GRC Cybersecurity Consultant

About the role

The GRC Cybersecurity Consultant will design, implement and maintain governance frameworks that meet NCA and other regulatory requirements, while supporting privacy and data protection initiatives across the organization.

Key responsibilities

• Develop and implement cybersecurity governance frameworks aligned with NCA and regulatory requirements.
• Conduct risk assessments, maintain risk registers, and recommend mitigation strategies.
• Design, implement, and monitor compliance programs, including audits and remediation activities.
• Collaborate with IT, Legal, Finance, and Operations teams to ensure regulatory compliance.
• Monitor regulatory changes and update policies, controls, and procedures accordingly.
• Support cybersecurity policy management, awareness initiatives, and data protection programs.

Required skills

• Strong experience in Governance, Risk & Compliance (GRC) and cybersecurity governance.
• Knowledge of NCA, cybersecurity regulations, and industry standards.
• Experience in risk management, compliance assessments, audits, and reporting.
• Hands‑on experience with cybersecurity policies, controls, and compliance frameworks.
• Understanding of privacy and data protection requirements.
• Excellent analytical, communication, and stakeholder management abilities.