Senior GRC Consultant

Summary

Join our highly skilled Cyber Security Team as a Senior GRC Consultant to contribute to information security consultancy, conduct ISO 27001 audits, and engage in risk management with opportunities for growth into diverse fields.

Requirements

• Recognized ISO 27001 Lead Auditor qualification
• Significant experience in auditing ISO 27001 based Information Security Management Systems
• Significant experience in consulting and implementing Information Security Management Systems
• Strong knowledge of European regulatory frameworks such as the GDPR, MiFID II, AMLD, and local regulations
• Significant previous IT experience
• Ability to assess the impact of regulatory changes and advise clients on best practices
• Experience of working as the lead auditor or consultant and of working in teams
• Outstanding verbal communication skills
• Excellent report writing skills with the ability to explain information security risks to non-technical senior stakeholders
• Proven project management experience in executing GRC projects within complex organizations
• Ability to handle multiple projects and deadlines, ensuring timely delivery of compliance programs

Responsibilities

• Contribute to our information security consultancy
• Work on information security assessments within sizeable projects
• Conduct ISO 27001 audits
• Help implement aspects of ISO 27001
• Engage in risk management

Preferred Qualifications

• Information security qualifications such as CISSP, CISA, or CISM
• Familiarity with GRC cloud-based systems
• Experience of PCI DSS or a PCI QSA
• Experience auditing SWIFT CSCF

Benefits

• Hybrid working environment that supports working remotely
• Private health insurance
• Eye care plan
• Employee benefits and discounts platform
• Cycle to Work scheme
• EAP scheme and well-being platform, including confidential telephone and face to face support and counselling
• Income Protection if unable to work due to illness or injury