Senior Cyber Risk Advisory Consultant | Cyber GRC & Transformation

Senior Cyber Risk Advisory Consultant | Cyber GRC & Transformation

Up to £70,000 base + up to 10% bonus

Remote-first UK | Occasional client and office travel

Funded certifications: CISSP, CISM and ISO 27001 LI/LA

Lead large programmes. Own client relationships. See your recommendations become lasting improvements.

The focus is on larger, longer-term GRC and cyber transformation programmes, not simply a succession of short-term audits.

You’ll work across a broad range of private-sector clients, including organisations operating critical national infrastructure (CNI) and those with operational technology (OT) environments, bringing variety and exposure to complex business and security challenges.

The opportunity

You’ll become a trusted extension of your clients’ teams, helping them strengthen governance, manage cyber risk and navigate frameworks, audits and compliance within a wider improvement programme.

You’ll have the autonomy to work independently

owning delivery and stakeholder relationships, with experienced specialists and other consultants available to support you.

This is an opportunity to take clients beyond identifying gaps: helping them implement recommendations, embed sustainable processes and demonstrate progress over time.

What you’ll do

• Lead substantial GRC programmes for enterprise clients, taking responsibility for scope, planning, delivery and outcomes across multiple workstreams.
• Build trusted relationships with senior security, technology and business stakeholders, acting as the main contact for your engagements.
• Deliver risk assessments, maturity reviews and improvement programmes, drawing on ISO 27001, NCSC CAF, NIST and other relevant frameworks.
• Support ISMS development, audit readiness and ongoing compliance, guiding implementation and coordinating contributions from other consultants where required.

What you’ll bring

• Proven experience personally leading large GRC or cyber risk consulting engagements for enterprise organisations, with accountability for delivery and client outcomes.
• The judgement and confidence to work independently, manage competing priorities and navigate complex stakeholder environments.
• Strong practical ISO 27001 knowledge and broader experience across governance, risk and assurance, including taking recommendations through to implementation.
• Strong client-facing consulting skills, with the ability to challenge constructively and communicate clearly with senior stakeholders.

Experience with CNI, OT environments, third-party risk or wider resilience programmes would be valuable. UK right to work and eligibility for UK Security Check (SC) clearance are required.

Invest in your development

The consultancy is working towards NCSC Assured Cyber Security Consultancy (ACSC) status, making this an attractive time to join a business developing its risk and assurance capability.

For someone looking to deepen their risk management expertise or work towards Chartered Cyber Security Professional status, the role offers opportunities to build relevant experience through substantial client programmes and contribute to the development of the practice.

The business will fund relevant qualifications, including CISSP, CISM and ISO 27001 Lead Implementer or Lead Auditor, supporting your professional development alongside your client work.

#J-18808-Ljbffr