Cyber Security Consultant (GRC)

Salary: £49,000 - 89,000 per year

Requirements:

• Experience in cyber security GRC, information security consultancy, risk management or security assurance
• Strong understanding of cyber security governance, risk and compliance principles
• Practical experience with frameworks such as ISO 27001, NIST, Cyber Essentials or similar standards
• Experience conducting risk assessments, security assessments or compliance reviews
• Understanding of information security policies, controls, risk registers and assurance processes
• Ability to translate complex cyber security risks into clear, practical advice for clients
• Excellent written and verbal communication skills
• Strong stakeholder management and relationship-building abilities
• Experience in complex or regulated environments such as Financial Services, Government, Defence, Energy or Telecommunications is advantageous
• A consulting mindset and ability to understand client requirements and deliver commercially pragmatic solutions

Responsibilities:

• Conduct cyber security and information security maturity assessments
• Identify, analyse and manage cyber and information security risks
• Support the development and implementation of security governance and risk management frameworks
• Review security control effectiveness and recommend proportionate improvements
• Assess clients against recognised standards and frameworks, including ISO 27001, NIST and similar methodologies
• Support ISO 27001 implementation, readiness and assurance activities
• Develop risk registers, treatment plans, policies, standards and security documentation
• Conduct risk assessments, gap analyses and security assurance reviews
• Lead client workshops and interviews to understand business processes, risks and security requirements
• Produce reports and present findings and recommendations to technical teams and senior stakeholders
• Support clients in developing and maintaining effective information security management practices
• Monitor changes across the regulatory and cyber security landscape
• Support business development, including contributing to proposals and client engagements

Technologies:

• Support
• Security

More:

We are partnering with a growing cyber security consultancy to add a GRC Consultant to its Governance, Risk and Compliance capability. The role offers varied client engagements across complex and regulated environments, working alongside a close-knit team of cyber security and GRC specialists. We value integrity, collaboration, meaningful client outcomes, expertise and individual contribution, and offer a supportive environment for career development. The position pays £40,000–£52,000 depending on experience and is based in London on a hybrid basis, with occasional travel to client sites when required. Oscar Associates (UK) Limited is acting as an employment agency for this vacancy.

last updated 39 week of 2026