Senior Cybersecurity Consultant

Senior/Principal GRC Cybersecurity Consultant - Permanent - Hybrid (UK)

We're looking for a Senior/Principal GRC Cybersecurity Consultant to support organisations with their most complex cyber, information security, and operational resilience challenges. You'll work closely with boards, CISOs, and senior leadership teams, helping them strengthen their security posture, manage risk, and build long-term resilience.

Key Responsibilities

• Lead information security maturity assessments using industry frameworks and tailored methodologies.
• Design and deliver cyber security and resilience roadmaps aligned to business strategy and risk appetite.
• Conduct cyber risk assessments, Business Impact Assessments (BIA), and resilience reviews.
• Design, implement, and mature Information Security Management Systems (ISMS).
• Advise on security, privacy, and third-party risk frameworks (NIST, ISO, CAF, etc).

Required Skills & Experience

• 5+ years' experience in cyber security consulting or advisory roles.
• Strong background in GRC, cyber risk, and resilience programmes.
• Experience working with frameworks such as NIST, ISO 27001, CAF, MITRE, ISF or similar.
• Proven ability to engage and influence senior stakeholders and boards.
• Certifications such as CISSP, CISM, or similar are highly desirable.

Package:

• Reach out for information on the benefits and package.