GRC Consultant

London, United Kingdom | Posted on 05/11/2025

• Salary £65,000 – £90,000 / year (Depending on Experience)
• City London
• Province City of London
• Country United Kingdom
• Postal Code EC1A

Mastar Rec is a specialist recruitment and staffing agency supporting high-growth and technology-driven industries across the United Kingdom, the United States, and global markets
. We partner with organizations to deliver tailored staffing solutions focused on quality, integrity, and long-term value for both clients and candidates.

We are seeking an experienced GRC Consultant tosupport and advise clients in managing cyber risks, ensuring compliance with industry standards, and implementing robust information security governance frameworks. You will work across multiple sectors, helping clients improve their risk posture through audit readiness, control assessments, policy development, and regulatory compliance.

The ideal candidate will have deep knowledge of security.frameworks (ISO 27001, NIST, CIS), regulatory mandates (GDPR, DORA, PCI DSS),and a strategic approach to enterprise-level governance and risk programs.

Job Responsibilities

• Advise clients on cybersecurity governance, risk management, and compliance frameworks
• Perform risk assessments
  , control gap analyses, and audits (ISO 27001, SOC2, etc.)
• Develop and implement information security policies
  , procedures, and risk registers
• Lead client engagements related to GDPR
  , DORA
  , and other regulatory requirements
• Support third-party vendor risk assessments and due diligence activities
• Prepare reports and recommendations for CISO, board, and audit committee presentations
• Contribute to certification readiness and internal audit programs
• Collaborate with technical teams to align risk controls with business strategy

Required Skills

• In-depth knowledge of ISO 27001, NIST CSF, GDPR, and risk management frameworks
• Experience performing security risk assessments, internal audits
  , and compliance reviews
• Strong understanding of cybersecurity controls, regulatory mandates
  , and business risk alignment
• Excellent client communication, stakeholder management, and reporting skills
• Familiarity with GRC platforms (e.g., RSA Archer, Service Now GRC, Logic Gate)

Desired Skills

• Certifications such as CISM, CRISC, ISO 27001 Lead Auditor
  , or similar
• Experience working with financial services, healthcare, or SaaS industries
• Understanding of emerging regulations (e.g., DORA, NIS2, AI Act)
• Cloud compliance knowledge (e.g.,
  CSA CCM, AWS/Azure/GCP compliance
  )
• Familiarity with SOC 2, PCI DSS, HIPAA frameworks
• Competitive salary with performance-based bonus
• Hybridor remote work options
• Ongoing professional development and certification support (CISM, CRISC, ISO Lead Auditor)
• 25+days annual leave
• Accessto cybersecurity conferences and industry events