Security Consultant

Cyber Risk Advisory GRC Consultant - (ISO27001, Cyber Essentials, NIST, Third Party Relationship Management) - REMOTE
Want to join a healthy, happy, collaborative, multicultural inclusive work environment? Our client could be your next employer!
We are working with a pure-play cyber security consultancy that is going through a period of significant growth.
In light of this expansion, we are in search of an enthusiastic and motivated Cyber GRC Risk Advisory Consultant.
The ideal candidates will have a broad range of cyber risk advisory skills including but not limited to Governance, Risk and Compliance, NIST, ISO 27001, Risk Assessments, Third-Party Risk Management / Supplier assessments and Cyber Essentials.
This is a superb opportunity for someone who is NOT getting the career progression/development and autonomy working in a large corporate tier 1 consulting firm.
With the right training and guidance, this role will allow you to own, lead and manage clients and the full delivery of the engagement.
As a GRC Risk Advisory Consultant, you will be responsible for advising clients across multiple industries on security and cyber risk, governance and maturity in the context of business and threats against it.
You will be responsible for identifying and assessing risks by conducting internal audits and gap analyses against security frameworks such as ISO 27001 and NIST, providing solutions to prevent threats affecting clients’ networks and improving the overall risk posture. You will also liaise with C-level stakeholders to discuss the client’s current risk posture and recommendations.
There are also training and career progression opportunities for those looking to develop their technical capability within MDR, specifically Sentinel as our client is also a Microsoft Solutions Partner.
Your responsibilities as a Cyber Risk GRC Consultant include but not limited to:
Advise customers on security and cyber risk, governance and maturity, in the context of business and threats against it
Reviewing the effectiveness of security controls and proposing proportionate security improvements and mitigations
Identification of security risks and familiarity with common control frameworks (NIST Cyber / Privacy Assessment)
Third-Party Relationship Management (TPRM) – conducting audits and risk assessments of client’s relationships with third-party suppliers
Delivery and implementation of compliance and audit frameworks
Help customers identify target security operating models and maturity, and work with senior client management to define and transform their business
Provide advice for the management of risks that you have identified
Identify areas for developing capability and collaborating internally to grow our capability and people.
Client Key Facts:
Extremely flexible on remote/hybrid working
Fun technical & social environment - Access to industry events globally
Fantastic training and development budget