Senior GRC Consultant (UK)

As a Senior GRC Consultant within our highly skilled Cyber Security Team, you will be responsible for contributing to our information security consultancy. This includes opportunities to work on information security assessments within sizeable projects, conduct ISO 27001 audits, help implement aspects of ISO 27001, and engage in risk management. Furthermore, there is potential for growth into diverse fields such as PCI DSS, privacy, and business continuity.

Essential experience and skills:

1. Recognized ISO 27001 Lead Auditor qualification and certificate.
2. Significant experience in auditing ISO 27001 based Information Security Management Systems.
3. Significant experience in consulting and implementing Information Security Management Systems.
4. Strong knowledge of regulatory frameworks such as the GDPR.
5. 5 years IT experience, preferably in a senior role.
6. Ability to assess the impact of regulatory changes and advise clients on best practices.
7. Experience of working as the lead auditor or consultant and of working in teams.
8. Outstanding verbal communication skills.
9. Excellent report writing skills with the ability to explain information security risks to non-technical senior stakeholders.
10. Proven project management experience in executing GRC projects within complex organizations.
11. Ability to handle multiple projects and deadlines, ensuring timely delivery of compliance programs.

Desirable qualifications and experience:

1. Information security qualifications such as CISSP, CISA, or CISM.
2. Familiarity with GRC cloud-based systems.
3. Experience of PCI DSS or a PCI QSA.
4. Experience auditing SWIFT CSCF.
5. Developing and providing training.
6. Writing policies and technical documents.
7. Managing a team or leading teams.

Along with a competitive salary, you will have various benefits:

• A hybrid working environment that supports working remotely, with the opportunity to use the offices based on your preference in Oxford or Glasgow, and of course attend team events!
• Private health insurance.
• Eye care plan.
• Employee benefits and discounts platform.
• EAP scheme and well-being platform, including confidential telephone and face-to-face support and counselling.
• Income Protection if unable to work due to illness or injury.

Why choose Dionach?

Dionach is a growing information security company specializing in penetration testing, GRC consultancy, and information assurance services. You will play a pivotal role within Dionach in securing the growth and retention of clients across all sectors, which presents opportunities for both interesting work and career development.

Dionach has leading industry certifications including CREST, Cyber Scheme, CHECK, PCI QSA, SWIFT CSCF, and ISO 27001, with a focus on improving customers’ security and developing people’s skills and qualifications.

Dionach is always looking for self-motivated people who wish to work in a fun, flexible environment, where they can make a difference to the business.

Dionach is proud to be an equal opportunities employer with a commitment to creating an environment that values equality, encourages diversity, and contributes to an inclusive organizational culture.

We strive to create the best working environment possible for each of our employees, whether working from home or from one of our offices. We offer encouragement and support so our employees can develop to their full potential and utilize their unique talents.

Job types: full-time, permanent

Location: remote or hybrid

Gross salary: £60k – £90k per annum, depending on experience and qualifications.

#J-18808-Ljbffr