GRC Security Consultant

The GRC Security Consultant role is central to delivering complex Governance, Risk, and Compliance (GRC) engagements independently for Critical National Infrastructure (CNI) clients. As part of NTT DATA UK's Cyber Security Consulting team, this mid-level position empowers individuals to make a tangible impact by leveraging their expertise in UK regulatory frameworks such as the NCSC Cyber Assessment Framework (CAF), ISO 27001, and NIS Regulations. Ideal candidates will excel in client-facing leadership, technical execution, and mentorship roles, advancing both organizational objectives and their personal professional growth.

Responsibilities

• Lead end-to-end execution of GRC consulting engagements, including compliance assessments, risk reviews, and policy framework development.
• Provide strategic advisory services and manage day-to-day client relationships, acting as a trusted partner in matters of GRC.
• Conduct independent evaluations of compliance aligned with NCSC CAF, ISO 27001, NIS Regulations, and other sector-specific security frameworks.
• Design and implement robust governance frameworks, risk management programs, and compliance tracking systems tailored to client needs.
• Facilitate workshops with client teams (5-20 stakeholders) to address risk assessments, control frameworks, and strategic planning.
• Develop high-quality deliverables such as risk registers, compliance roadmaps, remediation plans, and board presentations.
• Serve as mentor to junior consultants (P1 level), supporting skill development and conducting technical reviews of their work.
• Contribute to business development initiatives, including crafting client proposals, leading pitches, and promoting thought leadership.
• Maintain professional certifications and stay abreast of regulatory changes impacting CNI industries.

Qualifications

• 3-5 years of proven experience in GRC consulting, information security, or cyber risk-related roles.
• Substantial expertise in UK regulatory standards including NCSC CAF, NIS Regulations, ISO 27001, with tangible examples of their application.
• Bachelor's degree in cybersecurity, information assurance, computer science, or related fields. A Master's degree is advantageous.
• Certifications such as CISSP, CRISC, CISM, ISO 27001 Lead Auditor/Implementer, or equivalent professional credentials.
• Demonstrated ability to manage client relationships, deliver advisory services, and oversee workstreams independently.
• Experience working within the Critical National Infrastructure sectors (energy, telecommunications, public utilities).
• Background in independently designing and implementing governance programs for enterprise organizations.
• An advanced skill set in risk management methodologies, such as NIST RMF or ISO 31000, used to support client scenarios.

Benefits & Inclusion

We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensures continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options. We are an equal opportunities employer committed to promoting equity and diversity in our employment practices. We are a Disability Confident Committed Employer, dedicated to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long-term health conditions to remove barriers to employment opportunities. We guarantee an interview to applicants who declare a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team.

Working Arrangements & Compensation

Hybrid working model balancing remote work with client site attendance (typically 3-4 days per week at client sites). Frequent travel across the UK (up to 60% of time), reimbursed by NTT DATA UK. Competitive salary package supplemented with professional certification reimbursements, health coverage, and industry-leading benefits programs.