practices align with relevant policies, standards and regulatory requirements. You will work closely with technology, risk, audit, privacy and business teams to promote practical, proportionate and sustainable security outcomes.

Your responsibilities will include conducting security and risk assessments, identifying control gaps, maintaining risk and compliance documentation, and supporting remediation planning and tracking. You will contribute to the development, review and implementation of security policies, standards, procedures and control frameworks. The role will also involve supporting internal and external audits, preparing management reports, monitoring key risk indicators, and providing guidance on incident management, vulnerability management, access control, third-party risk and business continuity. You may also participate in security assurance activities, control testing, operational reviews and the delivery of security awareness initiatives.

To succeed, you will have experience in information security, operational security, risk management, audit or GRC, ideally within a regulated or complex organisation. You should be familiar with recognised frameworks and standards such as ISO 27001, NIST, COBIT or CIS Controls, as well as common data protection and regulatory principles. Strong analytical, communication and stakeholder management skills are essential, along with the ability to translate technical risks into clear business impacts and actionable recommendations. Relevant professional certifications, such as CISM, CISSP, CRISC, ISO 27001 Lead Implementer or Lead Auditor, are desirable. You will be organised, pragmatic and confident working independently while collaborating effectively across multiple teams and priorities.

We are seeking a GRC Cyber Security Consultant to support the development, implementation and continuous improvement of governance, risk and compliance practices across a complex technology environment. You will work closely with stakeholders across information security, technology, audit, legal, privacy and business operations to strengthen cyber resilience and ensure that security risks are identified, assessed and managed effectively.

Key responsibilities will include conducting cyber and information security risk assessments; maintaining risk registers, policies, standards and control frameworks; supporting compliance with applicable laws, regulations and industry standards; and coordinating internal and external audit activities. You will help assess the effectiveness of security controls, identify gaps, develop remediation plans and track actions through to completion. The role will also involve contributing to third-party and supplier risk assessments, reviewing security requirements for new projects and services, preparing governance reports, and presenting risk and compliance matters to senior stakeholders. You may also support incident management reviews, security awareness initiatives and the ongoing development of metrics and key performance indicators.

The successful candidate will have professional experience in cyber security governance, risk or compliance, ideally within a regulated or complex organisation. You should have a strong understanding of recognised frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, COBIT or CIS Controls, together with practical experience in control assessment, risk analysis, audit support and policy development. Relevant certifications such as CISA, CISM, CRISC, CISSP or ISO 27001 Lead Implementer/Auditor are advantageous. Excellent communication, stakeholder management, analytical and report-writing skills are essential, as is the ability to translate technical risks into clear business language and manage multiple priorities in a collaborative environment.

We are seeking a GRC Cyber Security Consultant to help organisations strengthen their governance, risk and compliance capabilities and improve their overall security posture. In this role, you will work with stakeholders across technology, risk, audit and business functions to assess cyber security maturity, identify areas for improvement and support the implementation of practical, risk-based solutions. You will contribute to consulting engagements from initial discovery through to delivery, ensuring that recommendations are clearly documented, achievable and aligned with business objectives.

Key responsibilities will include conducting cyber security and information risk assessments; reviewing policies, standards, procedures and control frameworks; supporting compliance and regulatory readiness activities; and developing risk registers, treatment plans, audit evidence and management reports. You will help clients map controls to recognised frameworks and standards, such as ISO 27001, NIST Cybersecurity Framework, CIS Controls or applicable regulatory requirements. The role may also involve facilitating workshops, interviewing control owners, analysing gaps, preparing remediation roadmaps and tracking actions through to completion. You will be expected to communicate complex security and compliance matters clearly to both technical and non-technical audiences.

The successful candidate will have professional experience in governance, risk, compliance, cyber security, information assurance or a closely related discipline. You should have a sound understanding of security controls, risk management principles, audit methodology and relevant industry standards. Experience producing high-quality written reports, client deliverables and executive-level presentations is essential, alongside strong analytical, organisational and stakeholder-management skills. Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor, or equivalent practical experience, would be advantageous. A proactive, collaborative approach and the ability to manage competing priorities in a consulting environment are also important.

We are seeking a GRC Cyber Security Consultant to support the development, implementation and continuous improvement of governance, risk and compliance practices across a complex technology environment. This role will work closely with business leaders, technology teams, risk functions and control owners to strengthen security governance, improve risk visibility and ensure that information security controls remain aligned with applicable standards, regulations and business objectives.

Key responsibilities include conducting cyber security and technology risk assessments; maintaining risk registers, treatment plans, policies, standards and control frameworks; coordinating internal and external audits; and supporting compliance activities against frameworks such as ISO 27001, NIST, CIS Controls or similar. You will assess the effectiveness of security controls, identify gaps, develop practical remediation plans and track actions through to completion. The role will also contribute to third-party risk assessments, security exception management, business continuity and resilience initiatives, regulatory responses, and the preparation of clear reports and dashboards for senior stakeholders. You may also support security awareness, policy reviews and the design of governance processes for new technologies and services.

The successful candidate will have experience in cyber security governance, risk or compliance, ideally within a regulated, enterprise or technology-focused environment. You should have a strong understanding of security principles, risk management methodologies, control testing and audit processes, with practical knowledge of recognised frameworks and relevant data protection or cyber security regulations. Professional certifications such as CISA, CISM, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor are desirable. Excellent communication, analytical and stakeholder management skills are essential, along with the ability to translate technical risks into clear business impacts and recommendations. You will be organised, proactive and comfortable managing multiple priorities while working collaboratively across diverse teams.

We are seeking a Senior / Managing SAP GRC & IAM Consultant to lead the design, implementation and continuous improvement of SAP governance, risk and compliance, identity and access management solutions. You will work closely with business stakeholders, IT teams, security functions and project leadership to deliver secure, compliant and practical access models across complex SAP environments. The role offers the opportunity to provide strategic direction while remaining engaged in hands-on delivery, solution architecture and client-facing consulting.

Your responsibilities will include assessing existing SAP security and access-control landscapes; designing and implementing SAP GRC Access Control, Risk Management and Process Control solutions; and developing role concepts, segregation-of-duties frameworks, access-risk rules and emergency-access procedures. You will lead requirements gathering, workshops, solution design, configuration, testing, documentation and deployment activities. The role will also involve supporting IAM integration across SAP and non-SAP applications, improving joiner, mover and leaver processes, advising on user lifecycle management, and establishing effective governance, controls and reporting. As a senior member of the team, you will oversee workstreams, manage delivery risks, mentor consultants and contribute to proposals, estimates and account development.

You should bring substantial professional experience in SAP GRC, SAP security and IAM, ideally gained across large-scale transformation or managed-service environments. Strong knowledge of SAP S/4HANA, ECC, Fiori, BW and relevant integration technologies is highly desirable, together with experience in role design, authorisations, access-risk analysis and audit remediation. Familiarity with identity platforms, automated provisioning, workflow technologies and security standards will be an advantage. You will be confident engaging with stakeholders at all levels, translating regulatory and business requirements into sustainable technical solutions, and leading teams through complex change. Excellent communication skills, a structured consulting approach and the ability to work independently are essential. Relevant SAP, GRC, IAM or security certifications would be beneficial.

We are seeking an experienced Lead Cybersecurity GRC Consultant to provide strategic guidance across governance, risk and compliance initiatives. In this role, you will help strengthen the organisation’s security posture by developing and maintaining cybersecurity policies, standards, procedures and control frameworks aligned with recognised industry practices and regulatory requirements. You will work closely with technology, risk, legal, audit and business stakeholders to translate security objectives into practical, measurable and sustainable outcomes.

Your responsibilities will include leading cybersecurity risk assessments, control evaluations, compliance reviews and third-party risk assessments; identifying gaps; and recommending prioritised remediation plans. You will coordinate evidence collection and responses for internal and external audits, track control effectiveness and provide clear reporting to senior leadership. The role will also involve supporting regulatory and customer assurance activities, maintaining risk registers, advising on security requirements for projects and suppliers, and contributing to the continuous improvement of governance processes. You will mentor consultants and colleagues, promote a strong culture of accountability, and lead workshops to improve awareness of cybersecurity risk and control ownership.

To be successful, you will have substantial experience in cybersecurity governance, risk and compliance, with a strong understanding of frameworks such as ISO 27001, NIST CSF, COBIT or similar. Experience with regulatory obligations, privacy principles, security control testing, audit management and third-party risk is highly desirable. Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor are advantageous. You will bring excellent analytical, communication and stakeholder management skills, with the ability to present complex information clearly to both technical and non-technical audiences. A proactive, collaborative approach, strong attention to detail and the confidence to influence at all levels are essential.

We are seeking an experienced Lead Cybersecurity GRC Consultant to provide strategic direction and hands-on leadership across governance, risk and compliance activities. In this role, you will advise senior stakeholders on cybersecurity risk, regulatory obligations and control effectiveness, while helping to strengthen security governance and embed sustainable risk management practices across the organisation. You will lead complex engagements from assessment through to remediation, ensuring that security objectives are aligned with business priorities.

Key responsibilities will include developing and maintaining cybersecurity policies, standards, frameworks and control libraries; conducting risk assessments, control reviews, maturity assessments and compliance gap analyses; and preparing clear reports, risk registers and remediation plans for executive and audit audiences. You will coordinate internal and external audits, support regulatory and client assurance activities, and monitor the timely resolution of findings. The role will also involve mapping controls to recognised frameworks and regulations such as ISO 27001, NIST CSF, SOC 2, PCI DSS and applicable privacy requirements. You will lead workshops, mentor colleagues and collaborate closely with technology, privacy, legal, procurement, internal audit and business teams.

The successful candidate will have substantial experience in cybersecurity governance, risk and compliance, ideally gained in a consulting, advisory or enterprise environment. You will bring strong knowledge of information security frameworks, risk methodologies, audit processes and regulatory expectations, together with the ability to translate technical issues into practical business recommendations. Relevant certifications such as CISSP, CISM, CRISC, CGEIT, ISO 27001 Lead Implementer or Lead Auditor are desirable. Excellent communication, stakeholder management, analytical and report-writing skills are essential, as is the confidence to influence at senior levels and manage multiple priorities. A proactive, collaborative approach and a commitment to continuous improvement will be highly valued.

We are seeking a Lead Cybersecurity GRC Consultant to provide strategic leadership across governance, risk, and compliance initiatives. This role will help strengthen the organisation’s cybersecurity posture by translating business objectives, regulatory obligations, and industry standards into practical security policies, controls, and improvement programmes. You will work closely with technology, risk, legal, audit, privacy, and business stakeholders to promote a consistent, risk-based approach to information security.

Key responsibilities include leading cybersecurity risk assessments, control reviews, maturity assessments, and remediation planning; maintaining and improving security governance frameworks; and supporting compliance with applicable regulations, contractual requirements, and recognised standards such as ISO 27001, NIST, CIS, or SOC 2. You will coordinate internal and external audits, manage evidence collection, track findings and corrective actions, and prepare clear reports for senior leadership and risk committees. The role will also contribute to third-party risk management, policy development, security exception processes, metrics and dashboards, business continuity activities, and the ongoing enhancement of the cybersecurity control environment.

The successful candidate will have substantial experience in cybersecurity governance, risk, and compliance, ideally gained in a complex or regulated environment. You will be confident interpreting regulatory and assurance requirements, assessing control effectiveness, and communicating risk clearly to both technical and non-technical audiences. Strong stakeholder management, consulting, analytical, and written communication skills are essential, along with the ability to lead initiatives, influence decision-making, and manage competing priorities. Relevant professional certifications such as CISSP, CISM, CRISC, CGEIT, ISO 27001 Lead Implementer or Auditor, or equivalent experience are desirable. A pragmatic, collaborative approach and a commitment to continuous improvement will be important for success in this position.

We are seeking an experienced Lead Cybersecurity GRC Consultant to provide strategic guidance across governance, risk and compliance activities. In this role, you will lead the development, implementation and continuous improvement of cybersecurity policies, standards, procedures and control frameworks. You will work closely with technology, security, legal, privacy, audit and business stakeholders to ensure that security risks are identified, assessed and managed in line with organisational objectives and regulatory expectations.

Key responsibilities include leading enterprise security risk assessments, maintaining risk registers and treatment plans, and advising on appropriate mitigation strategies. You will coordinate internal and external audits, support regulatory and client assurance activities, and oversee the collection and validation of evidence for compliance reviews. The role will also involve mapping controls to recognised frameworks and standards such as ISO 27001, NIST, SOC 2 and relevant data protection requirements. You will prepare clear reports for senior leadership, communicate complex risk matters to non-technical audiences, and mentor colleagues involved in cybersecurity governance and assurance. You may also contribute to third-party risk management, security assessments for new initiatives, metrics development and the continuous improvement of GRC processes and tooling.

The successful candidate will have significant experience in cybersecurity governance, risk management, compliance, audit or assurance, ideally within a complex or regulated environment. Strong knowledge of security frameworks, control design, risk methodologies and regulatory obligations is essential, together with practical experience managing audits and stakeholder relationships. Professional certifications such as CISA, CISM, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor are desirable. You will be confident working independently, managing competing priorities and influencing stakeholders at all levels. Excellent written and verbal communication skills, sound judgement, attention to detail and the ability to translate technical issues into clear business risks are required.