GRC Audit & Assurance Consultant
Core
Lead governance, risk, compliance, and assurance activities across complex cyber security programmes, including IT and OT environments, using frameworks like NCSC CAF.
Role type
Senior GRC Audit & Assurance Consultant
Builds
Security governance frameworks, risk management processes, compliance reports, and remediation plans for clients.
Domain
Cyber security governance, risk, and compliance
Required skills
GRC assessment, evidence-led assurance, gap assessment, stakeholder engagement, control design review, regulatory compliance, risk management, policy review, workshop facilitation, executive reporting
Preferred skills
Critical National Infrastructure experience, NIS compliance support, mock assessments, quality reviews
Technologies
NCSC CAF, eCAF, risk registers, architecture artefacts, operational records
Responsibilities
Lead GRC assessments and coordinate with stakeholders; Perform evidence-led assurance by reviewing policies and controls; Conduct gap assessments against regulatory frameworks; Review customer self-assessments and challenge control assertions; Assess governance arrangements and risk-management processes; Facilitate interviews and workshops; Develop evidence-based findings and prioritized remediation recommendations; Consolidate findings into maturity and readiness views; Provide leadership to GRC assessors and review working papers; Present findings to executives and management.
Seniority
Senior, hands-on IC with leadership responsibilities
