Senior GRC Consultant – Cybersecurity

About the role

The Senior GRC Consultant provides expert guidance to ensure the organisation meets regulatory, legal and policy requirements. You will design, implement, assess and continuously improve governance, risk and compliance programmes aligned with standards such as ISO 27001.

Key responsibilities

• Assess organisational compliance with applicable regulations and standards.
• Design, implement and enhance GRC frameworks, policies and control environments.
• Conduct compliance risk assessments, gap analyses and control testing.
• Map regulatory requirements to internal controls and processes.
• Support internal and external audits, regulatory examinations and supervisory reviews.
• Develop and maintain compliance policies, standards, procedures and governance documentation.
• Facilitate risk and control self‑assessments and compliance workshops.
• Prepare executive‑level reports, dashboards and regulatory submissions.
• Assist with third‑party security assessments and incident management support.

Required profile

• Proven experience in governance, risk and compliance within a cybersecurity context.
• Strong ability to translate regulatory requirements into practical controls and processes.
• Experience working with senior stakeholders across legal, audit, IT and business functions.
• Excellent analytical and documentation skills.

Required skills

• ISO 27001 knowledge and implementation experience.
• Information Security Management System (ISMS) expertise.
• Risk assessment and risk register management.
• Audit support and compliance monitoring.
• Third‑party security assessment capabilities.