GRC Consultant HomeBased UK Travel Expected
At Telefnica Tech we are seeking a Cyber Security GRC (Governance Risk and Compliance) Consultant to join our team. This role involves a blend of strategic advisory services cyber security assessments and active participation in client governance processes. This is a new role at Telefnica Tech so the successful candidate will be involved in helping to develop and refine the Cyber Governance & Advisory service.
Key Requirements
- Conduct bespoke advisory engagements with clients to help them gain answers to cyber security challenges and make key strategic decisions.
- Perform cyber security assessments against established frameworks to identify weaknesses and recommend mitigations including roadmaps to maturity.
- Provide expert opinion and insights during governance meetings with clients senior stakeholders.
- Facilitate interactive workshops including tabletop incident response scenarios to enhance clients preparedness for cyber threats and help them agree security roles and responsibilities.
- Work closely with clients to customise security policies to their business requirements.
- Conduct cyber security risk assessments to support clients senior decisionmaking.
- Operate cyber governance processes for clients such as maintaining KPIs running governance forums and performing policy reviews.
- Identify opportunities for sales of our broader portfolio of services in particular the NextDefense suite.
- Stay abreast of the latest cyber security trends and regulations to advise clients effectively.
Qualifications :
- A recognized cybersecurity qualification (e.g. CISSP CISM CRISC) is desirable.
- Minimum of 5 years of experience in a consultancy or security risk management role involving senior stakeholder engagement.
- Proven track record of delivering GRC or similar services in complex business environments.
- Strong understanding of cyber security frameworks (e.g. NIST ISO 27001) and typical cyber security controls.
- Excellent communication and facilitation skills including written communication skills.
- Ability to translate technical risks into business language for diverse audiences.
Additional Information :
Key Words:
GRC Consultant Governance Risk Compliance Risk Management CISSP CISM CRISC NIST NIST2 ISO ISO 27001 Cyber Security Security Cyber Consultant Cyber Security Consultant GRC
We dont believe hiring is a tick box exercise so if you feel that you dont match the job description 100% but would still be a great fit for role please get in touch.
Remote Work :
No
Employment Type :
Fulltime