Cyber Security GRC Consultant

Cyber Security GRC Consultant (DV Clearance required)

Salisbury (Onsite, 5 days/week)
Competitive Salary + Benefits

We are looking for an experienced DV Cleared Cyber Security GRC Consultant to support a major security and compliance programme within a highly secure environment.

This is a key role focused on ensuring security controls, governance frameworks, and compliance obligations are effectively aligned with recognised industry standards and contractual requirements. You'll work closely with technical and business stakeholders to identify risks, assess existing controls, and drive security improvements across complex programmes.

You will be responsible for the assessment, governance, assurance, and continuous improvement of security controls, helping organisations maintain robust cyber security practices while meeting regulatory and business requirements.

Key Responsibilities:

• Translate contractual and regulatory security requirements into practical security controls aligned with recognised frameworks.
• Conduct security risk assessments, control reviews, and gap analysis activities.
• Identify security weaknesses and recommend appropriate mitigation strategies.
• Deliver security assurance activities including evidence reviews, compliance validation, and control testing.
• Support the development and enhancement of security policies, standards, and governance processes.
• Collaborate with stakeholders, suppliers, and project teams to ensure security requirements are understood and met.
• Assist with audits, compliance activities, and reporting to technical and non-technical audiences.

We're Looking For:

• Proven experience within Cyber Security Governance, Risk & Compliance (GRC) environments.
• Strong knowledge of NIST CSF, NIST 800-53, ISO 27001, and NCSC CAF.
• Experience conducting risk assessments and security control reviews.
• Ability to interpret regulatory or contractual requirements and translate them into actionable security controls.
• Excellent stakeholder management and communication skills.
• Ability to work independently and manage multiple priorities in a fast-paced environment.

Desirable: CISSP, CISA, CRISC, ISO 27001 certifications, alongside exposure to frameworks such as ISO 22301, ISO 31000, GDPR, PCI-DSS, OWASP, and other security assurance standards.

Security Clearance: Candidates should hold current DV Clearance.

If you're passionate about cyber security governance, risk management, and helping organisations strengthen their security posture, we'd love to hear from you.