Information Security Consultant (GRC)

About the Role

Our client seeks an experienced Information Security Consultant with expertise in Governance, Risk, and Compliance (GRC) for their operations in Norwich . This role operates on a hybrid basis, requiring regular engagement with the client's team. You will be instrumental in assessing current security practices, identifying compliance gaps, and developing strategies to enhance the organization's risk management framework and adherence to regulatory standards. This is an excellent opportunity for a GRC specialist to drive significant improvements in security governance.

Key Responsibilities

• Conduct GRC assessments, including risk analysis, compliance audits, and policy reviews.
• Develop and implement robust risk management frameworks and processes.
• Ensure adherence to relevant industry standards and regulatory requirements (e.g., ISO 27001, GDPR, PCI DSS).
• Advise on security best practices and assist in the development of security policies and procedures.
• Facilitate security awareness training on GRC-related topics.
• Prepare reports and present findings and recommendations to senior management.
• Support the remediation of identified compliance and risk issues.

Requirements

• Proven experience as an Information Security Consultant with a strong GRC focus.
• In-depth knowledge of information security frameworks, risk management methodologies, and compliance regulations.
• Experience with conducting risk assessments and developing remediation plans.
• Familiarity with various security controls and technologies.
• Excellent analytical, reporting, and presentation skills.
• Strong interpersonal skills, with the ability to influence stakeholders at various levels.
• Relevant certifications such as CISA, CRISC, CISSP, or CGEIT are highly preferred.

Benefits

• Competitive daily rate commensurate with experience and expertise.
• Hybrid working model providing flexibility and collaboration.
• Exposure to diverse GRC challenges and solutions.
• Opportunity to contribute to critical security governance initiatives.
• Work with a reputable client known for its commitment to security.